$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa File: 4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa (raw, json) Hash identifier: fTWSoLZ33J6SHjDjX56UyW/tqxOJ0O0lkbElP6MPDG4= Subject key identifier: A4:09:4D:B9:57:E6:2B:FA:2B:F7:7B:8B:48:95:16:9F:12:58:79:C6 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B3FC81361FAAD9FF85B79F460 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa Signing time: Fri 19 Sep 2025 18:46:45 +0000 ROA not before: Fri 19 Sep 2025 18:46:45 +0000 ROA not after: Thu 18 Dec 2025 19:46:45 +0000 asID: 0 IP address blocks: 72.31.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:c8:13:61:fa:ad:9f:f8:5b:79:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Sep 19 18:46:45 2025 GMT Not After : Dec 18 19:46:45 2025 GMT Subject: CN=59557c6d-6bb9-427a-ae8d-148c9dc355aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:91:20:c5:d8:ff:70:67:5a:d9:56:2d:aa: a0:62:a3:16:88:c7:ce:27:f5:2a:f6:31:75:e0:ac: c3:a9:31:3c:6d:52:2b:9f:a0:82:c3:e6:c1:7b:05: 93:d1:4f:5c:3d:87:e9:5c:44:aa:7e:94:1d:b0:e1: 21:ae:74:6c:35:fb:56:c7:47:e1:ef:ab:e1:61:f2: d3:c9:84:bb:d7:28:1d:fb:b0:a3:fb:a6:29:d9:94: 99:e2:b2:46:3f:ec:96:e0:e3:45:bb:ab:ea:60:1f: 5d:b9:a9:6e:db:2a:36:0b:f6:f5:ab:b5:80:d6:39: 7d:f4:f7:fd:cf:67:4b:d1:e6:ab:97:2e:5c:c5:ec: 7b:3c:5d:a9:20:81:be:93:b4:4d:1a:d1:a5:70:08: 77:a4:b8:cf:b4:d1:6e:fd:1f:77:69:d9:33:ac:6f: e5:3e:a0:55:6a:44:a0:8d:7e:f7:e7:2e:b4:e4:a4: 75:54:19:25:df:85:a7:f4:fb:b8:fd:8a:0e:43:9b: 76:9d:14:eb:70:41:26:9e:31:d2:71:1a:53:71:3e: be:96:95:dc:83:aa:36:8b:35:dd:79:0a:2c:7d:23: a4:81:40:f8:18:77:c9:64:65:a4:cb:cd:de:00:90: 57:76:05:66:cd:d0:7d:6d:3a:ce:0f:ba:72:a2:57: e5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:09:4D:B9:57:E6:2B:FA:2B:F7:7B:8B:48:95:16:9F:12:58:79:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7c:04:8d:0b:77:bb:2a:1b:52:4f:fd:76:d5:a2:b0:78:5c: e1:b5:81:09:be:7f:ed:60:b6:a9:07:87:25:61:8b:de:c7:08: 3c:89:1a:39:eb:22:4e:05:d0:a4:01:8c:1e:61:48:64:4d:32: 07:cc:ad:9a:86:80:0b:2d:8e:4e:5f:82:2d:c2:4e:66:54:d3: fc:d3:7b:92:c6:0e:67:22:6d:3d:2f:63:2a:6f:3b:39:d0:1a: cb:ce:a0:c0:db:eb:57:75:a6:7a:af:6a:77:6c:40:cb:c0:34: 28:4e:c7:03:4f:e4:0b:55:b0:c0:fb:2b:c0:7b:b8:3e:7a:88: db:44:b8:77:a1:45:8d:57:07:87:39:c4:b8:e4:55:84:a7:eb: 09:59:c8:47:13:37:97:a7:db:6f:27:95:6a:dc:10:54:7d:ba: ed:93:08:dd:7a:49:8c:f4:44:02:02:9a:9b:6b:04:f2:4a:76: 81:fb:41:49:26:76:fe:4e:95:38:41:9f:53:a0:ec:25:ff:b3: 79:39:f5:5d:97:1a:95:51:3b:07:8a:91:5f:ec:78:d3:5d:d8: f1:4d:64:38:4e:9f:99:1a:6b:4d:92:89:87:12:9c:69:9b:1f: cb:d8:c9:d6:0e:3a:49:3e:9c:3d:50:eb:5e:80:55:9e:80:26: 1c:6a:b9:db -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs/yBNh+q2f+Ft59GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDkxOTE4NDY0NVoXDTI1MTIxODE5NDY0NVowLzEtMCsGA1UEAxMk NTk1NTdjNmQtNmJiOS00MjdhLWFlOGQtMTQ4YzlkYzM1NWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdaRIMXY/3BnWtlWLaqgYqMWiMfOJ/Uq9jF1 4KzDqTE8bVIrn6CCw+bBewWT0U9cPYfpXESqfpQdsOEhrnRsNftWx0fh76vhYfLT yYS71ygd+7Cj+6Yp2ZSZ4rJGP+yW4ONFu6vqYB9dualu2yo2C/b1q7WA1jl99Pf9 z2dL0early5cxex7PF2pIIG+k7RNGtGlcAh3pLjPtNFu/R93adkzrG/lPqBVakSg jX735y605KR1VBkl34Wn9Pu4/YoOQ5t2nRTrcEEmnjHScRpTcT6+lpXcg6o2izXd eQosfSOkgUD4GHfJZGWky83eAJBXdgVmzdB9bTrOD7pyolflJQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKQJTblX5iv6K/d7i0iVFp8SWHnGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNGE1ZGYyMjEtNzI0Mi0z NDI3LWIxYzItYjc1Y2I5YTM1ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASB8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKXwEjQt3uyobUk/9dtWisHhc4bWBCb5/7WC2qQeHJWGL3scIPIkaOesi TgXQpAGMHmFIZE0yB8ytmoaACy2OTl+CLcJOZlTT/NN7ksYOZyJtPS9jKm87OdAa y86gwNvrV3Wmeq9qd2xAy8A0KE7HA0/kC1WwwPsrwHu4PnqI20S4d6FFjVcHhznE uORVhKfrCVnIRxM3l6fbbyeVatwQVH267ZMI3XpJjPREAgKam2sE8kp2gftBSSZ2 /k6VOEGfU6DsJf+zeTn1XZcalVE7B4qRX+x4013Y8U1kOE6fmRprTZKJhxKcaZsf y9jJ1g46ST6cPVDrXoBVnoAmHGq52w== -----END CERTIFICATE-----Generated at Wed Oct 8 14:06:41 2025 by rpki-client