$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa File: 868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa (raw, json) Hash identifier: wiJVMY1xgtkY9ZTZjU8QO6qTTrPN/5vSm8tXbpx6FaE= Subject key identifier: 93:2A:1A:C8:0E:8B:94:89:E3:D4:01:0B:36:A9:76:3E:9E:25:36:63 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5248786415ADDD9F532900 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:48:78:64:15:ad:dd:9f:53:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=aab0666d-bee7-42f2-962a-1046d225ac42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:be:7b:48:e8:2c:18:9d:9d:5f:1e:d3:c9:9d: 29:7d:ab:13:76:4f:53:d4:22:0e:66:67:94:07:83: de:2d:5b:26:fc:32:a8:53:b4:f8:46:fe:12:ea:26: 00:e6:fb:15:6e:ac:b3:07:f2:f0:26:72:21:70:9a: a6:46:81:15:ca:fc:67:10:3c:d5:43:c2:6e:89:84: 5b:50:8e:8c:5b:8e:05:03:19:58:f3:7e:56:58:db: a7:2c:ad:dd:71:e4:4f:f8:c3:7a:ce:04:95:92:65: b0:fc:da:9c:93:4c:a4:47:a7:ee:b1:2c:6b:08:ba: 06:9f:12:dd:66:41:77:c1:5c:08:b0:c9:d4:4d:2d: 2a:d1:e1:f5:6b:97:57:2b:6e:40:ed:d0:6d:b6:30: b3:83:43:a4:59:ee:2d:72:5c:30:8c:49:2b:f0:5d: 66:59:37:2b:74:4e:79:e9:d9:17:b6:d3:7a:b8:8a: 9b:85:94:86:d2:c7:2b:b0:54:9b:49:3a:d7:98:27: 04:0c:71:49:3d:8a:3a:7c:22:36:2f:ab:dd:08:85: 8b:3b:fa:b5:8d:7d:83:3c:5f:bb:0a:b3:a2:ab:b3: 3f:cc:cf:af:ca:fe:22:13:9d:58:a6:07:72:a1:a0: 54:2b:dc:3d:72:c0:ae:b6:69:f9:c7:4d:e9:c6:9d: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2A:1A:C8:0E:8B:94:89:E3:D4:01:0B:36:A9:76:3E:9E:25:36:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/868c54f6-3f30-3b0d-9ad5-b7be17303a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:24:fd:9f:c4:4c:b9:80:8b:04:f9:ec:78:3e:b5:58:df:66: 40:96:19:dc:4e:e2:5d:d5:7a:6e:ee:3f:5c:7e:a2:2f:70:5d: 1b:f6:5c:6c:5c:2c:ef:d4:85:d6:eb:8c:89:74:d1:27:18:a8: f0:71:19:e1:c5:b8:04:ed:3a:0f:e5:98:4f:4b:fa:1a:17:49: 80:b5:78:0e:16:10:6f:5e:1c:59:0f:a6:de:5a:41:dd:b5:eb: 6d:f3:1d:57:d8:c7:88:3a:b8:34:d1:6d:91:c3:82:99:08:9c: 63:28:5f:59:47:d5:31:01:df:2c:8b:cc:78:d6:3f:99:0f:75: f7:d8:0b:0b:34:f3:67:fb:c7:86:f3:a0:52:f6:b2:82:9b:4a: 85:30:6f:bf:2d:0c:99:b6:b1:2c:19:3d:fa:c1:87:be:b6:44: b0:a9:7c:91:42:3b:74:86:0c:9a:3b:07:f1:44:e4:a8:79:53: 22:40:94:6b:4e:f0:3f:97:f2:65:1d:2b:8d:09:7f:e3:2d:c4: ad:48:8c:e6:c1:e1:3d:8a:c5:df:b7:f6:63:5f:9c:63:81:c1: d2:86:76:d9:e3:31:0a:ce:4c:0f:84:fc:4f:f5:f1:cb:e1:bc: 7e:a2:48:91:4f:b4:7c:c0:de:a2:df:0b:dc:17:38:68:2e:f1: ec:9c:b6:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ukh4ZBWt3Z9TKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YWFiMDY2NmQtYmVlNy00MmYyLTk2MmEtMTA0NmQyMjVhYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb57SOgsGJ2dXx7TyZ0pfasTdk9T1CIOZmeU B4PeLVsm/DKoU7T4Rv4S6iYA5vsVbqyzB/LwJnIhcJqmRoEVyvxnEDzVQ8JuiYRb UI6MW44FAxlY835WWNunLK3dceRP+MN6zgSVkmWw/Nqck0ykR6fusSxrCLoGnxLd ZkF3wVwIsMnUTS0q0eH1a5dXK25A7dBttjCzg0OkWe4tclwwjEkr8F1mWTcrdE55 6dkXttN6uIqbhZSG0scrsFSbSTrXmCcEDHFJPYo6fCI2L6vdCIWLO/q1jX2DPF+7 CrOiq7M/zM+vyv4iE51YpgdyoaBUK9w9csCutmn5x03pxp2X6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMqGsgOi5SJ49QBCzapdj6eJTZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODY4YzU0ZjYtM2YzMC0z YjBkLTlhZDUtYjdiZTE3MzAzYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0k/Z/ETLmAiwT57Hg+tVjfZkCWGdxO4l3Vem7uP1x+oi9wXRv2XGxc LO/UhdbrjIl00ScYqPBxGeHFuATtOg/lmE9L+hoXSYC1eA4WEG9eHFkPpt5aQd21 623zHVfYx4g6uDTRbZHDgpkInGMoX1lH1TEB3yyLzHjWP5kPdffYCws082f7x4bz oFL2soKbSoUwb78tDJm2sSwZPfrBh762RLCpfJFCO3SGDJo7B/FE5Kh5UyJAlGtO 8D+X8mUdK40Jf+MtxK1IjObB4T2Kxd+39mNfnGOBwdKGdtnjMQrOTA+E/E/18cvh vH6iSJFPtHzA3qLfC9wXOGgu8eyctrc= -----END CERTIFICATE-----Generated at Fri Oct 17 05:03:17 2025 by rpki-client