$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa File: 3e6eca20-984c-38bb-912e-539ca9ab80f4.roa (raw, json) Hash identifier: fxjvah7UrnL6dGYRjHMYXEdmt32N8LZFICOO0bgjaVU= Subject key identifier: B1:9B:D8:08:BC:B2:11:95:F7:50:65:26:91:30:09:FF:11:8D:12:D7 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B2FC18E9D707F2BE62621A140 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 6621 IP address blocks: 72.168.0.0/19 maxlen: 19 72.168.80.0/21 maxlen: 21 72.168.87.0/24 maxlen: 24 72.168.88.0/21 maxlen: 21 72.168.94.0/24 maxlen: 24 72.168.95.0/24 maxlen: 24 72.168.96.0/19 maxlen: 19 72.168.96.0/21 maxlen: 21 72.168.128.0/22 maxlen: 22 72.168.132.0/22 maxlen: 22 72.168.136.0/22 maxlen: 22 72.168.140.0/22 maxlen: 22 72.168.142.0/23 maxlen: 23 72.168.144.0/22 maxlen: 22 72.168.148.0/22 maxlen: 22 72.168.152.0/22 maxlen: 22 72.168.156.0/22 maxlen: 22 72.168.160.0/22 maxlen: 22 72.168.164.0/22 maxlen: 22 72.168.168.0/22 maxlen: 22 72.168.172.0/22 maxlen: 22 72.168.176.0/22 maxlen: 22 72.168.180.0/22 maxlen: 22 72.168.184.0/22 maxlen: 22 72.168.188.0/22 maxlen: 22 72.168.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8e:9d:70:7f:2b:e6:26:21:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=b8bfaf58-6727-4960-b10a-49bf3271d6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:65:1d:be:a8:7c:50:46:3e:a9:27:19:34:4c: 3a:e4:15:4e:f7:ff:f8:8b:9e:9d:89:a4:a6:c3:e9: 12:be:fc:ed:3e:5d:39:15:0c:71:d9:4b:05:b4:6a: 1f:c0:81:88:27:1f:cf:81:1f:21:ee:75:41:53:d8: 8e:7c:39:3e:17:b9:dc:6d:0a:df:0d:8f:11:4e:1d: 60:68:3c:84:e5:4b:ed:2f:18:6f:8e:f4:be:c5:46: b2:8b:ce:41:b9:44:50:60:43:b1:77:37:0a:73:7f: 71:5c:56:27:80:4e:4d:27:1b:dc:49:77:b6:f8:d6: 24:f4:c6:26:f8:38:d4:b6:97:d4:97:f6:d8:cd:8b: 07:65:27:36:3a:ae:af:32:ca:cb:39:ba:78:c3:1e: 1c:23:4b:e8:30:49:84:87:38:8a:c1:35:18:38:47: 17:2c:17:da:5e:1e:f7:6d:2a:84:ec:e7:51:1d:da: aa:ff:79:14:ef:f5:9e:40:58:dd:ae:cc:e0:09:1f: 0b:0f:35:5b:ee:c7:f2:8b:5f:0f:ed:e5:3b:fb:5b: 8f:bc:5b:d3:b3:31:38:11:59:16:42:28:88:b6:3a: 9f:8f:33:3f:37:67:73:93:85:41:64:12:9e:28:5a: a4:ad:be:a1:03:1e:c5:c4:7c:de:f7:ef:3a:e0:b9: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9B:D8:08:BC:B2:11:95:F7:50:65:26:91:30:09:FF:11:8D:12:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 72.168.0.0/19 72.168.80.0-72.168.191.255 72.168.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:82:59:1b:08:af:91:08:f4:3c:dd:77:2f:61:6c:8f:55:ff: 54:a2:91:54:9b:b3:b4:55:81:45:c5:54:ce:f7:d4:ba:77:74: 32:82:8c:51:0d:e3:8f:e5:6d:24:eb:3a:4d:b7:e4:00:58:ff: dc:71:82:1d:e2:70:53:08:1b:83:15:e6:b2:f2:2d:23:6c:48: 51:86:37:79:ff:9c:0c:78:3a:7a:5f:c3:ec:ea:4c:b3:27:97: 61:b7:92:b0:e1:7a:95:55:23:cd:b5:b9:90:74:93:ca:6e:ae: a4:f7:ee:bc:9e:6b:c1:78:8e:d0:07:cd:9e:e6:3a:58:2d:65: 3e:52:f2:c1:a6:24:f5:c2:5f:73:ec:e5:fe:70:0c:51:37:af: 61:71:25:78:01:b4:ed:99:d2:08:50:85:f8:58:2a:8d:cb:35: 92:ca:c0:90:c5:a5:c5:3b:d6:c5:bf:6d:9e:8a:3f:4a:46:10: 13:87:57:0b:31:db:93:6f:8c:a7:d0:58:ba:92:49:82:d5:b3: 37:a5:90:3b:6b:e8:7d:1a:d3:da:8c:fe:b1:4b:4f:3d:74:4b: a6:af:8e:71:92:b0:d3:3e:a7:34:31:d7:2f:c8:8b:fe:f2:eb: 23:fd:78:50:ea:cd:b8:92:2e:36:53:55:6d:cf:8b:a5:e5:18: 83:a5:cf:2b -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEsvwY6dcH8r5iYhoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YjhiZmFmNTgtNjcyNy00OTYwLWIxMGEtNDliZjMyNzFkNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmUdvqh8UEY+qScZNEw65BVO9//4i56diaSm w+kSvvztPl05FQxx2UsFtGofwIGIJx/PgR8h7nVBU9iOfDk+F7ncbQrfDY8RTh1g aDyE5UvtLxhvjvS+xUayi85BuURQYEOxdzcKc39xXFYngE5NJxvcSXe2+NYk9MYm +DjUtpfUl/bYzYsHZSc2Oq6vMsrLObp4wx4cI0voMEmEhziKwTUYOEcXLBfaXh73 bSqE7OdRHdqq/3kU7/WeQFjdrszgCR8LDzVb7sfyi18P7eU7+1uPvFvTszE4EVkW QiiItjqfjzM/N2dzk4VBZBKeKFqkrb6hAx7FxHze9+864LlhvwIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFLGb2Ai8shGV91BlJpEwCf8RjRLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvM2U2ZWNhMjAtOTg0Yy0z OGJiLTkxMmUtNTM5Y2E5YWI4MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQFSKgAMAwD BARIqFADBAZIqIADBAVIqOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAU4JZGwivkQj0PN13L2Fsj1X/VKKR VJuztFWBRcVUzvfUund0MoKMUQ3jj+VtJOs6TbfkAFj/3HGCHeJwUwgbgxXmsvIt I2xIUYY3ef+cDHg6el/D7OpMsyeXYbeSsOF6lVUjzbW5kHSTym6upPfuvJ5rwXiO 0AfNnuY6WC1lPlLywaYk9cJfc+zl/nAMUTevYXEleAG07ZnSCFCF+Fgqjcs1ksrA kMWlxTvWxb9tnoo/SkYQE4dXCzHbk2+Mp9BYupJJgtWzN6WQO2vofRrT2oz+sUtP PXRLpq+OcZKw0z6nNDHXL8iL/vLrI/14UOrNuJIuNlNVbc+LpeUYg6XPKw== -----END CERTIFICATE-----Generated at Sat Oct 11 13:29:58 2025 by rpki-client