$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa File: 3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa (raw, json) Hash identifier: 7QfB1jAeTRWuK4KdUeJETPlhxAQMX7TYQaFBHsm0ymw= Subject key identifier: 16:60:CD:84:1E:EC:C2:06:10:72:11:47:C4:6A:DF:6F:D3:C1:32:59 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F524B6AF61EF2DCE301E5C0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:4b:6a:f6:1e:f2:dc:e3:01:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=1c15e33b-9c44-464f-b625-a241b043246f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:10:be:6e:45:c2:3c:b8:23:c3:f8:fd:a4: db:54:8d:64:37:cd:da:c2:b7:e4:59:76:bb:11:aa: cc:33:07:af:45:37:a9:b2:1f:3b:aa:ae:eb:88:66: cd:a2:c9:b2:e6:19:26:1a:b5:89:d4:5b:e2:a3:67: 7b:9e:23:01:01:c3:66:dc:73:d1:29:2f:b8:db:76: 18:35:50:b0:27:3c:db:4c:58:aa:e4:42:da:36:8d: d2:4c:00:1e:1b:8f:54:d4:20:95:48:60:cd:e2:f8: 9e:b9:76:45:8f:59:c5:e3:5b:23:6f:0d:80:2a:5e: 8e:e4:0e:61:b4:af:8f:f9:61:da:b2:1e:74:8a:67: 7d:e7:72:20:d6:5d:30:4f:7a:49:1d:84:01:ec:3f: d8:14:29:a5:1d:23:e7:94:c8:41:1c:ac:5f:b7:a5: 6d:62:80:90:50:ed:1b:45:a1:24:88:d6:49:cb:3e: 6e:78:9e:65:d3:1b:0b:8f:07:2a:20:89:16:55:ba: 12:9d:4a:a6:a3:02:d1:ec:14:66:18:76:b9:bb:04: 18:ef:fc:e8:05:30:c3:62:5f:22:7d:fb:73:c7:42: e7:95:1b:cd:df:82:16:84:97:7a:93:ea:c4:a9:3d: 22:f6:15:7c:04:8c:b0:70:bd:1b:8e:03:0d:eb:95: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:60:CD:84:1E:EC:C2:06:10:72:11:47:C4:6A:DF:6F:D3:C1:32:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:32:f7:2e:a8:f3:4e:71:ee:bf:28:cd:ab:da:ed:84:f6:e7: 23:e6:2c:85:4c:93:95:59:b6:17:00:4b:02:2c:98:a2:07:97: db:90:d0:c2:d3:56:bf:94:e8:3b:fc:1e:99:d1:f1:0b:7b:be: bd:ac:87:6c:50:3f:82:cc:e2:b6:9d:76:45:a0:1c:d1:42:ff: 01:35:89:71:fd:04:53:c0:dd:fd:f1:1e:07:12:e7:0c:4c:3e: 5d:f2:99:ff:e7:ad:9a:f2:c4:a9:97:39:d6:f3:bd:97:e4:fb: 3e:16:53:68:d1:33:e1:d9:0b:81:87:40:77:6f:13:fc:3b:5f: 13:03:f1:60:86:b3:f7:93:4e:71:79:ba:db:95:20:18:b2:cd: 2f:9c:9c:53:99:82:f7:a2:57:8f:0d:5f:d0:00:02:61:4d:97: 2d:92:34:0f:bc:4c:ae:ef:03:51:1d:6d:f9:82:87:37:e4:08: f0:99:a5:9f:45:71:89:b2:38:99:9a:ff:a7:c3:b4:4f:a5:cd: f5:5c:8e:85:81:9e:c2:d0:fe:8f:98:e3:9c:fb:bd:5b:de:d6: 63:5b:55:6d:44:b4:8c:57:82:77:f8:80:b3:c2:d0:03:43:87: de:47:48:81:9f:b1:26:0c:60:2f:54:c9:47:fa:43:7d:bf:66: 62:34:22:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uktq9h7y3OMB5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MWMxNWUzM2ItOWM0NC00NjRmLWI2MjUtYTI0MWIwNDMyNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaUQvm5Fwjy4I8P4/aTbVI1kN83awrfkWXa7 EarMMwevRTepsh87qq7riGbNosmy5hkmGrWJ1Fvio2d7niMBAcNm3HPRKS+423YY NVCwJzzbTFiq5ELaNo3STAAeG49U1CCVSGDN4vieuXZFj1nF41sjbw2AKl6O5A5h tK+P+WHash50imd953Ig1l0wT3pJHYQB7D/YFCmlHSPnlMhBHKxft6VtYoCQUO0b RaEkiNZJyz5ueJ5l0xsLjwcqIIkWVboSnUqmowLR7BRmGHa5uwQY7/zoBTDDYl8i fftzx0LnlRvN34IWhJd6k+rEqT0i9hV8BIywcL0bjgMN65UlNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZgzYQe7MIGEHIRR8Rq32/TwTJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvM2QwYzA4Y2MtNjA1YS0z ZjhlLThlMDktZmE1ZmRhOGY1NDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSB/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAy9y6o805x7r8ozava7YT25yPmLIVMk5VZthcASwIsmKIHl9uQ0MLT Vr+U6Dv8HpnR8Qt7vr2sh2xQP4LM4raddkWgHNFC/wE1iXH9BFPA3f3xHgcS5wxM Pl3ymf/nrZryxKmXOdbzvZfk+z4WU2jRM+HZC4GHQHdvE/w7XxMD8WCGs/eTTnF5 utuVIBiyzS+cnFOZgveiV48NX9AAAmFNly2SNA+8TK7vA1EdbfmChzfkCPCZpZ9F cYmyOJma/6fDtE+lzfVcjoWBnsLQ/o+Y45z7vVve1mNbVW1EtIxXgnf4gLPC0AND h95HSIGfsSYMYC9UyUf6Q32/ZmI0ImQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:16 2025 by rpki-client