$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9e193c2-c0ab-30f3-ad91-8f910ae7b85c.roa File: e9e193c2-c0ab-30f3-ad91-8f910ae7b85c.roa (raw, json) Hash identifier: 12Z8oPmeF4jS7bA1ppeGGQSRf/4Hgw+3RTZADBOCnls= Subject key identifier: 68:12:64:56:69:64:68:AC:6F:82:91:CD:D9:65:3B:27:03:65:D4:AF Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F524149955B1517AB6ADE80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9e193c2-c0ab-30f3-ad91-8f910ae7b85c.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 16787 IP address blocks: 72.31.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:41:49:95:5b:15:17:ab:6a:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=44d97ff4-5266-4ff0-8296-99a727ff981a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dd:4a:c5:8c:4e:2e:e6:7d:7d:47:39:3e:46: 90:6c:62:89:e8:12:14:4e:72:2e:d9:4f:dc:53:10: 71:8a:9f:7d:7d:8f:26:3d:39:ee:1b:5f:64:83:5e: 0a:ee:d9:89:13:ce:50:fb:25:06:05:33:12:d8:5c: 96:d6:8a:6d:56:97:ab:bf:77:00:6f:84:29:34:f6: c1:39:ac:4a:59:f0:2f:f8:94:1a:71:2b:41:2c:25: 68:fc:45:14:03:f7:cc:a6:4f:a6:a0:ae:e0:f5:24: 25:c4:b8:0a:a7:c8:d4:96:3a:2e:b8:c4:78:d8:18: 09:e3:ee:15:be:00:7e:4f:e7:0b:5b:84:a9:a2:c8: 25:f4:c1:de:16:ab:c3:1b:79:68:54:5e:65:8e:7c: 3b:aa:92:2a:03:86:d7:7c:34:df:6b:c5:c5:00:9d: 8b:4d:66:d6:f0:e7:6c:23:b3:57:dd:2b:d2:81:5e: 25:be:40:4e:44:1a:72:47:f1:40:0a:fe:5a:c7:ff: ac:36:44:82:ae:71:e4:b8:b2:81:51:84:a8:1a:83: 0c:19:63:6e:95:68:ec:bb:a3:45:81:15:25:28:b9: 85:ac:88:57:60:e2:a1:37:02:8a:9d:c1:7c:6c:c9: 61:28:26:f7:bd:07:c7:4a:13:60:92:82:93:23:d0: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:12:64:56:69:64:68:AC:6F:82:91:CD:D9:65:3B:27:03:65:D4:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e9e193c2-c0ab-30f3-ad91-8f910ae7b85c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:66:81:0d:4b:6f:15:b5:ba:26:73:d4:11:46:70:6d:d8:23: ff:aa:0d:f1:ab:2a:cc:05:79:b3:05:2f:d3:cc:66:4a:3d:11: 5b:6c:fb:da:f3:41:bf:71:13:b4:47:c1:b4:5d:77:67:00:fc: 3b:06:fc:c6:12:ef:00:4b:26:6d:c8:54:13:32:0f:e2:2c:ba: 91:c0:31:df:64:17:28:5a:57:14:b6:cb:36:74:12:94:da:8c: 9b:e6:a7:71:57:2c:c5:18:81:5c:a6:86:05:42:a6:aa:cf:e6: a7:a9:e2:0c:65:c8:8b:4d:9b:7c:9b:eb:a3:80:71:69:b4:59: a2:a8:fa:db:80:79:d7:f9:8a:b2:b2:4e:56:22:88:61:c8:da: 9d:f0:41:d9:d0:51:1c:5f:65:ca:08:da:79:1e:99:ba:19:25: 2d:75:ba:cf:a3:37:9d:5b:c7:17:f4:4a:4f:b8:ce:66:cc:d5: d3:57:76:03:75:38:31:92:a6:48:4d:1f:e3:c0:f8:e3:fc:42: c0:09:b9:7a:30:f6:78:c0:e1:de:92:81:56:36:34:7f:f0:a4: 11:43:ac:e9:a6:de:d3:b6:47:c8:cc:77:f0:c0:e1:7e:45:f1: b6:a2:16:3e:53:25:75:a9:61:ca:34:d2:08:cf:25:74:5b:3a: a5:ed:ec:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkFJlVsVF6tq3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NDRkOTdmZjQtNTI2Ni00ZmYwLTgyOTYtOTlhNzI3ZmY5ODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d1KxYxOLuZ9fUc5PkaQbGKJ6BIUTnIu2U/c UxBxip99fY8mPTnuG19kg14K7tmJE85Q+yUGBTMS2FyW1optVperv3cAb4QpNPbB OaxKWfAv+JQacStBLCVo/EUUA/fMpk+moK7g9SQlxLgKp8jUljouuMR42BgJ4+4V vgB+T+cLW4Sposgl9MHeFqvDG3loVF5ljnw7qpIqA4bXfDTfa8XFAJ2LTWbW8Ods I7NX3SvSgV4lvkBORBpyR/FACv5ax/+sNkSCrnHkuLKBUYSoGoMMGWNulWjsu6NF gRUlKLmFrIhXYOKhNwKKncF8bMlhKCb3vQfHShNgkoKTI9DJ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgSZFZpZGisb4KRzdllOycDZdSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTllMTkzYzItYzBhYi0z MGYzLWFkOTEtOGY5MTBhZTdiODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB95MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNmgQ1LbxW1uiZz1BFGcG3YI/+qDfGrKswFebMFL9PMZko9EVts+9rz Qb9xE7RHwbRdd2cA/DsG/MYS7wBLJm3IVBMyD+IsupHAMd9kFyhaVxS2yzZ0EpTa jJvmp3FXLMUYgVymhgVCpqrP5qep4gxlyItNm3yb66OAcWm0WaKo+tuAedf5irKy TlYiiGHI2p3wQdnQURxfZcoI2nkemboZJS11us+jN51bxxf0Sk+4zmbM1dNXdgN1 ODGSpkhNH+PA+OP8QsAJuXow9njA4d6SgVY2NH/wpBFDrOmm3tO2R8jMd/DA4X5F 8baiFj5TJXWpYco00gjPJXRbOqXt7Mw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:15 2025 by rpki-client