$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b29d1929-b2d4-3481-bc4a-c23b6ad76301.roa File: b29d1929-b2d4-3481-bc4a-c23b6ad76301.roa (raw, json) Hash identifier: KHia/vFlLhS8sk4OfiAcKLoFM4+obh/Lvs9WOhkoZyw= Subject key identifier: A1:B5:BA:9F:13:5A:22:7A:97:39:B7:0E:11:71:90:80:38:BE:92:52 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F521F816B43992F15CBFC40 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b29d1929-b2d4-3481-bc4a-c23b6ad76301.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:1f:81:6b:43:99:2f:15:cb:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=4daecdf1-d2fe-4fd4-b215-cda194e27cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:8e:7c:34:38:a0:96:47:a6:af:82:e5:61: f2:9c:f5:31:f7:66:89:e6:d2:a1:25:03:ca:f3:35: 31:ed:f3:d9:e9:e5:41:b7:a8:ae:53:3c:e4:b5:a4: 26:75:76:19:94:f2:1f:0a:a4:80:29:51:51:09:58: bc:bf:4b:8c:fd:52:0a:b9:24:69:b5:4f:f4:a3:65: f4:ac:cd:55:ec:2d:2c:46:92:71:64:4f:55:2a:86: 40:86:92:5f:65:18:a6:65:57:d7:36:34:8b:72:82: 2b:3c:4a:36:27:15:40:48:9e:27:e5:7b:63:a2:3b: 7d:fe:6e:a6:b4:a3:32:54:d2:cd:b4:2a:24:3f:ed: e3:f2:3b:50:5f:ff:2e:b5:2f:f8:f1:1c:0b:82:32: e3:1f:41:48:f7:dc:18:19:46:d9:55:dc:31:8c:7d: 5d:6f:d1:dd:9f:43:dc:b5:94:df:b8:cf:94:07:3f: e0:02:89:44:b9:3e:6c:ba:24:f7:78:6c:8c:1e:db: 36:61:13:6e:b1:59:71:4f:0c:ee:74:f8:d4:4d:ae: 52:cc:29:4e:42:c9:b8:e0:ed:7b:dc:1b:21:ed:fd: 13:7e:be:b5:4d:66:18:b3:92:b2:6f:ae:e7:8b:db: 72:50:ec:1c:bd:3d:64:2d:1d:f7:dd:19:40:e9:5e: b7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B5:BA:9F:13:5A:22:7A:97:39:B7:0E:11:71:90:80:38:BE:92:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b29d1929-b2d4-3481-bc4a-c23b6ad76301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:17:c2:d5:c2:b5:28:ec:70:da:4f:97:4e:72:80:7d:6c:96: db:de:68:91:30:6c:9c:b2:6f:5a:b6:45:37:2c:d4:98:df:27: cc:aa:d5:f0:eb:fc:39:d7:ce:b9:41:6e:4a:1a:83:b6:fb:ec: bf:34:4b:a3:8f:d7:93:36:46:a4:55:11:26:29:de:3e:2f:24: df:73:f9:61:3c:15:86:d5:e7:61:1f:ae:7f:fd:21:07:23:01: 25:40:22:c7:3e:b5:4e:47:da:fd:13:bf:f7:11:f7:f4:e3:de: 41:26:1b:02:b6:20:df:4f:b4:6f:47:b6:47:87:25:92:e8:c7: 6e:3e:d2:37:1f:ef:fa:b7:d5:2c:a5:24:a8:8d:12:61:2a:a9: bc:ee:b1:15:79:1d:94:5a:87:05:26:d3:8e:03:0f:5c:fb:6c: 47:7d:1e:61:d6:af:ee:1a:ef:fd:b7:5f:2e:bd:4f:f0:d3:c7: 4a:ae:15:5a:64:78:02:c7:d4:51:dc:4b:a9:2c:c4:0c:be:b5: 4c:e1:a9:8e:9e:c3:a2:59:70:4c:91:19:77:0e:88:a0:d3:90: 36:93:cd:64:41:00:9a:68:f0:bf:03:e8:f3:8c:83:7d:c4:ca: 1c:6f:06:98:99:af:b2:0f:3a:94:60:03:42:7c:c0:9b:2a:e0: 4b:49:6c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uh+Ba0OZLxXL/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NGRhZWNkZjEtZDJmZS00ZmQ0LWIyMTUtY2RhMTk0ZTI3Y2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouuOfDQ4oJZHpq+C5WHynPUx92aJ5tKhJQPK 8zUx7fPZ6eVBt6iuUzzktaQmdXYZlPIfCqSAKVFRCVi8v0uM/VIKuSRptU/0o2X0 rM1V7C0sRpJxZE9VKoZAhpJfZRimZVfXNjSLcoIrPEo2JxVASJ4n5Xtjojt9/m6m tKMyVNLNtCokP+3j8jtQX/8utS/48RwLgjLjH0FI99wYGUbZVdwxjH1db9Hdn0Pc tZTfuM+UBz/gAolEuT5suiT3eGyMHts2YRNusVlxTwzudPjUTa5SzClOQsm44O17 3Bsh7f0Tfr61TWYYs5Kyb67ni9tyUOwcvT1kLR333RlA6V637QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG1up8TWiJ6lzm3DhFxkIA4vpJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjI5ZDE5MjktYjJkNC0z NDgxLWJjNGEtYzIzYjZhZDc2MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB9+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4XwtXCtSjscNpPl05ygH1sltveaJEwbJyyb1q2RTcs1JjfJ8yq1fDr /DnXzrlBbkoag7b77L80S6OP15M2RqRVESYp3j4vJN9z+WE8FYbV52Efrn/9IQcj ASVAIsc+tU5H2v0Tv/cR9/Tj3kEmGwK2IN9PtG9HtkeHJZLox24+0jcf7/q31Syl JKiNEmEqqbzusRV5HZRahwUm044DD1z7bEd9HmHWr+4a7/23Xy69T/DTx0quFVpk eALH1FHcS6ksxAy+tUzhqY6ew6JZcEyRGXcOiKDTkDaTzWRBAJpo8L8D6POMg33E yhxvBpiZr7IPOpRgA0J8wJsq4EtJbBE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:58 2025 by rpki-client