$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa File: 899b0c89-a566-3e19-970f-8d740c78348c.roa (raw, json) Hash identifier: y7RShW8imQewwSERh+N4DFSANsv1EKDtWsfVJap010s= Subject key identifier: 8C:30:70:49:9B:3C:A9:9B:03:8D:E9:51:54:FA:3D:98:FB:4F:CF:E2 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584F629300E9A501BB6AB3E417C0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 33363 IP address blocks: 72.31.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:00:e9:a5:01:bb:6a:b3:e4:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=3a4389bb-12cc-417a-a97e-754964413721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ab:2f:97:70:49:7e:b3:90:e3:ca:16:30:e6: 88:8a:04:39:f8:fd:cf:68:d7:aa:53:a4:02:aa:fb: c9:e3:b7:8c:82:34:49:4a:54:0a:5a:f9:cf:0a:56: eb:ae:9b:0b:ec:2e:47:95:48:b1:60:76:a1:aa:87: c9:27:24:d9:2a:d3:01:1b:a3:ac:6e:87:28:af:88: 58:08:f6:64:9a:83:ac:86:13:0f:01:ba:77:dd:37: 2c:07:68:8b:6d:cf:93:fe:e1:5f:aa:35:f1:a5:eb: f2:7b:a2:ab:54:83:f7:13:70:d0:95:02:11:0b:48: a3:80:86:ec:17:de:9d:ac:dc:2c:25:f5:6a:7e:13: 37:9e:97:2a:3c:d0:68:53:52:09:69:9e:59:e6:b8: 5c:62:83:40:ea:d9:63:72:2a:4a:b0:6c:62:9b:72: 46:ce:1e:0c:70:67:00:f8:e6:b4:1e:bf:55:6c:61: 93:f1:dc:84:1e:f3:73:78:eb:96:b2:7b:58:3d:7c: d3:54:d1:ce:2a:69:09:1b:63:ff:ac:f4:3d:c6:74: 3e:ca:85:32:5d:42:e4:e8:fa:f4:74:f4:ba:b5:8f: f3:f1:8b:68:0e:24:52:2a:54:78:6f:ca:dd:08:ed: 7a:44:ae:e3:20:c0:f6:d1:ab:73:2b:9a:87:98:e9: 62:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:30:70:49:9B:3C:A9:9B:03:8D:E9:51:54:FA:3D:98:FB:4F:CF:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:11:ab:02:50:9d:17:88:ef:89:c8:01:b2:81:11:c8:7d:5a: 9d:b7:25:6a:a4:c6:46:88:a1:9c:f7:83:d9:8c:3a:95:2c:c6: e2:da:30:bc:d9:19:e3:3f:4c:f3:da:57:06:da:76:9e:8d:4e: 39:33:98:58:c3:0c:a4:27:b3:0b:c6:6f:e2:74:dd:dc:d5:cf: e0:cf:75:e7:5b:96:56:0e:d1:50:66:bc:11:51:00:93:d6:08: da:ca:cc:5d:fa:df:88:f6:b3:db:69:51:d9:5b:d0:3a:70:2a: 34:88:59:0e:66:a9:d5:d4:71:5e:c6:9d:5e:f7:e8:93:64:96: 8e:f5:82:bd:5f:48:a3:49:b6:e4:63:35:f0:f6:64:2f:7b:12: bc:99:03:9b:04:78:27:1e:2e:00:a8:a8:75:4e:e8:a8:aa:96: bc:de:c1:74:d7:40:40:3d:0b:7c:d7:18:93:e2:3e:05:bd:a1: 4d:b9:ba:f9:54:d7:84:c5:56:e6:c3:9a:28:63:a2:aa:7f:63: c5:74:87:c5:7d:fe:50:07:f0:17:e8:2e:0f:46:ec:0f:47:47: 75:8c:aa:ca:5e:cb:a1:64:ee:f7:0a:a9:70:e7:54:a9:ab:a1: e7:35:cb:81:7a:7c:2b:8b:70:bb:f8:69:84:fa:2c:24:53:81: b4:f4:92:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwDppQG7arPkF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk M2E0Mzg5YmItMTJjYy00MTdhLWE5N2UtNzU0OTY0NDEzNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7asvl3BJfrOQ48oWMOaIigQ5+P3PaNeqU6QC qvvJ47eMgjRJSlQKWvnPClbrrpsL7C5HlUixYHahqofJJyTZKtMBG6Osbocor4hY CPZkmoOshhMPAbp33TcsB2iLbc+T/uFfqjXxpevye6KrVIP3E3DQlQIRC0ijgIbs F96drNwsJfVqfhM3npcqPNBoU1IJaZ5Z5rhcYoNA6tljcipKsGxim3JGzh4McGcA +Oa0Hr9VbGGT8dyEHvNzeOuWsntYPXzTVNHOKmkJG2P/rPQ9xnQ+yoUyXULk6Pr0 dPS6tY/z8YtoDiRSKlR4b8rdCO16RK7jIMD20atzK5qHmOlibwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwwcEmbPKmbA43pUVT6PZj7T8/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODk5YjBjODktYTU2Ni0z ZTE5LTk3MGYtOGQ3NDBjNzgzNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYRqwJQnReI74nIAbKBEch9Wp23JWqkxkaIoZz3g9mMOpUsxuLaMLzZ GeM/TPPaVwbadp6NTjkzmFjDDKQnswvGb+J03dzVz+DPdedbllYO0VBmvBFRAJPW CNrKzF3634j2s9tpUdlb0DpwKjSIWQ5mqdXUcV7GnV736JNklo71gr1fSKNJtuRj NfD2ZC97EryZA5sEeCceLgCoqHVO6KiqlrzewXTXQEA9C3zXGJPiPgW9oU25uvlU 14TFVubDmihjoqp/Y8V0h8V9/lAH8BfoLg9G7A9HR3WMqspey6Fk7vcKqXDnVKmr oec1y4F6fCuLcLv4aYT6LCRTgbT0kkM= -----END CERTIFICATE-----Generated at Sat Oct 10 12:35:19 2026 by rpki-client