$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/78298698-6b87-3743-a47b-8762994fd79e.roa File: 78298698-6b87-3743-a47b-8762994fd79e.roa (raw, json) Hash identifier: PXmQIHCBqi8ObeHxhb+WzvKdL0TcWq21gs1y72d56Zg= Subject key identifier: E8:8B:D2:E8:49:AE:86:24:14:EA:6C:0A:4B:7D:44:F7:04:12:CB:A9 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584F6292E5DF027ED1209D9C7D00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/78298698-6b87-3743-a47b-8762994fd79e.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 33363 IP address blocks: 72.31.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:e5:df:02:7e:d1:20:9d:9c:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=1e25f719-83f2-43c8-83ff-d5974078e172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:a4:c6:4c:90:fc:5b:6c:78:03:fb:9b:59: bc:82:48:3b:57:a1:81:a0:fe:9b:b8:26:80:a6:c2: 6d:99:47:4c:3c:2a:9b:64:22:d4:cc:19:52:56:cb: 48:9a:3f:e6:fb:db:49:e3:6d:b5:a1:42:d5:4c:1e: 86:3a:7c:dc:e4:c2:e6:81:d5:20:81:27:aa:07:31: 24:75:87:30:d7:d5:ed:a9:e9:73:d6:0e:9a:56:6d: 58:49:0a:d9:16:ee:65:24:a9:46:b0:2b:88:81:99: df:8f:a0:07:0e:d9:45:c8:64:99:45:c0:56:93:1c: f4:51:54:5c:f3:b9:29:56:c2:a2:1a:e9:00:43:a4: b0:59:02:2d:c1:db:bb:16:16:5f:6a:09:ed:2f:e9: a6:33:03:e1:9d:55:d0:07:c5:9e:7a:25:c0:2b:0c: bd:17:3f:83:c4:fd:33:5b:65:09:e2:fe:43:4d:7d: 7c:84:a4:ac:ea:e8:c9:6c:ed:46:48:8d:70:b0:ac: 72:5e:2f:0a:ca:f7:79:3d:ee:c6:4b:f4:ab:08:2d: 22:1a:c0:c1:cd:97:fb:21:26:e0:02:17:78:80:5e: 3f:3c:4c:f1:4c:89:5c:a4:0d:fb:91:56:c6:62:c6: 42:81:36:4b:a7:b9:90:65:af:e9:3d:d3:00:fb:e3: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8B:D2:E8:49:AE:86:24:14:EA:6C:0A:4B:7D:44:F7:04:12:CB:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/78298698-6b87-3743-a47b-8762994fd79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:af:56:6c:73:9a:bb:56:7f:71:3b:09:3a:be:74:24:5c:24: 4f:39:40:1d:58:65:39:a1:e0:19:d7:81:1b:6e:8a:f8:27:3c: e3:f2:22:47:e9:c3:16:ae:c6:08:1d:f9:a5:8d:a0:d4:f3:8a: 88:ca:f2:d1:0b:a1:65:28:6a:05:5a:2c:98:76:f3:5b:e3:51: 52:98:39:85:d6:23:7d:28:db:b0:63:f3:1c:c6:3f:f6:5b:d6: 3b:28:04:66:1c:ee:b1:b6:12:ab:07:52:2d:19:90:77:06:34: 57:e4:0e:92:81:8f:94:bb:dc:45:38:f0:1c:9a:73:55:c9:10: 7c:62:0f:1a:c4:97:4e:1e:85:1e:37:1e:76:b4:7b:e1:3f:00: d6:d5:9f:c3:88:72:38:1e:c3:ad:66:e6:6c:d8:82:27:98:44: f1:27:68:d1:0b:86:29:57:57:6f:4d:40:24:02:ea:0d:25:95: 3b:62:c0:b8:9d:66:a4:d1:f4:5c:cf:66:38:1b:1a:de:ec:5d: 02:8b:36:47:35:8b:f2:c4:05:28:37:13:7c:72:ac:71:14:2c: 82:89:8d:d6:50:4a:82:0a:ae:b0:39:06:89:e7:eb:d0:b7:1e: 60:3b:eb:89:68:3b:99:51:51:c5:3e:b6:15:f7:08:a7:0d:f6: 89:54:94:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuXfAn7RIJ2cfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MWUyNWY3MTktODNmMi00M2M4LTgzZmYtZDU5NzQwNzhlMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBakxkyQ/FtseAP7m1m8gkg7V6GBoP6buCaA psJtmUdMPCqbZCLUzBlSVstImj/m+9tJ4221oULVTB6GOnzc5MLmgdUggSeqBzEk dYcw19Xtqelz1g6aVm1YSQrZFu5lJKlGsCuIgZnfj6AHDtlFyGSZRcBWkxz0UVRc 87kpVsKiGukAQ6SwWQItwdu7FhZfagntL+mmMwPhnVXQB8WeeiXAKwy9Fz+DxP0z W2UJ4v5DTX18hKSs6ujJbO1GSI1wsKxyXi8Kyvd5Pe7GS/SrCC0iGsDBzZf7ISbg Ahd4gF4/PEzxTIlcpA37kVbGYsZCgTZLp7mQZa/pPdMA++MUEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiL0uhJroYkFOpsCkt9RPcEEsupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNzgyOTg2OTgtNmI4Ny0z NzQzLWE0N2ItODc2Mjk5NGZkNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSB8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGvVmxzmrtWf3E7CTq+dCRcJE85QB1YZTmh4BnXgRtuivgnPOPyIkfp wxauxggd+aWNoNTziojK8tELoWUoagVaLJh281vjUVKYOYXWI30o27Bj8xzGP/Zb 1jsoBGYc7rG2EqsHUi0ZkHcGNFfkDpKBj5S73EU48Byac1XJEHxiDxrEl04ehR43 Hna0e+E/ANbVn8OIcjgew61m5mzYgieYRPEnaNELhilXV29NQCQC6g0llTtiwLid ZqTR9FzPZjgbGt7sXQKLNkc1i/LEBSg3E3xyrHEULIKJjdZQSoIKrrA5Bonn69C3 HmA764loO5lRUcU+thX3CKcN9olUlKY= -----END CERTIFICATE-----Generated at Fri Oct 9 20:43:53 2026 by rpki-client