$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa File: c35888ef-4cd3-3aef-af71-6a02f56f600d.roa (raw, json) Hash identifier: Wi0CtcUIyCTwGnv3Gx53ZjCjl1zsENzkO7U27eePzIo= Subject key identifier: C6:C3:C3:23:0A:82:5D:E6:61:D6:D3:84:9C:1D:4B:57:68:9B:B5:7B Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F52481BA7CCC89D265DF9E0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:48:1b:a7:cc:c8:9d:26:5d:f9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=9816581d-8ea9-4373-ba0d-b13fa69f2a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ad:27:e3:85:b1:9c:38:2a:79:cd:ff:0c:77: a6:61:5c:0d:a5:91:d0:ef:d5:ce:0a:ec:ba:70:16: bf:53:7e:97:bd:8a:9f:f7:7d:90:37:a1:83:53:cc: ec:fb:d7:65:a1:44:80:cd:fd:4b:ff:14:71:54:71: 81:29:c9:a3:a4:3c:f5:36:ba:3d:fd:f4:81:49:81: 62:cd:bf:d7:55:e8:a1:4f:a8:b8:9a:08:6b:48:49: 04:41:59:d6:4d:89:3c:0f:1d:20:2d:f2:0d:92:0f: a4:76:03:de:62:f9:0d:75:99:f9:6d:91:f4:6c:80: b9:6d:1a:15:68:9a:9c:4f:72:7e:d5:95:ee:43:f3: 37:83:5f:78:df:91:da:54:7f:e7:a6:d1:5e:cd:e3: 53:0e:77:0c:f5:92:46:36:17:fc:1e:90:b7:9e:aa: 08:aa:27:12:1f:83:bd:6b:32:bd:3d:b9:36:16:ed: 7e:4d:b3:80:1f:bf:da:c5:b1:36:05:6b:f9:72:a7: 17:d9:d0:b8:f8:3d:2c:46:b8:47:1e:6d:a0:c0:a7: a7:19:92:ee:72:43:9b:53:d7:b9:25:cb:81:f2:1f: 9d:1c:29:60:0c:2f:78:b2:97:92:45:41:37:b8:6a: bd:d1:57:27:73:c5:5f:53:6e:dd:73:07:a9:38:19: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C3:C3:23:0A:82:5D:E6:61:D6:D3:84:9C:1D:4B:57:68:9B:B5:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9e:31:cc:bc:37:1b:2c:b1:58:9b:a8:40:2a:07:54:6e:27: d4:a0:01:8d:46:93:61:7c:ea:33:83:bd:cc:7d:02:a9:01:3b: 9f:01:98:5b:3c:b0:e2:fe:e6:53:27:36:66:fe:9f:36:14:39: 02:72:0d:aa:6f:e1:c6:c5:0e:47:d4:dd:ef:7a:8a:d3:3a:b3: 25:f0:f9:02:45:92:70:55:7a:75:3b:38:f2:bf:4b:45:25:7c: 19:3a:b1:8a:82:27:08:4f:90:7c:8f:ff:7c:f1:76:a6:2b:fe: 08:52:90:da:34:70:1d:99:6b:c6:49:f2:18:d7:7b:6c:e5:b9: 4b:35:b9:c5:71:a9:45:d1:fa:45:0f:79:dc:62:5d:25:a6:6c: e2:52:79:95:88:06:99:34:5c:d9:68:fb:ad:9f:50:4d:95:df: 9f:ad:b4:e0:6e:82:90:5b:0f:ff:f7:72:e4:0a:4d:e7:44:b2: 87:55:eb:77:8b:17:b6:c9:4c:ed:c3:ed:96:5e:ae:ee:cf:76: 81:c4:87:30:71:7c:27:6e:ab:2b:64:bb:03:38:65:fe:f2:b7: 50:bc:f5:f1:b5:33:3c:75:ba:0d:b5:da:3e:bc:6e:2d:09:cd: 90:5a:f2:b4:40:96:e4:4c:be:e7:63:57:35:fb:bf:f3:00:f8: 48:94:2a:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ukgbp8zInSZd+eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OTgxNjU4MWQtOGVhOS00MzczLWJhMGQtYjEzZmE2OWYyYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq0n44WxnDgqec3/DHemYVwNpZHQ79XOCuy6 cBa/U36XvYqf932QN6GDU8zs+9dloUSAzf1L/xRxVHGBKcmjpDz1Nro9/fSBSYFi zb/XVeihT6i4mghrSEkEQVnWTYk8Dx0gLfINkg+kdgPeYvkNdZn5bZH0bIC5bRoV aJqcT3J+1ZXuQ/M3g19435HaVH/nptFezeNTDncM9ZJGNhf8HpC3nqoIqicSH4O9 azK9Pbk2Fu1+TbOAH7/axbE2BWv5cqcX2dC4+D0sRrhHHm2gwKenGZLuckObU9e5 JcuB8h+dHClgDC94speSRUE3uGq90Vcnc8VfU27dcwepOBkkrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbDwyMKgl3mYdbThJwdS1dom7V7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzM1ODg4ZWYtNGNkMy0z YWVmLWFmNzEtNmEwMmY1NmY2MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOeMcy8NxsssVibqEAqB1RuJ9SgAY1Gk2F86jODvcx9AqkBO58BmFs8 sOL+5lMnNmb+nzYUOQJyDapv4cbFDkfU3e96itM6syXw+QJFknBVenU7OPK/S0Ul fBk6sYqCJwhPkHyP/3zxdqYr/ghSkNo0cB2Za8ZJ8hjXe2zluUs1ucVxqUXR+kUP edxiXSWmbOJSeZWIBpk0XNlo+62fUE2V35+ttOBugpBbD//3cuQKTedEsodV63eL F7bJTO3D7ZZeru7PdoHEhzBxfCduqytkuwM4Zf7yt1C89fG1Mzx1ug212j68bi0J zZBa8rRAluRMvudjVzX7v/MA+EiUKkM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:06 2025 by rpki-client