$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa File: ce773cd7-a29f-364b-b715-1a31d4511544.roa (raw, json) Hash identifier: +jzIBDqpJFISJQdJmmcW6Bw1StZQIMtd6SMHtIvbTf0= Subject key identifier: 71:33:00:73:CD:67:B4:AE:CC:40:B3:32:E6:85:1E:B3:85:21:62:8E Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F524A33C77CFFF5AF5D75C6 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:4a:33:c7:7c:ff:f5:af:5d:75:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=0d5301d2-0a13-4d6a-bddb-52d248e671c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:54:fe:b3:7a:bd:47:f5:68:96:98:6c:3e:fb: 2f:ce:8c:8e:21:69:c5:3b:8a:c7:f0:db:bf:d8:94: 72:0e:60:22:5e:14:0e:fe:1f:f9:5f:c6:e0:89:07: 69:e9:dc:8a:de:25:f5:df:cf:7d:13:54:48:8c:63: bb:84:c5:b9:92:89:fa:6e:9e:ad:73:7f:14:4c:68: 48:ed:58:47:2e:9f:52:5b:ca:25:c6:ba:7a:58:f0: 5e:b9:fd:ca:c7:c2:09:38:5c:e1:8e:fe:62:e1:96: 59:cf:dd:e9:04:4a:3a:38:98:49:ba:b0:64:ee:80: 59:19:81:72:60:1e:ca:82:c9:6f:af:6d:2a:b7:0e: d4:60:6c:fb:16:ca:bd:05:e2:1f:28:e2:65:26:d9: 79:06:96:00:37:73:98:e1:81:a9:6a:62:34:20:e0: 18:71:19:35:47:19:06:ee:2f:b3:31:5c:b0:11:38: 34:8e:72:47:ec:bc:09:8b:af:5f:58:91:cf:a8:2f: 8f:94:a2:e2:3b:f8:93:4f:3d:dc:d5:45:a0:31:35: c4:ad:1a:60:87:02:3c:21:77:cd:88:c9:ff:ac:84: 96:de:4a:14:5d:ed:5b:f4:45:bb:7d:a6:4b:52:37: 21:90:e2:34:1e:01:0c:b2:bb:b6:f8:a6:5b:bd:8a: 34:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:33:00:73:CD:67:B4:AE:CC:40:B3:32:E6:85:1E:B3:85:21:62:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce773cd7-a29f-364b-b715-1a31d4511544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7d:e0:d8:40:07:39:a4:2f:e8:b9:38:d9:6d:a7:b1:1c:19: 60:1f:3f:b4:ec:7e:02:b3:5c:3c:a1:16:44:a2:56:63:8b:07: 8b:ab:79:d7:a4:13:74:bf:28:e2:23:e4:ea:68:4d:2d:7b:dd: 1a:bc:7d:1b:0d:54:31:0e:22:27:3e:0e:a4:9c:cc:35:ba:73: b6:4b:19:df:9f:28:ee:29:c0:ec:c5:6e:bc:f7:3f:c7:6f:0f: c0:6c:84:3e:04:05:50:e5:e8:e6:75:ba:20:3a:b5:a2:5f:c8: 38:5b:eb:85:09:1b:92:79:01:81:ab:0b:ed:41:cf:78:ec:87: 00:fb:6d:14:e9:ef:b0:0a:01:fa:3f:46:97:e5:c6:6d:42:03: f5:86:cb:02:68:b3:25:f2:bf:01:03:17:a2:9c:20:14:99:e7: 05:29:aa:fb:52:ba:12:64:1c:ae:bb:11:45:cc:d6:72:4e:bb: 39:55:3f:98:80:63:21:57:a1:be:9b:84:2b:fe:33:1d:29:51: 94:b1:a4:07:7c:bd:4e:e7:82:4e:ee:fa:c2:6a:b8:6d:68:b1: d6:bd:bd:e4:c9:d0:c9:22:4a:8b:95:b1:09:af:e1:22:6d:1c: b3:6c:34:03:31:51:c7:af:27:07:0a:ef:92:12:40:f3:a5:74: 63:f2:71:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ukozx3z/9a9ddcYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MGQ1MzAxZDItMGExMy00ZDZhLWJkZGItNTJkMjQ4ZTY3MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21T+s3q9R/VolphsPvsvzoyOIWnFO4rH8Nu/ 2JRyDmAiXhQO/h/5X8bgiQdp6dyK3iX13899E1RIjGO7hMW5kon6bp6tc38UTGhI 7VhHLp9SW8olxrp6WPBeuf3Kx8IJOFzhjv5i4ZZZz93pBEo6OJhJurBk7oBZGYFy YB7Kgslvr20qtw7UYGz7Fsq9BeIfKOJlJtl5BpYAN3OY4YGpamI0IOAYcRk1RxkG 7i+zMVywETg0jnJH7LwJi69fWJHPqC+PlKLiO/iTTz3c1UWgMTXErRpghwI8IXfN iMn/rISW3koUXe1b9EW7faZLUjchkOI0HgEMsru2+KZbvYo0tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEzAHPNZ7SuzECzMuaFHrOFIWKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2U3NzNjZDctYTI5Zi0z NjRiLWI3MTUtMWEzMWQ0NTExNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt94NhABzmkL+i5ONltp7EcGWAfP7TsfgKzXDyhFkSiVmOLB4uredek E3S/KOIj5OpoTS173Rq8fRsNVDEOIic+DqSczDW6c7ZLGd+fKO4pwOzFbrz3P8dv D8BshD4EBVDl6OZ1uiA6taJfyDhb64UJG5J5AYGrC+1Bz3jshwD7bRTp77AKAfo/ Rpflxm1CA/WGywJosyXyvwEDF6KcIBSZ5wUpqvtSuhJkHK67EUXM1nJOuzlVP5iA YyFXob6bhCv+Mx0pUZSxpAd8vU7ngk7u+sJquG1osda9veTJ0MkiSouVsQmv4SJt HLNsNAMxUcevJwcK75ISQPOldGPycec= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:26 2025 by rpki-client