$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa File: 99c07aae-832f-32e0-8580-8a3e6c4911c9.roa (raw, json) Hash identifier: gmNlYUIHRgoFZZCVoFscpi9Ges8Le3UAFOmapI31v7A= Subject key identifier: 30:9D:36:A7:8B:9C:1C:38:1F:B5:75:A0:CD:46:EB:F6:B5:30:C1:8F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F52483E5D05047D465D9FC0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:48:3e:5d:05:04:7d:46:5d:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=c13d9e9d-81c1-4b77-ba39-110500091829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:63:a7:2b:92:2c:88:50:c6:7d:37:7b:ba: 9c:e0:2f:b0:da:51:f1:e1:70:38:6a:97:d6:0f:91: 7b:0c:a3:b4:ed:c6:ed:4a:e2:56:ca:a2:e1:6c:04: 2e:e8:5b:33:e7:49:45:ec:9f:69:e1:22:79:f9:51: e3:5e:14:66:e0:f2:0d:77:b2:34:bd:34:a3:df:f3: 81:e2:9d:1e:ae:ae:58:57:00:54:b4:fb:10:e8:37: fb:d6:0f:09:3a:9e:08:20:15:44:07:24:9d:df:5a: 15:48:05:28:b7:8c:c0:fc:db:50:f9:be:02:f1:3d: ae:81:0a:fc:0b:2b:7a:4e:bb:62:0f:7b:ff:24:4c: f5:67:cd:dd:42:19:d9:51:21:76:90:ba:ad:53:5d: 8d:fc:8d:22:a0:b2:e1:9c:e5:bc:02:d4:16:99:f4: 7f:31:af:f3:fa:41:ae:f1:63:ee:7b:9a:8e:51:f1: f2:66:49:52:a3:15:07:47:65:58:8a:a2:f3:a5:29: ec:93:ac:ce:94:8a:d4:2a:1a:d7:42:cb:1e:41:c4: 5d:4d:d3:15:34:15:20:59:db:1d:53:64:78:76:b0: d1:e8:f9:eb:14:be:11:ac:36:9c:25:7a:2a:d1:5b: 10:b4:e9:cb:a8:bf:bb:2f:64:5f:77:87:b2:2c:f7: be:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9D:36:A7:8B:9C:1C:38:1F:B5:75:A0:CD:46:EB:F6:B5:30:C1:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:77:b7:14:a0:ab:c4:8b:7b:25:51:73:37:31:33:c2:dd:4e: 8f:e6:07:17:5d:51:ad:62:ce:ca:6d:fb:0f:3c:3d:d4:23:12: 16:2c:71:6d:4d:a1:66:91:1b:ff:d1:80:8d:99:30:f2:5c:b1: fa:eb:e7:a0:8e:cf:76:ec:ee:8a:c2:ff:c2:a3:f4:11:6d:56: 78:05:95:7d:35:b6:b2:8c:f5:30:bb:7a:a0:7d:76:d0:e0:51: 5f:6e:ea:25:e8:16:46:02:0f:de:70:9f:d4:27:cf:b2:0f:b7: 09:4d:a9:95:e9:a8:41:8a:bc:70:67:a4:76:38:37:58:85:74: 1a:77:3e:f9:a1:2c:fb:fd:b5:73:19:a8:17:99:10:d7:25:11: ad:5c:9e:01:dd:21:76:41:e5:e9:d3:7e:26:8d:11:45:f4:09: 58:15:d7:4d:ed:3f:b3:fb:0e:45:a2:c7:9e:af:40:11:f5:51: 7c:d8:33:2a:cc:59:c1:ba:cc:76:ac:4a:ce:e0:1a:ce:30:77: 44:81:a9:f7:d4:90:2e:a1:32:db:e8:50:e8:50:2c:a5:92:e8: 42:04:32:46:b7:00:47:17:73:c0:1d:cc:8a:23:08:5d:b5:e4: eb:5c:18:1b:65:a2:87:df:6a:14:23:7a:c7:76:86:23:23:e3: bd:de:9c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ukg+XQUEfUZdn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YzEzZDllOWQtODFjMS00Yjc3LWJhMzktMTEwNTAwMDkxODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5FjpyuSLIhQxn03e7qc4C+w2lHx4XA4apfW D5F7DKO07cbtSuJWyqLhbAQu6Fsz50lF7J9p4SJ5+VHjXhRm4PINd7I0vTSj3/OB 4p0erq5YVwBUtPsQ6Df71g8JOp4IIBVEBySd31oVSAUot4zA/NtQ+b4C8T2ugQr8 Cyt6TrtiD3v/JEz1Z83dQhnZUSF2kLqtU12N/I0ioLLhnOW8AtQWmfR/Ma/z+kGu 8WPue5qOUfHyZklSoxUHR2VYiqLzpSnsk6zOlIrUKhrXQsseQcRdTdMVNBUgWdsd U2R4drDR6PnrFL4RrDacJXoq0VsQtOnLqL+7L2Rfd4eyLPe+2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCdNqeLnBw4H7V1oM1G6/a1MMGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOTljMDdhYWUtODMyZi0z MmUwLTg1ODAtOGEzZTZjNDkxMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ3txSgq8SLeyVRczcxM8LdTo/mBxddUa1izspt+w88PdQjEhYscW1N oWaRG//RgI2ZMPJcsfrr56COz3bs7orC/8Kj9BFtVngFlX01trKM9TC7eqB9dtDg UV9u6iXoFkYCD95wn9Qnz7IPtwlNqZXpqEGKvHBnpHY4N1iFdBp3PvmhLPv9tXMZ qBeZENclEa1cngHdIXZB5enTfiaNEUX0CVgV103tP7P7DkWix56vQBH1UXzYMyrM WcG6zHasSs7gGs4wd0SBqffUkC6hMtvoUOhQLKWS6EIEMka3AEcXc8AdzIojCF21 5OtcGBtlooffahQjesd2hiMj473enEA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:52 2025 by rpki-client