$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b4bb8b3d-a242-3ca1-874b-32dacab887d7.roa File: b4bb8b3d-a242-3ca1-874b-32dacab887d7.roa (raw, json) Hash identifier: SNDMEAfDg4qvqdwbd347JUfKygjpcbuIKGE2vkImr/s= Subject key identifier: 40:A1:30:E3:30:7D:4F:20:11:84:AB:96:39:6E:95:BA:0A:4B:06:F5 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584EC0A74C086E64F357877C9A80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b4bb8b3d-a242-3ca1-874b-32dacab887d7.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 33363 IP address blocks: 72.31.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:4c:08:6e:64:f3:57:87:7c:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=663888aa-82f0-48cc-b285-384295091831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:44:15:73:a5:f0:21:62:9c:2a:65:61:ec:4d: 24:1f:0f:93:7b:5e:9e:9c:88:13:da:00:93:65:1f: d0:8f:01:87:61:87:0a:a2:56:1c:e0:b8:8c:a5:0b: 41:8b:2f:2a:d5:b9:d8:b4:22:1e:dd:e5:db:7d:43: f7:70:73:23:03:5b:c1:de:44:e3:c5:5a:18:a8:d7: da:a7:ce:54:80:bd:e8:87:93:f4:06:6e:82:96:85: 5f:08:bc:0f:4b:da:7e:6c:a2:dc:9e:86:02:74:23: a0:d4:f5:91:46:bd:11:cc:bc:00:86:81:fe:2e:54: e6:7c:f9:e4:0f:93:33:07:42:6f:ca:4d:64:da:1a: 05:a1:04:a2:af:3f:1b:d6:4b:4d:44:f6:71:8b:29: 6e:f9:78:58:36:30:08:23:5a:d8:ed:7c:ea:ea:60: 06:d5:7b:8e:4b:fc:7d:96:47:f2:19:80:64:f5:87: 8c:c2:1d:aa:29:3d:4d:be:8d:ad:d0:3d:d4:46:dc: dd:94:97:f8:1f:79:e9:31:3b:a5:4c:30:a9:ca:09: b3:f9:1a:6e:47:1e:db:8d:de:19:61:28:44:38:79: db:37:2b:73:44:82:80:fa:53:c8:a6:04:e5:ba:17: c0:86:1f:c8:19:e2:ea:7e:55:04:04:bd:01:92:c8: 11:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A1:30:E3:30:7D:4F:20:11:84:AB:96:39:6E:95:BA:0A:4B:06:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b4bb8b3d-a242-3ca1-874b-32dacab887d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b6:30:65:07:28:38:f0:a1:21:bd:45:3c:1f:1a:b8:70:7d: 0a:14:33:90:6a:8c:a4:a2:69:82:6d:bf:4d:c5:03:f3:0d:87: f0:a0:4d:d6:2a:50:bb:46:27:c9:80:de:04:a6:c8:42:72:68: 85:0a:ba:0a:34:f7:6e:cb:8e:9e:43:1e:52:8c:53:54:61:d4: 39:21:91:b9:29:8c:c3:88:c6:44:aa:5a:cf:32:58:53:d7:ee: f4:e4:bc:99:0f:9b:f9:0a:44:bd:3c:f6:68:96:22:2e:a3:70: ba:0f:87:a8:66:26:f9:86:46:01:8b:53:19:bb:b2:5d:f6:1c: 9d:d6:57:b7:e7:e4:28:e3:6d:12:98:b5:fc:cb:60:db:22:1a: d3:34:63:8c:8f:25:05:06:36:bc:5b:96:b0:fe:38:65:21:d4: 38:db:81:3a:07:dc:63:4c:68:26:e9:36:ce:66:8e:98:cd:34: fb:d5:18:ec:1d:44:fb:9c:11:8c:69:9c:2d:ff:f1:3b:c1:ce: cb:2e:4c:90:cb:5b:c0:0a:b7:83:c7:f7:a9:1d:0e:b6:b9:ed: 2a:f1:ab:91:08:b4:6e:44:c8:6f:9b:6d:8b:53:f4:ce:ae:6f: 0a:9c:39:34:67:61:bd:62:cf:ec:b4:94:99:5a:c4:27:f1:be: fa:a1:51:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap0wIbmTzV4d8moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk NjYzODg4YWEtODJmMC00OGNjLWIyODUtMzg0Mjk1MDkxODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUQVc6XwIWKcKmVh7E0kHw+Te16enIgT2gCT ZR/QjwGHYYcKolYc4LiMpQtBiy8q1bnYtCIe3eXbfUP3cHMjA1vB3kTjxVoYqNfa p85UgL3oh5P0Bm6CloVfCLwPS9p+bKLcnoYCdCOg1PWRRr0RzLwAhoH+LlTmfPnk D5MzB0Jvyk1k2hoFoQSirz8b1ktNRPZxiylu+XhYNjAII1rY7Xzq6mAG1XuOS/x9 lkfyGYBk9YeMwh2qKT1Nvo2t0D3URtzdlJf4H3npMTulTDCpygmz+RpuRx7bjd4Z YShEOHnbNytzRIKA+lPIpgTluhfAhh/IGeLqflUEBL0BksgRVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEChMOMwfU8gEYSrljlulboKSwb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjRiYjhiM2QtYTI0Mi0z Y2ExLTg3NGItMzJkYWNhYjg4N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB8NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK2MGUHKDjwoSG9RTwfGrhwfQoUM5BqjKSiaYJtv03FA/MNh/CgTdYq ULtGJ8mA3gSmyEJyaIUKugo0927Ljp5DHlKMU1Rh1DkhkbkpjMOIxkSqWs8yWFPX 7vTkvJkPm/kKRL089miWIi6jcLoPh6hmJvmGRgGLUxm7sl32HJ3WV7fn5CjjbRKY tfzLYNsiGtM0Y4yPJQUGNrxblrD+OGUh1DjbgToH3GNMaCbpNs5mjpjNNPvVGOwd RPucEYxpnC3/8TvBzssuTJDLW8AKt4PH96kdDra57Srxq5EItG5EyG+bbYtT9M6u bwqcOTRnYb1iz+y0lJlaxCfxvvqhUSI= -----END CERTIFICATE-----Generated at Sat Sep 5 00:45:11 2026 by rpki-client