$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a10dd9c4-716a-3203-ac5d-b5083b96747d.roa File: a10dd9c4-716a-3203-ac5d-b5083b96747d.roa (raw, json) Hash identifier: IvMMDz+7fQZPtCEhIDqdjc2mSjErQcbze5BcOAmSeEY= Subject key identifier: B3:78:34:18:B1:F7:54:77:5F:2A:91:75:9F:5C:BC:CB:80:BE:F4:BD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B4AA2762B28952AD11F96EBC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a10dd9c4-716a-3203-ac5d-b5083b96747d.roa Signing time: Tue 23 Sep 2025 16:04:51 +0000 ROA not before: Tue 23 Sep 2025 16:04:51 +0000 ROA not after: Mon 22 Dec 2025 17:04:51 +0000 asID: 11404 IP address blocks: 64.144.96.0/20 maxlen: 24 64.144.144.0/20 maxlen: 24 64.144.240.0/20 maxlen: 24 66.134.96.0/19 maxlen: 24 67.102.192.0/19 maxlen: 24 68.165.112.0/20 maxlen: 24 68.167.80.0/20 maxlen: 24 68.167.96.0/19 maxlen: 24 68.167.160.0/20 maxlen: 24 68.167.208.0/20 maxlen: 24 68.167.224.0/20 maxlen: 24 207.145.16.0/20 maxlen: 24 207.145.112.0/20 maxlen: 24 207.145.128.0/20 maxlen: 24 207.145.160.0/20 maxlen: 24 216.254.32.0/19 maxlen: 24 216.254.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:a2:76:2b:28:95:2a:d1:1f:96:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 23 16:04:51 2025 GMT Not After : Dec 22 17:04:51 2025 GMT Subject: CN=1cdc70d7-9fb5-4f4c-953c-971e9b94736a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bd:7f:46:a0:84:9c:e7:ac:70:df:04:96:8c: aa:e4:31:bb:ff:34:f7:81:d5:19:3a:f7:9e:d7:5a: a3:25:c9:2a:f4:16:63:a7:25:0d:ec:7e:73:11:56: 1c:bd:73:0b:d2:8e:49:46:08:eb:de:c2:c4:c7:a9: 57:98:05:55:39:07:3d:f6:a0:de:bd:b0:5f:0a:a9: 2f:9c:aa:2b:de:52:af:dc:8e:48:a1:c8:02:56:84: d9:0c:7b:6e:f7:ac:37:fa:d6:86:74:0f:7c:71:20: 35:6b:76:00:91:7a:22:10:f6:10:37:79:f2:7f:87: 22:cd:10:3c:a1:30:75:5c:95:57:b1:dc:48:87:d2: f9:e8:df:b9:71:9f:af:3d:bf:10:4d:81:91:8e:f3: 8d:fb:df:8d:88:13:43:21:f7:85:95:4d:13:7d:9b: 47:f3:39:b0:06:5c:4c:ce:64:14:cb:95:2f:38:78: 97:73:a7:db:ce:e4:32:87:e4:56:83:62:6d:84:73: 9a:de:5b:d7:47:7e:1e:42:d8:6e:f5:25:ef:7d:dd: 33:bb:5c:b9:57:94:2e:03:78:35:28:3f:7f:13:8e: f4:61:a1:ac:12:10:4a:45:a0:91:17:60:81:66:a2: ca:ed:74:1c:b3:de:f6:fe:3d:de:06:34:65:12:fe: e5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:78:34:18:B1:F7:54:77:5F:2A:91:75:9F:5C:BC:CB:80:BE:F4:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a10dd9c4-716a-3203-ac5d-b5083b96747d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.144.96.0/20 64.144.144.0/20 64.144.240.0/20 66.134.96.0/19 67.102.192.0/19 68.165.112.0/20 68.167.80.0-68.167.127.255 68.167.160.0/20 68.167.208.0-68.167.239.255 207.145.16.0/20 207.145.112.0-207.145.143.255 207.145.160.0/20 216.254.32.0/19 216.254.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c6:48:fb:fa:d4:f0:ff:15:b2:a9:4f:b5:5f:a5:f3:89:49: d1:51:ee:c1:80:28:34:9e:56:bf:87:4c:74:5e:e1:69:0c:e8: 4c:4a:c4:86:5a:1c:20:63:17:b4:71:2a:44:85:1c:b0:7a:2d: a0:c9:d8:44:c2:08:2b:17:79:4b:49:27:26:2b:cd:99:c6:49: 35:75:c1:19:ff:04:d8:2d:4e:13:a1:34:83:da:33:8f:b7:e5: 93:f0:1f:8f:5b:92:14:50:9a:a9:31:b1:7a:bf:6d:e5:c8:d3: e6:9d:96:fd:ae:9b:55:81:e1:b6:9a:cf:69:9e:d0:81:05:53: 80:ed:7d:ff:c3:38:84:cb:76:54:31:5a:5a:6a:8c:11:9b:8c: 33:24:4f:65:b5:db:58:c4:6b:01:6b:c4:08:72:01:ed:ab:43: 67:ff:06:cd:bb:27:18:11:7f:74:da:46:90:05:e7:fc:85:ec: fa:d0:75:4e:ae:b5:0b:71:31:f6:70:f5:01:3f:19:28:ad:e2: 8c:f9:41:17:96:b1:44:2a:96:9f:b9:ac:e7:86:d0:a5:24:4d: a8:c9:47:39:94:90:48:ab:02:fd:83:34:6d:5c:3b:21:87:5a: fe:3d:4a:47:7d:b1:bf:e3:f2:85:48:57:db:b5:9f:1e:9e:52: 1e:f3:48:8a -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWEtKonYrKJUq0R+W68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDkyMzE2MDQ1MVoXDTI1MTIyMjE3MDQ1MVowLzEtMCsGA1UEAxMk MWNkYzcwZDctOWZiNS00ZjRjLTk1M2MtOTcxZTliOTQ3MzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb1/RqCEnOescN8Eloyq5DG7/zT3gdUZOvee 11qjJckq9BZjpyUN7H5zEVYcvXML0o5JRgjr3sLEx6lXmAVVOQc99qDevbBfCqkv nKor3lKv3I5IocgCVoTZDHtu96w3+taGdA98cSA1a3YAkXoiEPYQN3nyf4cizRA8 oTB1XJVXsdxIh9L56N+5cZ+vPb8QTYGRjvON+9+NiBNDIfeFlU0TfZtH8zmwBlxM zmQUy5UvOHiXc6fbzuQyh+RWg2JthHOa3lvXR34eQthu9SXvfd0zu1y5V5QuA3g1 KD9/E470YaGsEhBKRaCRF2CBZqLK7XQcs972/j3eBjRlEv7lJQIDAQABo4IDvDCC A7gwHQYDVR0OBBYEFLN4NBix91R3XyqRdZ9cvMuAvvS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTEwZGQ5YzQtNzE2YS0z MjAzLWFjNWQtYjUwODNiOTY3NDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBECQYAME BECQkAMEBECQ8AMEBUKGYAMEBUNmwAMEBESlcDAMAwQERKdQAwQHRKcAAwQERKeg MAwDBAREp9ADBAREp+ADBATPkRAwDAMEBM+RcAMEBM+RgAMEBM+RoAMEBdj+IAME Bdj+YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQC2xkj7+tTw/xWyqU+1X6XziUnRUe7BgCg0nla/h0x0XuFp DOhMSsSGWhwgYxe0cSpEhRywei2gydhEwggrF3lLSScmK82Zxkk1dcEZ/wTYLU4T oTSD2jOPt+WT8B+PW5IUUJqpMbF6v23lyNPmnZb9rptVgeG2ms9pntCBBVOA7X3/ wziEy3ZUMVpaaowRm4wzJE9ltdtYxGsBa8QIcgHtq0Nn/wbNuycYEX902kaQBef8 hez60HVOrrULcTH2cPUBPxkoreKM+UEXlrFEKpafuaznhtClJE2oyUc5lJBIqwL9 gzRtXDshh1r+PUpHfbG/4/KFSFfbtZ8enlIe80iK -----END CERTIFICATE-----Generated at Sat Oct 11 08:52:28 2025 by rpki-client