$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1125faef-bc78-3845-8feb-dd3edf406aed.roa File: 1125faef-bc78-3845-8feb-dd3edf406aed.roa (raw, json) Hash identifier: 0MBzffTYXFHYqHW36WnjTLJgdNappdmwQtVh8meYU2s= Subject key identifier: 20:04:E0:FB:0E:D8:FF:29:22:5E:FC:3D:9F:AB:6B:96:A3:F2:D1:18 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F52413AEB98F6547B421B40 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1125faef-bc78-3845-8feb-dd3edf406aed.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 16787 IP address blocks: 72.31.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:41:3a:eb:98:f6:54:7b:42:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=9303f9f0-4533-4565-ac39-b9ef8a1e39ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:c2:ef:39:4c:96:01:58:3c:e4:3a:31:8d: b6:32:9c:85:28:0c:32:f7:ec:74:82:51:74:7f:a2: 6e:fe:67:88:8c:58:43:a5:8e:6f:2b:96:a0:dd:33: da:9d:02:13:c0:6e:0e:1d:56:01:81:e4:1b:da:d3: 87:1b:6f:bf:7f:26:67:fc:b5:ad:45:fb:a8:5e:9b: 05:c4:fe:64:2c:bd:a4:bd:83:89:69:26:82:6a:2a: 25:e9:74:1e:b5:60:5c:4a:31:16:8e:9e:87:fe:4b: 17:88:dd:68:7e:c2:6a:65:f4:64:8e:c8:94:cf:0e: b9:49:4c:f2:b7:df:c2:81:db:e4:69:b1:c3:b5:49: f5:c6:26:42:fd:41:76:38:2c:12:56:05:de:24:a7: 6e:fe:ef:22:27:7e:c8:c3:39:a9:58:b9:78:c6:9a: f1:80:54:65:c9:68:13:01:e6:46:08:e7:a0:c6:9e: a6:aa:60:a9:55:95:0f:88:25:ce:28:c2:c2:07:76: 7a:92:77:5e:66:3a:f2:8c:41:26:d1:1f:1f:b3:88: 11:04:79:01:fd:fb:8b:64:15:2d:ba:0f:35:ba:23: 97:ac:33:60:89:98:2e:0d:44:82:68:f9:1c:4c:e4: 0d:ce:c1:d8:0d:71:a3:ab:a6:8e:d6:6c:fe:ad:c5: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:04:E0:FB:0E:D8:FF:29:22:5E:FC:3D:9F:AB:6B:96:A3:F2:D1:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1125faef-bc78-3845-8feb-dd3edf406aed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1b:e0:56:8b:d6:58:5d:3e:81:9c:12:d3:1c:46:a4:0c:a7: 5f:28:8f:cd:47:67:e5:3f:6e:4b:67:5d:c4:7a:fc:7f:11:a7: 4d:51:56:de:af:3d:45:10:56:0c:6c:3e:10:69:2d:bc:25:e7: 06:c6:a7:69:1a:f2:9d:33:bf:12:b2:e7:6d:b8:a8:71:42:67: 8f:00:66:87:62:8e:e4:21:fc:75:93:62:d0:62:5d:6a:5a:0d: f8:27:d2:47:dd:2e:7e:9c:f8:32:76:45:59:a3:f4:c9:8b:78: 17:cc:35:9b:ca:7d:a1:fe:ab:c7:5a:50:fe:2d:12:33:32:b3: 03:e6:bd:c8:62:0f:37:59:09:30:4a:db:e2:79:bf:3a:05:11: cc:e6:a7:3a:d8:a5:6c:53:b8:7e:96:87:46:5d:f4:7a:9d:d5: fe:a7:c8:ef:51:53:78:d6:ff:b3:4b:6d:8d:08:a1:2c:ff:ea: 42:03:95:62:a6:98:39:47:a6:1e:da:3a:1e:2d:90:11:d0:da: ce:bc:c4:4b:bc:b4:19:21:2f:b8:71:c4:b3:5f:22:11:05:8c: c3:62:ed:f3:22:c5:53:83:bb:09:8c:9a:a9:60:bb:50:fb:1c: da:0c:00:f2:74:e5:f6:da:de:87:03:c6:34:b5:8e:96:13:3c: c0:92:8a:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkE665j2VHtCG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OTMwM2Y5ZjAtNDUzMy00NTY1LWFjMzktYjllZjhhMWUzOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIzC7zlMlgFYPOQ6MY22MpyFKAwy9+x0glF0 f6Ju/meIjFhDpY5vK5ag3TPanQITwG4OHVYBgeQb2tOHG2+/fyZn/LWtRfuoXpsF xP5kLL2kvYOJaSaCaiol6XQetWBcSjEWjp6H/ksXiN1ofsJqZfRkjsiUzw65SUzy t9/CgdvkabHDtUn1xiZC/UF2OCwSVgXeJKdu/u8iJ37IwzmpWLl4xprxgFRlyWgT AeZGCOegxp6mqmCpVZUPiCXOKMLCB3Z6kndeZjryjEEm0R8fs4gRBHkB/fuLZBUt ug81uiOXrDNgiZguDUSCaPkcTOQNzsHYDXGjq6aO1mz+rcV0oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAE4PsO2P8pIl78PZ+ra5aj8tEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTEyNWZhZWYtYmM3OC0z ODQ1LThmZWItZGQzZWRmNDA2YWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwb4FaL1lhdPoGcEtMcRqQMp18oj81HZ+U/bktnXcR6/H8Rp01RVt6v PUUQVgxsPhBpLbwl5wbGp2ka8p0zvxKy5224qHFCZ48AZodijuQh/HWTYtBiXWpa Dfgn0kfdLn6c+DJ2RVmj9MmLeBfMNZvKfaH+q8daUP4tEjMyswPmvchiDzdZCTBK 2+J5vzoFEczmpzrYpWxTuH6Wh0Zd9Hqd1f6nyO9RU3jW/7NLbY0IoSz/6kIDlWKm mDlHph7aOh4tkBHQ2s68xEu8tBkhL7hxxLNfIhEFjMNi7fMixVODuwmMmqlgu1D7 HNoMAPJ05fba3ocDxjS1jpYTPMCSihs= -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:41 2025 by rpki-client