$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa File: 8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa (raw, json) Hash identifier: tqc9fREPmvpxuFdJYold1Y2Yltci7Wsb41DVAXUfOX8= Subject key identifier: 9B:37:6D:61:8F:FC:FA:FF:18:3E:1A:8A:B0:4A:09:0C:B5:BE:C3:E7 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B2FC18EB99F21506205D51F40 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 6621 IP address blocks: 72.169.32.0/19 maxlen: 19 72.169.64.0/22 maxlen: 22 72.169.68.0/23 maxlen: 23 72.169.70.0/24 maxlen: 24 72.169.72.0/24 maxlen: 24 72.169.74.0/23 maxlen: 23 72.169.76.0/22 maxlen: 22 72.169.80.0/22 maxlen: 22 72.169.81.0/24 maxlen: 24 72.169.82.0/23 maxlen: 23 72.169.84.0/22 maxlen: 22 72.169.88.0/22 maxlen: 22 72.169.92.0/22 maxlen: 22 72.169.96.0/22 maxlen: 22 72.169.100.0/22 maxlen: 22 72.169.104.0/22 maxlen: 22 72.169.108.0/22 maxlen: 22 72.169.112.0/20 maxlen: 20 72.169.192.0/20 maxlen: 20 72.169.208.0/22 maxlen: 22 72.169.212.0/23 maxlen: 23 72.169.214.0/24 maxlen: 24 72.169.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8e:b9:9f:21:50:62:05:d5:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=f1d7cd22-3dfc-4fb2-a548-af5cd7f38666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:de:27:b2:9d:39:d6:f6:a1:2a:c5:3c:f1: c5:ec:6c:20:f3:64:12:8b:78:c3:dd:0a:30:9a:17: f1:5b:92:35:bc:ba:ff:f0:d3:36:e0:41:ef:36:23: 16:7f:0c:9f:37:3f:ca:49:48:8c:c4:f6:b8:86:67: e0:ca:0e:18:4a:d8:8b:7a:41:dd:1f:ed:05:56:c3: 5c:8e:70:41:8d:62:53:bf:26:7b:bd:df:1d:a2:bf: 02:fa:80:ca:6c:cc:96:c1:72:ed:a3:e5:02:21:e1: b7:95:a7:66:1e:c8:95:05:6d:08:8c:2b:cc:71:6b: 9f:37:0c:dd:0f:78:3e:a4:86:03:e7:02:82:42:a2: 15:fe:bf:da:60:66:39:f5:79:0e:38:23:ef:26:75: 4c:8f:cc:66:86:5d:b6:91:bb:45:7c:d8:92:cc:05: 7c:b9:1b:cb:9b:49:4d:99:e6:b0:3d:9a:37:7d:11: 9f:3d:44:f3:ab:3e:6b:f9:21:47:67:44:1b:aa:0a: 41:c8:1b:b7:51:98:68:09:77:c9:fc:57:ed:33:89: f6:5c:0b:e2:d3:95:ae:2c:60:65:24:c9:0d:f0:92: 47:83:12:3d:ea:03:83:c3:a9:cc:2b:1c:cb:a9:30: 61:4a:a5:5a:b0:31:b1:c2:db:29:45:9f:fd:c3:12: 8e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:37:6D:61:8F:FC:FA:FF:18:3E:1A:8A:B0:4A:09:0C:B5:BE:C3:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/8af3e43d-1e1a-3d65-afcc-f088b60a978d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 72.169.32.0-72.169.70.255 72.169.72.0/24 72.169.74.0-72.169.127.255 72.169.192.0-72.169.214.255 72.169.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:16:e4:4f:53:8a:4d:b9:81:b8:da:f4:34:a5:2e:d1:59:05: 83:33:a1:ac:45:8f:ae:32:12:67:fe:5d:92:82:f8:31:e8:2c: 45:fc:a1:4a:98:4d:d6:fd:c2:e9:77:32:f1:5c:87:ac:cb:4b: 25:c0:37:fc:02:25:6f:e1:95:91:9b:77:ac:3c:b2:54:60:97: 29:4e:e1:a8:1d:1e:ca:6f:3b:8c:86:20:71:14:c6:8d:32:e8: 2e:4e:7d:17:79:b4:67:db:7d:56:8b:f7:61:16:30:53:77:6a: 10:c8:e3:4c:c0:56:86:0d:4b:a0:c1:99:26:76:62:62:2b:d5: 02:9b:cd:82:8c:bf:62:6a:39:4b:34:7e:a1:4c:30:a0:f5:7c: d3:01:12:8c:3a:87:88:8a:09:1b:14:53:43:b1:a4:ac:e1:ba: 55:02:ba:66:27:b6:17:6c:7d:16:3d:1f:1b:12:8a:7e:7a:f9: 1d:34:0d:d8:ce:3a:78:fc:06:a8:4c:6e:f2:6b:f4:75:75:f2: 3a:78:6b:bc:3b:5a:23:08:bf:64:34:53:39:e2:b4:3e:25:16: 96:c4:cb:9b:86:04:16:5d:d0:f7:b0:6e:65:cc:ee:d7:d3:cd: c0:85:e4:63:1a:60:a3:87:19:a1:9d:3c:3b:46:38:25:ef:10: 45:86:a4:12 -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWEsvwY65nyFQYgXVH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZjFkN2NkMjItM2RmYy00ZmIyLWE1NDgtYWY1Y2Q3ZjM4NjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkreJ7KdOdb2oSrFPPHF7Gwg82QSi3jD3Qow mhfxW5I1vLr/8NM24EHvNiMWfwyfNz/KSUiMxPa4hmfgyg4YStiLekHdH+0FVsNc jnBBjWJTvyZ7vd8dor8C+oDKbMyWwXLto+UCIeG3ladmHsiVBW0IjCvMcWufNwzd D3g+pIYD5wKCQqIV/r/aYGY59XkOOCPvJnVMj8xmhl22kbtFfNiSzAV8uRvLm0lN meawPZo3fRGfPUTzqz5r+SFHZ0QbqgpByBu3UZhoCXfJ/FftM4n2XAvi05WuLGBl JMkN8JJHgxI96gODw6nMKxzLqTBhSqVasDGxwtspRZ/9wxKOwQIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFJs3bWGP/Pr/GD4airBKCQy1vsPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvOGFmM2U0M2QtMWUxYS0z ZDY1LWFmY2MtZjA4OGI2MGE5NzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBAVIqSAD BABIqUYDBABIqUgwDAMEAUipSgMEB0ipADAMAwQGSKnAAwQASKnWAwQDSKnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0W5E9Tik25gbja9DSlLtFZBYMzoaxFj64yEmf+XZKC+DHoLEX8oUqY Tdb9wul3MvFch6zLSyXAN/wCJW/hlZGbd6w8slRglylO4agdHspvO4yGIHEUxo0y 6C5OfRd5tGfbfVaL92EWMFN3ahDI40zAVoYNS6DBmSZ2YmIr1QKbzYKMv2JqOUs0 fqFMMKD1fNMBEow6h4iKCRsUU0OxpKzhulUCumYnthdsfRY9HxsSin56+R00DdjO Onj8BqhMbvJr9HV18jp4a7w7WiMIv2Q0UznitD4lFpbEy5uGBBZd0PewbmXM7tfT zcCF5GMaYKOHGaGdPDtGOCXvEEWGpBI= -----END CERTIFICATE-----Generated at Sat Oct 11 13:24:30 2025 by rpki-client