$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa File: 0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa (raw, json) Hash identifier: eSe14z9nuMPoj+SErgdevIFrim1Nkz2sh9ez3PdZBDQ= Subject key identifier: 51:74:0D:60:0E:97:AA:E4:E0:63:11:70:A3:DE:D0:32:90:AF:DE:C3 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F521D67A2F05A66FB7A7060 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:1d:67:a2:f0:5a:66:fb:7a:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=4a3b24fa-dad6-4c34-ab84-7f9049a63f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8c:e3:e8:4f:b0:93:3a:fd:4c:26:f6:31:66: 6b:9b:a2:bb:ba:33:28:c5:b5:bd:8c:a1:e9:96:10: 34:69:a9:ba:6a:60:58:6b:6d:f7:e7:c9:04:25:85: 3a:2b:d8:9c:0d:c9:cd:ae:cb:20:00:95:a8:80:0c: e6:2b:0d:23:54:6d:e9:1a:0e:b4:3d:cd:f5:f4:6f: f5:0d:f2:3e:1e:70:01:8d:9d:7b:02:aa:ad:31:b7: d7:2c:6b:6d:53:76:b0:07:30:b0:7e:e5:b4:08:97: 04:97:35:81:fd:55:31:b8:90:93:d7:7b:31:f4:c4: 6f:a0:95:90:2b:1f:be:8d:c2:2b:51:b5:48:fa:4d: b7:ad:cd:ab:1f:68:21:2f:d3:e0:c9:38:ad:06:e8: ac:7f:af:c1:63:2c:cb:2b:76:6c:de:16:9d:ee:0e: b4:af:ff:35:5b:53:b7:92:fe:41:c1:a4:4e:fb:30: cc:a7:52:5d:32:12:f3:e9:8a:20:02:f7:6b:a9:fa: 21:07:a3:88:ca:50:86:dd:22:c8:76:e3:a9:fc:de: fa:5a:96:f0:8c:5e:eb:33:7f:8d:f8:d1:e7:be:b6: a6:68:65:e0:bf:7f:5f:b5:65:7e:3e:cd:c0:78:54: 02:39:24:aa:67:b5:dd:5e:fd:52:35:59:59:90:aa: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:74:0D:60:0E:97:AA:E4:E0:63:11:70:A3:DE:D0:32:90:AF:DE:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0a596e23-0ebb-3b0f-8bea-ca0953f008ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:f6:3c:ff:d0:34:a6:08:b3:9f:17:2d:2d:1e:23:a7:5e:24: 39:d1:b7:bf:02:c9:36:19:b4:a7:b8:14:a6:54:ba:fc:d0:d1: 58:6c:f6:7a:f6:eb:84:25:89:62:26:ad:60:b4:d9:5b:9a:e6: 9b:58:a4:36:00:96:27:0c:36:94:eb:3e:ba:40:10:e8:67:8a: 45:7e:cd:80:a7:61:53:00:76:2e:6e:3e:9e:57:83:99:1c:49: 30:7c:94:7d:d1:15:fe:83:21:5b:17:f5:fb:97:48:98:09:53: 25:54:90:2b:33:b6:08:1f:7d:69:64:5b:7a:c2:5b:df:28:cb: fc:bd:32:33:ae:44:34:eb:00:d0:51:fc:89:9a:a1:1c:ba:51: 06:93:6a:72:5b:83:dd:42:7c:f1:b3:1d:41:ec:1f:06:9b:86: ce:81:90:21:fc:ec:08:da:c4:e5:97:f6:e5:75:7c:10:17:10: 05:82:10:0a:fc:2d:e7:7c:7c:a2:5c:aa:38:ac:bb:34:2b:00: 2b:17:9a:28:fc:58:ed:b4:c9:1a:a7:5e:ce:87:fa:f8:56:2d: 8e:48:53:1b:cb:cb:72:8d:e5:90:61:cd:b6:b5:7b:2a:bb:c6: 53:0a:7e:31:bd:1b:06:73:70:a6:df:5e:2a:88:c9:16:53:f3: 8e:b5:e7:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uh1novBaZvt6cGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NGEzYjI0ZmEtZGFkNi00YzM0LWFiODQtN2Y5MDQ5YTYzZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYzj6E+wkzr9TCb2MWZrm6K7ujMoxbW9jKHp lhA0aam6amBYa23358kEJYU6K9icDcnNrssgAJWogAzmKw0jVG3pGg60Pc319G/1 DfI+HnABjZ17AqqtMbfXLGttU3awBzCwfuW0CJcElzWB/VUxuJCT13sx9MRvoJWQ Kx++jcIrUbVI+k23rc2rH2ghL9PgyTitBuisf6/BYyzLK3Zs3had7g60r/81W1O3 kv5BwaRO+zDMp1JdMhLz6YogAvdrqfohB6OIylCG3SLIduOp/N76WpbwjF7rM3+N +NHnvramaGXgv39ftWV+Ps3AeFQCOSSqZ7XdXv1SNVlZkKqKeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF0DWAOl6rk4GMRcKPe0DKQr97DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMGE1OTZlMjMtMGViYi0z YjBmLThiZWEtY2EwOTUzZjAwOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJT2PP/QNKYIs58XLS0eI6deJDnRt78CyTYZtKe4FKZUuvzQ0Vhs9nr2 64QliWImrWC02Vua5ptYpDYAlicMNpTrPrpAEOhnikV+zYCnYVMAdi5uPp5Xg5kc STB8lH3RFf6DIVsX9fuXSJgJUyVUkCsztggffWlkW3rCW98oy/y9MjOuRDTrANBR /ImaoRy6UQaTanJbg91CfPGzHUHsHwabhs6BkCH87AjaxOWX9uV1fBAXEAWCEAr8 Led8fKJcqjisuzQrACsXmij8WO20yRqnXs6H+vhWLY5IUxvLy3KN5ZBhzba1eyq7 xlMKfjG9GwZzcKbfXiqIyRZT846158M= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:46 2025 by rpki-client