$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa File: 899b0c89-a566-3e19-970f-8d740c78348c.roa (raw, json) Hash identifier: 2giUXh7ad/7K8l5w+EoobPQIwpuduUzi1FK3555nooo= Subject key identifier: 75:6A:00:B4:4A:62:76:4B:3F:3C:3F:94:B2:B0:A5:48:23:58:B7:7D Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F524AD928E35FEF3B01F480 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:4a:d9:28:e3:5f:ef:3b:01:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=61bbeed0-5ecf-4476-b5e7-532437957431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:98:36:bd:24:40:ba:0a:4e:8c:f4:33:88: af:09:86:19:7b:cc:42:73:65:df:91:c1:ac:1b:18: 0a:1e:dc:b5:40:06:39:0d:e1:fc:86:29:7c:b7:82: 3a:50:18:af:57:16:01:ce:08:99:1f:66:56:ea:30: 71:7c:9c:49:1c:69:e1:57:19:2b:f7:2c:6f:c3:f3: fb:7b:0e:bb:99:bd:bc:e8:4c:9a:ea:57:78:81:b1: e7:94:a5:92:8d:39:93:35:3c:71:7a:0d:e2:40:b7: fd:1e:4e:55:d2:63:d8:1f:06:ac:2a:01:4d:01:07: 96:6b:d9:44:71:c4:5c:ab:8b:da:6f:26:b6:e0:60: 2e:4e:61:e2:4a:f2:a7:4d:96:59:d6:fc:dd:41:df: 0a:1d:76:f6:da:d9:f1:3e:30:c2:58:cb:12:9b:df: 5d:4f:71:84:6a:01:0c:d7:a2:dd:83:6a:be:68:2b: 99:f6:e5:f2:bc:b8:76:46:85:7e:1c:5c:be:aa:5d: 3b:7f:53:55:28:8b:dc:13:cc:fa:b8:b2:59:ff:6b: bc:fe:fe:5b:a1:a2:56:51:96:be:be:86:ff:f2:94: 9e:20:43:4a:c7:2d:9e:f8:0f:89:8d:b0:8c:28:5d: 00:c4:be:e3:f1:c0:ec:90:b5:dc:3f:40:74:d9:70: b0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6A:00:B4:4A:62:76:4B:3F:3C:3F:94:B2:B0:A5:48:23:58:B7:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:55:dd:8a:ce:ae:16:29:92:29:66:8b:75:37:ca:a2:dd:be: 41:6f:ee:79:35:55:67:9b:31:63:df:37:a1:76:3b:3b:c8:47: b2:36:19:22:6f:58:13:21:a8:12:46:c2:1f:fa:cf:71:43:14: a6:fe:fb:7c:e5:37:54:13:e8:2f:0a:93:9e:d6:cb:98:8c:07: ee:9b:cc:6d:67:82:27:51:3f:5a:de:22:fc:24:50:4c:5a:e4: f9:9e:c9:2e:19:45:5c:57:4f:8b:2f:8c:4b:dc:0b:1b:37:13: bf:ab:2a:94:ad:a5:47:11:c3:cf:e6:b9:32:f7:35:9c:3e:56: db:f6:af:c3:1e:01:98:d6:4b:38:46:56:af:36:1d:48:13:96: 68:4e:37:aa:31:d6:23:ff:49:c5:06:34:d8:4d:92:f4:80:3c: 6b:75:0b:fd:96:b7:65:2b:74:0e:0e:5a:e3:6a:a9:55:53:84: 6c:a9:29:71:12:56:ab:f8:6b:5d:01:54:0c:05:35:ce:f7:05: bd:48:f5:14:5e:04:c4:35:99:86:33:b5:e0:6f:20:86:46:a4: 0d:02:70:32:4f:2b:a5:d9:48:4e:6d:3f:64:86:a7:67:28:cc: e1:4d:58:08:4f:8e:72:5f:12:72:8f:84:d9:a9:0d:c8:63:77: 14:18:4d:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkrZKONf7zsB9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NjFiYmVlZDAtNWVjZi00NDc2LWI1ZTctNTMyNDM3OTU3NDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJiYNr0kQLoKToz0M4ivCYYZe8xCc2XfkcGs GxgKHty1QAY5DeH8hil8t4I6UBivVxYBzgiZH2ZW6jBxfJxJHGnhVxkr9yxvw/P7 ew67mb286Eya6ld4gbHnlKWSjTmTNTxxeg3iQLf9Hk5V0mPYHwasKgFNAQeWa9lE ccRcq4vabya24GAuTmHiSvKnTZZZ1vzdQd8KHXb22tnxPjDCWMsSm99dT3GEagEM 16Ldg2q+aCuZ9uXyvLh2RoV+HFy+ql07f1NVKIvcE8z6uLJZ/2u8/v5boaJWUZa+ vob/8pSeIENKxy2e+A+JjbCMKF0AxL7j8cDskLXcP0B02XCw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVqALRKYnZLPzw/lLKwpUgjWLd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODk5YjBjODktYTU2Ni0z ZTE5LTk3MGYtOGQ3NDBjNzgzNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5V3YrOrhYpkilmi3U3yqLdvkFv7nk1VWebMWPfN6F2OzvIR7I2GSJv WBMhqBJGwh/6z3FDFKb++3zlN1QT6C8Kk57Wy5iMB+6bzG1ngidRP1reIvwkUExa 5PmeyS4ZRVxXT4svjEvcCxs3E7+rKpStpUcRw8/muTL3NZw+Vtv2r8MeAZjWSzhG Vq82HUgTlmhON6ox1iP/ScUGNNhNkvSAPGt1C/2Wt2UrdA4OWuNqqVVThGypKXES Vqv4a10BVAwFNc73Bb1I9RReBMQ1mYYzteBvIIZGpA0CcDJPK6XZSE5tP2SGp2co zOFNWAhPjnJfEnKPhNmpDchjdxQYTRI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:07 2025 by rpki-client