$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3e519e15-ed2f-37f7-b867-1bc35f84f338.roa File: 3e519e15-ed2f-37f7-b867-1bc35f84f338.roa (raw, json) Hash identifier: OZPth3wgK79bK1so779GjNejLhd7Vr8LZ4a2eHTC6ZU= Subject key identifier: 89:9B:1D:0A:4E:E3:0D:5C:8A:B5:2C:2D:1C:F2:D7:F5:B7:61:C5:D7 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584AF9B0915DA005F32D9C226D80 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3e519e15-ed2f-37f7-b867-1bc35f84f338.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 62240 IP address blocks: 65.254.57.0/24 maxlen: 24 65.254.60.0/24 maxlen: 24 72.9.230.0/24 maxlen: 24 72.9.245.0/24 maxlen: 24 72.9.247.0/24 maxlen: 24 75.127.119.0/24 maxlen: 24 205.251.132.0/24 maxlen: 24 205.251.133.0/24 maxlen: 24 205.251.134.0/24 maxlen: 24 207.210.76.0/24 maxlen: 24 207.210.77.0/24 maxlen: 24 207.210.78.0/24 maxlen: 24 207.210.81.0/24 maxlen: 24 209.51.148.0/24 maxlen: 24 209.51.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:b0:91:5d:a0:05:f3:2d:9c:22:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=9eb633b6-c1bd-4c22-a20a-35077e1c6c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a4:7d:b1:f2:38:a5:ee:8b:e8:a4:73:96:e4: c8:de:87:7b:5b:e0:a9:99:15:8f:dc:9c:7e:ab:8b: d3:75:40:b9:42:19:48:9c:f6:fd:af:0d:28:9e:79: 3b:5d:bc:70:63:66:5b:e7:bb:2d:0f:40:3e:d5:03: 5b:b8:8e:d7:02:e7:62:23:ce:32:4f:13:c0:66:42: 31:b1:17:b3:c7:18:f0:aa:ca:02:d0:92:d5:67:4d: de:3d:04:8e:37:ae:e6:78:e2:8e:e9:1d:dd:f2:fe: df:11:fe:12:4c:dc:3b:19:21:73:5e:37:e4:24:0d: 40:15:74:db:15:8b:95:60:95:30:fe:9f:f8:4f:76: 8f:f3:21:07:e1:db:1a:ec:79:a0:b3:6d:d7:a3:4b: a5:de:7e:92:ca:d1:7b:d5:12:45:03:59:86:bd:f1: 03:58:c9:31:b3:4a:39:0c:d3:09:22:69:d7:48:24: 6d:8c:61:bc:0a:ba:70:58:a1:34:a6:7c:94:af:03: 58:a6:e9:63:f5:46:93:96:17:f0:de:ab:35:c7:5e: b0:54:1e:e3:d8:3c:6b:00:3c:bc:6d:68:70:17:c8: 1f:08:5d:d4:81:78:5f:9d:b7:05:bd:93:99:39:66: 4e:89:0d:4f:6f:80:e9:10:2d:17:3e:b8:a9:2d:16: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9B:1D:0A:4E:E3:0D:5C:8A:B5:2C:2D:1C:F2:D7:F5:B7:61:C5:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3e519e15-ed2f-37f7-b867-1bc35f84f338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 65.254.57.0/24 65.254.60.0/24 72.9.230.0/24 72.9.245.0/24 72.9.247.0/24 75.127.119.0/24 205.251.132.0-205.251.134.255 207.210.76.0-207.210.78.255 207.210.81.0/24 209.51.148.0/24 209.51.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:8e:ec:89:29:74:3e:06:db:dc:61:06:12:43:b7:86:c7:1b: ac:bf:8a:ec:67:73:d8:8f:fd:98:3e:65:dd:2f:b7:80:23:51: 19:43:20:9b:b6:c1:bf:7e:57:bd:3a:f6:72:c9:b3:ff:91:d6: cb:13:cb:b8:30:f8:c0:55:a8:29:08:d8:2f:8a:09:02:5b:32: 5f:01:b8:9e:d7:40:08:3f:1f:26:81:1b:c2:b7:74:1d:1c:9e: 65:19:76:e0:9e:d1:34:66:09:c0:a8:2e:23:96:2b:a1:d9:e8: 12:7a:89:f2:83:b1:6b:3d:92:c0:d5:09:19:05:41:f2:e4:a9: 31:ba:b1:d9:ce:7a:9d:a6:a6:3a:f7:a2:fe:2c:69:bb:71:57: cd:0a:8d:7b:11:85:f8:ca:7a:d8:b0:3c:5f:85:09:f5:7f:a7: 8b:e9:af:eb:c7:8b:81:79:53:d3:23:b3:13:30:2b:c7:1e:72: 34:c4:aa:43:fb:44:c6:f3:38:77:ab:5b:1f:64:0c:3a:ac:d2: 3e:9c:79:23:1d:2f:0a:7c:c3:2d:ba:5b:8e:42:c0:db:49:cb: bf:1d:58:7f:8c:73:0f:e4:8c:ba:e5:37:95:df:60:dc:fd:56: 0a:45:b3:ea:a3:01:3d:28:07:65:7e:57:b5:77:75:a1:85:be: a5:b9:bf:fe -----BEGIN CERTIFICATE----- MIIGjzCCBXegAwIBAgIUAQ0Mn0MoWEr5sJFdoAXzLZwibYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk OWViNjMzYjYtYzFiZC00YzIyLWEyMGEtMzUwNzdlMWM2YzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqR9sfI4pe6L6KRzluTI3od7W+CpmRWP3Jx+ q4vTdUC5QhlInPb9rw0onnk7XbxwY2Zb57stD0A+1QNbuI7XAudiI84yTxPAZkIx sRezxxjwqsoC0JLVZ03ePQSON67meOKO6R3d8v7fEf4STNw7GSFzXjfkJA1AFXTb FYuVYJUw/p/4T3aP8yEH4dsa7Hmgs23Xo0ul3n6SytF71RJFA1mGvfEDWMkxs0o5 DNMJImnXSCRtjGG8CrpwWKE0pnyUrwNYpulj9UaTlhfw3qs1x16wVB7j2DxrADy8 bWhwF8gfCF3UgXhfnbcFvZOZOWZOiQ1Pb4DpEC0XPripLRZ7RwIDAQABo4IDoTCC A50wHQYDVR0OBBYEFImbHQpO4w1cirUsLRzy1/W3YcXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvM2U1MTllMTUtZWQyZi0z N2Y3LWI4NjctMWJjMzVmODRmMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQAQf45AwQA Qf48AwQASAnmAwQASAn1AwQASAn3AwQAS393MAwDBALN+4QDBADN+4YwDAMEAs/S TAMEAM/STgMEAM/SUQMEANEzlAMEANEzljBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2juyJKXQ+BtvcYQYS Q7eGxxusv4rsZ3PYj/2YPmXdL7eAI1EZQyCbtsG/fle9OvZyybP/kdbLE8u4MPjA VagpCNgvigkCWzJfAbie10AIPx8mgRvCt3QdHJ5lGXbgntE0ZgnAqC4jliuh2egS eonyg7FrPZLA1QkZBUHy5KkxurHZznqdpqY696L+LGm7cVfNCo17EYX4ynrYsDxf hQn1f6eL6a/rx4uBeVPTI7MTMCvHHnI0xKpD+0TG8zh3q1sfZAw6rNI+nHkjHS8K fMMtuluOQsDbScu/HVh/jHMP5Iy65TeV32Dc/VYKRbPqowE9KAdlfle1d3Whhb6l ub/+ -----END CERTIFICATE-----Generated at Tue Aug 26 14:09:08 2025 by rpki-client