$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5725d84a-35e2-3307-813e-29033aeafeff.roa File: 5725d84a-35e2-3307-813e-29033aeafeff.roa (raw, json) Hash identifier: jJJlMKYAbIld1SxgRzBfN7sjgFwO6N5IAdL7kM0+y0g= Subject key identifier: 7D:31:32:AD:DC:7B:23:84:5E:F0:31:F2:23:A8:E9:FD:13:99:A4:E1 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F52489B0F40ADEBF04D4700 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5725d84a-35e2-3307-813e-29033aeafeff.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:48:9b:0f:40:ad:eb:f0:4d:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=64aa568b-d996-4fe9-a2bd-b6bd3ecdd1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8f:0c:5e:66:e4:70:cd:a5:50:2b:ff:64:7a: b8:d3:1a:8e:1d:7d:99:64:3a:48:20:cb:83:4e:1a: 9e:d2:2b:35:41:8d:3b:a1:68:0f:4d:66:a4:e8:68: 39:12:a6:02:1c:c7:56:ac:4b:50:2b:96:1d:5f:8c: ea:c3:0b:18:26:e5:a4:18:c2:31:1f:3d:bc:95:e3: 55:4c:f8:0c:35:f7:28:ed:b0:9f:c1:6e:6f:0e:1b: 72:ec:a2:c4:0c:c1:a8:a1:fc:b0:d9:71:32:ac:38: be:cf:a4:6d:0e:08:b4:f3:61:b5:2c:8b:f7:ee:b6: 75:88:f9:42:a0:a9:b4:7d:da:60:1e:c5:ec:6c:f6: 5e:94:54:59:cb:80:9f:ff:60:bf:88:c2:89:e6:3d: 07:11:e7:c8:e9:1a:f9:38:4a:82:ed:fc:69:6b:7d: 71:b0:84:17:27:cb:61:40:72:9e:93:62:c7:80:64: 89:1e:2d:f5:3f:c2:52:91:7a:ed:d6:c1:5d:57:2f: 45:02:92:bf:67:e7:c7:5b:d8:9b:76:27:b9:ff:4b: d2:ea:75:7f:be:47:f9:1d:9f:7b:04:a2:2f:48:45: 91:e4:68:e9:2a:e3:16:e0:bd:b1:0d:ea:d9:5b:b2: f1:24:6f:7e:7b:0b:ab:09:7e:73:1c:fc:bb:db:3f: 48:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:31:32:AD:DC:7B:23:84:5E:F0:31:F2:23:A8:E9:FD:13:99:A4:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5725d84a-35e2-3307-813e-29033aeafeff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:48:ab:1a:52:69:ed:41:e6:a9:ed:0c:fe:b5:f9:53:37:02: c4:eb:d3:b9:70:23:75:1f:6d:9d:64:1d:4d:7f:d9:66:c5:97: cf:5e:06:6b:6a:bf:3a:38:2f:9d:f9:32:f2:73:72:42:06:9a: 62:6d:97:9a:eb:4e:a7:44:6a:9a:72:e3:45:18:ff:3e:e0:2e: 23:7b:d9:d5:99:8a:98:ff:88:02:e2:df:1d:17:f9:c4:25:99: c6:c6:5c:a8:a2:52:72:39:1a:0b:f4:4d:d6:80:8a:e0:81:79: fe:bf:bc:f3:de:32:95:e9:5c:98:59:c7:1c:bb:8f:c2:ba:fe: 9b:cc:01:13:b5:bc:1d:ee:af:6d:e2:e7:81:18:f4:fb:58:e3: 9f:3f:3a:dd:25:de:27:c6:69:80:13:7c:fc:31:e6:68:0d:78: 67:78:ce:85:11:f5:d8:47:1f:a9:f2:e6:d2:05:6e:c6:a0:9b: 34:98:eb:31:91:46:fa:9b:21:43:6b:f2:3c:c8:0c:a3:4e:7d: 2f:05:96:06:c7:54:01:a7:08:7e:d0:e0:ac:75:43:77:ca:41: 9e:83:96:b2:b8:58:3e:81:fc:4b:91:c5:20:61:4d:c5:ef:46: ba:8d:86:12:d3:55:09:58:fc:b6:32:26:97:c1:ee:59:b2:99: ea:24:e7:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkibD0Ct6/BNRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NjRhYTU2OGItZDk5Ni00ZmU5LWEyYmQtYjZiZDNlY2RkMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo8MXmbkcM2lUCv/ZHq40xqOHX2ZZDpIIMuD Thqe0is1QY07oWgPTWak6Gg5EqYCHMdWrEtQK5YdX4zqwwsYJuWkGMIxHz28leNV TPgMNfco7bCfwW5vDhty7KLEDMGoofyw2XEyrDi+z6RtDgi082G1LIv37rZ1iPlC oKm0fdpgHsXsbPZelFRZy4Cf/2C/iMKJ5j0HEefI6Rr5OEqC7fxpa31xsIQXJ8th QHKek2LHgGSJHi31P8JSkXrt1sFdVy9FApK/Z+fHW9ibdie5/0vS6nV/vkf5HZ97 BKIvSEWR5GjpKuMW4L2xDerZW7LxJG9+ewurCX5zHPy72z9IGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0xMq3ceyOEXvAx8iOo6f0TmaThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTcyNWQ4NGEtMzVlMi0z MzA3LTgxM2UtMjkwMzNhZWFmZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSB8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNIqxpSae1B5qntDP61+VM3AsTr07lwI3UfbZ1kHU1/2WbFl89eBmtq vzo4L535MvJzckIGmmJtl5rrTqdEappy40UY/z7gLiN72dWZipj/iALi3x0X+cQl mcbGXKiiUnI5Ggv0TdaAiuCBef6/vPPeMpXpXJhZxxy7j8K6/pvMARO1vB3ur23i 54EY9PtY458/Ot0l3ifGaYATfPwx5mgNeGd4zoUR9dhHH6ny5tIFbsagmzSY6zGR RvqbIUNr8jzIDKNOfS8FlgbHVAGnCH7Q4Kx1Q3fKQZ6DlrK4WD6B/EuRxSBhTcXv RrqNhhLTVQlY/LYyJpfB7lmymeok50s= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:08 2025 by rpki-client