$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa File: c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa (raw, json) Hash identifier: AiEDXxN5pPLbEt+lkBKS9mQAsqU352f7SxmFd035uN4= Subject key identifier: FF:C4:11:05:FC:F3:4E:B5:FA:3F:95:F4:FB:D3:85:A9:E3:16:7D:50 Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F4328584B03169649511BACA86E6D8070 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 5009 IP address blocks: 64.56.0.0/19 maxlen: 24 64.237.64.0/19 maxlen: 24 66.186.224.0/19 maxlen: 24 108.179.160.0/19 maxlen: 24 159.48.192.0/19 maxlen: 24 160.223.208.0/20 maxlen: 24 205.233.40.0/22 maxlen: 24 206.124.192.0/19 maxlen: 24 206.204.112.0/20 maxlen: 24 208.97.32.0/20 maxlen: 24 209.62.192.0/19 maxlen: 24 209.124.192.0/19 maxlen: 24 209.124.224.0/19 maxlen: 24 216.115.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:96:49:51:1b:ac:a8:6e:6d:80:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=b1989aa8-ddb8-48b9-833b-71567ee07c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:0e:53:02:6b:2b:fa:ef:c6:4c:20:19:e4: 79:9b:50:58:10:a9:d8:85:7f:9e:df:ac:8a:11:d2: 60:92:d1:fa:c8:4c:9c:0b:31:0b:9c:90:ae:21:12: 9d:40:02:34:27:bb:ff:c7:92:4f:c9:aa:f6:23:8d: 6f:26:38:1b:fa:b0:74:05:cf:b5:f2:f0:44:40:c5: f4:40:2d:a0:16:b2:b6:81:0d:0a:32:43:e3:15:cc: 72:12:9f:1b:34:52:a1:00:50:01:83:7d:22:1e:f6: f1:e5:58:e3:c8:96:8b:8e:70:4a:cc:6c:e0:f4:d9: 59:89:aa:ea:5e:ac:05:a7:37:4b:a4:18:3d:9a:f4: 9a:12:02:93:c8:94:29:62:c8:cd:c5:db:58:03:27: 68:9c:a5:26:b0:39:e4:c9:46:ed:b0:1e:5a:44:02: e6:bb:81:a9:44:bc:85:e7:0a:e7:64:9a:4c:bb:eb: ff:0a:76:58:44:11:6b:d5:90:d1:55:56:37:61:fb: 86:c6:e0:68:13:98:1e:24:89:b1:aa:5f:6c:10:e1: af:c4:4e:84:6b:63:2a:ee:c0:b7:c4:48:84:51:a6: 54:20:15:eb:6a:b9:99:ed:e5:59:4d:c4:cc:0c:2e: 55:54:94:b3:19:af:16:1f:a0:4f:11:ca:44:7a:d2: 29:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C4:11:05:FC:F3:4E:B5:FA:3F:95:F4:FB:D3:85:A9:E3:16:7D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: 64.56.0.0/19 64.237.64.0/19 66.186.224.0/19 108.179.160.0/19 159.48.192.0/19 160.223.208.0/20 205.233.40.0/22 206.124.192.0/19 206.204.112.0/20 208.97.32.0/20 209.62.192.0/19 209.124.192.0/18 216.115.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:7a:97:6a:cb:ad:28:27:12:a3:23:72:3e:5a:15:e7:64:7a: d9:64:55:a0:6a:ea:0e:f8:2d:56:91:63:e4:53:4c:1e:22:d9: c8:0b:d2:95:58:ec:f7:8c:56:44:22:3b:96:ab:16:87:6b:6a: 9b:4a:a1:f3:cc:dd:d0:10:fd:5d:1d:8b:63:59:e1:7b:13:b4: 68:52:f1:72:25:ea:8a:35:ae:41:17:5f:48:f7:da:7d:a2:90: 80:0b:6d:b9:f7:ce:d9:be:b6:d0:81:da:af:09:9f:1c:6d:b5: 15:5b:8f:e5:9a:96:04:9a:82:3e:8b:ae:a0:c3:bd:7b:33:3a: 25:ce:77:c8:1a:70:7c:0f:cd:a5:12:16:53:3b:e7:7f:27:cc: cd:fa:e0:ee:b2:2a:e6:fb:8d:82:3d:98:d2:fd:0f:96:92:60: 71:b2:ba:2d:20:05:b1:06:fa:78:92:3b:c3:07:13:6a:03:47: 3a:78:00:ba:5a:3f:02:79:8f:aa:a7:47:45:53:79:f4:7d:03: 3c:52:f8:2d:c6:e9:5a:33:48:90:af:f2:21:24:c2:a9:1e:88: 87:19:0d:3f:ed:c4:77:8e:d0:b9:c0:67:c7:6f:e2:f2:b8:f2: fb:48:ec:ce:b5:f9:cb:14:7c:b4:18:5e:81:44:35:90:d8:57: 51:b0:69:cf -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEsDFpZJURusqG5tgHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk YjE5ODlhYTgtZGRiOC00OGI5LTgzM2ItNzE1NjdlZTA3YzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRcOUwJrK/rvxkwgGeR5m1BYEKnYhX+e36yK EdJgktH6yEycCzELnJCuIRKdQAI0J7v/x5JPyar2I41vJjgb+rB0Bc+18vBEQMX0 QC2gFrK2gQ0KMkPjFcxyEp8bNFKhAFABg30iHvbx5VjjyJaLjnBKzGzg9NlZiarq XqwFpzdLpBg9mvSaEgKTyJQpYsjNxdtYAydonKUmsDnkyUbtsB5aRALmu4GpRLyF 5wrnZJpMu+v/CnZYRBFr1ZDRVVY3YfuGxuBoE5geJImxql9sEOGvxE6Ea2Mq7sC3 xEiEUaZUIBXrarmZ7eVZTcTMDC5VVJSzGa8WH6BPEcpEetIpFwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFP/EEQX88061+j+V9PvThanjFn1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvYzVjMWFiOWEtZjk5ZC0z Yjc1LWI3ZjQtOThmYmVmMzE1ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQFQDgAAwQF QO1AAwQFQrrgAwQFbLOgAwQFnzDAAwQEoN/QAwQCzekoAwQFznzAAwQEzsxwAwQE 0GEgAwQF0T7AAwQG0XzAAwQF2HOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIt6l2rLrSgnEqMjcj5aFedk etlkVaBq6g74LVaRY+RTTB4i2cgL0pVY7PeMVkQiO5arFodraptKofPM3dAQ/V0d i2NZ4XsTtGhS8XIl6oo1rkEXX0j32n2ikIALbbn3ztm+ttCB2q8JnxxttRVbj+Wa lgSagj6LrqDDvXszOiXOd8gacHwPzaUSFlM7538nzM364O6yKub7jYI9mNL9D5aS YHGyui0gBbEG+niSO8MHE2oDRzp4ALpaPwJ5j6qnR0VTefR9AzxS+C3G6VozSJCv 8iEkwqkeiIcZDT/txHeO0LnAZ8dv4vK48vtI7M61+csUfLQYXoFENZDYV1Gwac8= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:07 2025 by rpki-client