$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa File: 4e8cc899-3135-3def-baf7-7434251d5fc8.roa (raw, json) Hash identifier: qkkjJEey1/z+rWDBoiqmCGBFgnmZstQb38GcfAfzFvA= Subject key identifier: 56:68:4F:0B:51:A0:71:0D:1A:D4:57:87:EC:7D:A6:2E:1B:01:C4:3F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F521FA6CCDB877CA3E05C50 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:1f:a6:cc:db:87:7c:a3:e0:5c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=e3f61439-6138-4b4f-8ec6-bb342cc9a6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3f:b5:8b:62:22:92:29:25:66:8b:0d:7d:df: 20:62:be:39:af:50:db:79:12:b1:f5:01:88:52:26: 0e:39:94:32:5f:af:c9:d3:77:7b:cc:2b:3a:cd:f0: cc:f6:11:77:51:bf:58:19:1e:59:00:8d:8c:a7:63: 82:64:34:5a:92:cb:4b:5a:35:d6:47:28:cc:18:96: e7:54:a1:cd:dd:8d:7d:9c:33:78:99:34:4d:39:bb: 65:55:dc:92:e2:c8:97:d5:c8:96:84:98:fa:f2:66: ea:55:f0:08:a6:84:b6:26:6a:7b:24:96:bb:ab:ec: 0f:b5:93:3b:08:fc:b5:49:ef:36:06:ca:2d:d3:4d: 99:ee:a8:e8:ad:c3:d5:c5:6a:48:56:38:d9:af:92: e9:14:e0:c6:3c:58:42:03:bb:ff:79:c1:64:74:ce: 28:54:23:8a:b7:03:d2:20:22:24:fd:f7:f9:87:c0: 3c:83:fd:a0:76:fe:ad:8f:d2:5e:12:5f:a4:4c:30: a4:69:72:58:69:77:96:c0:0b:50:47:9e:f8:88:f1: c3:04:79:9a:62:fd:d3:75:d5:2e:79:5d:6a:e8:7a: 63:e3:56:db:d4:bd:4f:98:00:89:4b:3c:7b:f1:f5: fe:fb:22:27:ef:99:45:d8:02:7b:3c:c3:5d:43:5d: 4d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:68:4F:0B:51:A0:71:0D:1A:D4:57:87:EC:7D:A6:2E:1B:01:C4:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b1:58:e0:99:36:f2:7e:6a:9c:75:b1:9a:f5:cb:be:ea:f0: 60:7d:42:e2:c7:d4:0a:6c:a5:21:bc:6e:f1:d7:42:db:f0:f0: 77:f0:d9:1a:d7:4a:4f:af:10:68:f1:f9:58:8a:e4:8c:60:92: 31:9f:11:ed:db:b0:8a:31:d3:6b:00:6b:40:1d:a4:54:ac:c5: 62:ca:81:7e:10:4d:73:68:a7:61:2a:80:4e:8c:73:58:4d:e4: c5:9e:6a:4b:d7:80:1f:d6:1c:67:53:93:52:bf:35:97:e2:b7: 13:12:b3:d3:52:cc:da:d5:20:59:98:03:34:82:29:2d:f0:5c: 50:84:a0:84:1c:67:04:29:82:5f:3a:39:ff:d8:86:5b:50:17: 69:0f:aa:13:b1:67:6c:3a:b6:9e:87:52:6e:6d:97:42:09:73: fb:ff:4b:c5:f4:06:84:9e:f8:88:43:63:49:d6:7b:20:f2:5c: ea:72:a1:7b:42:34:16:db:3d:fe:a9:cf:fc:52:b4:92:7c:be: 45:b6:e9:01:7c:75:4f:5c:d1:22:75:5a:75:06:88:e0:11:58: e7:c5:0a:1f:95:b6:8d:ff:c6:9d:a0:77:e6:20:8d:98:18:24: 8f:cc:56:32:37:2e:45:55:ff:42:2e:4d:39:e0:66:87:77:10: af:19:4f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uh+mzNuHfKPgXFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZTNmNjE0MzktNjEzOC00YjRmLThlYzYtYmIzNDJjYzlhNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD+1i2IikiklZosNfd8gYr45r1DbeRKx9QGI UiYOOZQyX6/J03d7zCs6zfDM9hF3Ub9YGR5ZAI2Mp2OCZDRakstLWjXWRyjMGJbn VKHN3Y19nDN4mTRNObtlVdyS4siX1ciWhJj68mbqVfAIpoS2Jmp7JJa7q+wPtZM7 CPy1Se82Bsot002Z7qjorcPVxWpIVjjZr5LpFODGPFhCA7v/ecFkdM4oVCOKtwPS ICIk/ff5h8A8g/2gdv6tj9JeEl+kTDCkaXJYaXeWwAtQR574iPHDBHmaYv3TddUu eV1q6Hpj41bb1L1PmACJSzx78fX++yIn75lF2AJ7PMNdQ11NLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZoTwtRoHENGtRXh+x9pi4bAcQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNGU4Y2M4OTktMzEzNS0z ZGVmLWJhZjctNzQzNDI1MWQ1ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSB/0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuxWOCZNvJ+apx1sZr1y77q8GB9QuLH1ApspSG8bvHXQtvw8Hfw2RrX Sk+vEGjx+ViK5IxgkjGfEe3bsIox02sAa0AdpFSsxWLKgX4QTXNop2EqgE6Mc1hN 5MWeakvXgB/WHGdTk1K/NZfitxMSs9NSzNrVIFmYAzSCKS3wXFCEoIQcZwQpgl86 Of/YhltQF2kPqhOxZ2w6tp6HUm5tl0IJc/v/S8X0BoSe+IhDY0nWeyDyXOpyoXtC NBbbPf6pz/xStJJ8vkW26QF8dU9c0SJ1WnUGiOARWOfFCh+Vto3/xp2gd+YgjZgY JI/MVjI3LkVV/0IuTTngZod3EK8ZT1s= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:54 2025 by rpki-client