$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29f8df59-220d-31b0-a851-44afca16df4a.roa File: 29f8df59-220d-31b0-a851-44afca16df4a.roa (raw, json) Hash identifier: NcBSboL6nfGDmg1jHNmC6m2HtweePoW2TfnRlapygmk= Subject key identifier: 85:34:A7:C6:D7:5B:7B:83:78:17:F9:92:A7:8A:E3:2F:DB:3D:1C:04 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F521D3CD0A982D1F1DEE400 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29f8df59-220d-31b0-a851-44afca16df4a.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:1d:3c:d0:a9:82:d1:f1:de:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=826fb45b-246a-45f3-8c78-3066a3ec1e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:77:79:0f:1c:da:65:62:e5:7f:4e:1b:b1:cc: 51:cc:bc:2e:78:dd:9b:37:ab:ea:a8:8a:14:8f:b1: d2:16:88:74:3a:64:62:89:b2:8e:92:3a:42:c0:2f: d0:9f:dc:11:1b:d2:ea:49:69:34:d6:0a:ba:3f:28: a6:ae:f6:c8:8c:03:51:51:63:f9:d7:cf:8c:ec:a7: 0b:f3:76:df:53:60:8b:f7:96:86:58:4a:29:2b:4e: 85:18:3b:92:79:8b:6d:94:db:1e:7e:76:f4:6f:80: 93:04:b2:5e:bb:7e:e2:6a:77:c5:b5:89:b3:5a:74: ba:c3:e7:6d:35:79:89:c7:46:2d:17:a7:28:e4:5d: ab:be:bf:2a:56:11:1d:e4:b4:24:48:aa:d6:65:54: d1:a5:9e:da:4b:17:3b:f4:41:7d:1c:9f:d4:35:6d: 36:f1:c7:95:e5:44:e2:1c:20:62:51:f3:c5:c6:a1: eb:da:c0:71:9a:05:55:79:9e:cb:66:b4:57:57:a4: 4d:5b:de:1f:34:11:e7:22:a9:6d:34:94:49:9b:0c: 8e:18:70:e9:80:01:7b:10:dc:6f:5e:07:bd:32:1a: 7a:b9:f7:1d:70:7a:a3:ad:f5:df:2d:e8:3b:c5:b2: 24:c3:92:b0:86:41:12:26:98:72:4e:c3:05:ce:94: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:34:A7:C6:D7:5B:7B:83:78:17:F9:92:A7:8A:E3:2F:DB:3D:1C:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29f8df59-220d-31b0-a851-44afca16df4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4d:a3:17:3d:8e:0f:1f:1a:6e:13:34:40:af:57:15:a2:c4: 62:1e:c7:52:0a:22:2c:eb:4b:30:45:c6:39:dd:8f:46:ad:95: ef:e9:9b:45:bf:86:5c:58:ca:b1:59:a7:d9:38:ab:bb:a6:c0: 29:5d:87:49:3e:21:98:a8:f6:ab:7d:9d:8e:be:2e:c7:65:88: 43:93:e0:b3:45:8d:93:58:3b:e3:d9:44:4d:c2:b6:a6:08:c6: e7:8c:ac:b0:8c:a0:df:11:81:31:5f:52:f8:12:6b:09:6f:01: 13:b6:e1:9c:ba:17:8e:18:54:a2:f8:c0:68:23:0e:ec:09:a9: 3f:fa:3a:8f:2b:43:cb:5d:84:62:08:d3:c5:94:07:8e:44:cb: c7:a2:2e:65:a6:ad:92:49:72:67:f5:da:8a:38:98:2c:e5:dd: fe:e0:e4:46:6c:e0:88:cd:34:98:94:34:51:9f:ff:cf:13:3f: 3f:3e:73:17:ff:86:f4:c8:16:a5:a1:27:af:0d:5c:c9:2b:aa: a6:a5:08:d2:50:3a:96:af:18:08:f0:31:f4:10:2c:10:80:fb: e5:28:49:f9:f4:bd:41:00:bd:2d:f8:ef:7b:f4:a8:d0:7f:34: 2c:3a:82:80:38:9f:06:ef:c4:d0:fa:d3:69:bd:ce:58:68:2d: 05:c3:c0:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uh080KmC0fHe5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ODI2ZmI0NWItMjQ2YS00NWYzLThjNzgtMzA2NmEzZWMxZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHd5DxzaZWLlf04bscxRzLwueN2bN6vqqIoU j7HSFoh0OmRiibKOkjpCwC/Qn9wRG9LqSWk01gq6PyimrvbIjANRUWP518+M7KcL 83bfU2CL95aGWEopK06FGDuSeYttlNsefnb0b4CTBLJeu37ianfFtYmzWnS6w+dt NXmJx0YtF6co5F2rvr8qVhEd5LQkSKrWZVTRpZ7aSxc79EF9HJ/UNW028ceV5UTi HCBiUfPFxqHr2sBxmgVVeZ7LZrRXV6RNW94fNBHnIqltNJRJmwyOGHDpgAF7ENxv Xge9Mhp6ufcdcHqjrfXfLeg7xbIkw5KwhkESJphyTsMFzpT4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU0p8bXW3uDeBf5kqeK4y/bPRwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjlmOGRmNTktMjIwZC0z MWIwLWE4NTEtNDRhZmNhMTZkZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSB9cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1Noxc9jg8fGm4TNECvVxWixGIex1IKIizrSzBFxjndj0atle/pm0W/ hlxYyrFZp9k4q7umwCldh0k+IZio9qt9nY6+LsdliEOT4LNFjZNYO+PZRE3CtqYI xueMrLCMoN8RgTFfUvgSawlvARO24Zy6F44YVKL4wGgjDuwJqT/6Oo8rQ8tdhGII 08WUB45Ey8eiLmWmrZJJcmf12oo4mCzl3f7g5EZs4IjNNJiUNFGf/88TPz8+cxf/ hvTIFqWhJ68NXMkrqqalCNJQOpavGAjwMfQQLBCA++UoSfn0vUEAvS3473v0qNB/ NCw6goA4nwbvxND602m9zlhoLQXDwNY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:17 2025 by rpki-client