$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa File: c35888ef-4cd3-3aef-af71-6a02f56f600d.roa (raw, json) Hash identifier: kpIuVhjntn2noHPxZgiAUriPuo627Au8CWoLTWfGuLo= Subject key identifier: 77:A5:85:4D:6D:F0:15:40:94:10:FA:9D:25:04:34:A2:17:45:C0:C7 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584EC0A74B054D0A0FBC9ADBB380 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 33363 IP address blocks: 72.31.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:4b:05:4d:0a:0f:bc:9a:db:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=03e21701-b7d7-4187-9325-9d1f30a49cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:17:59:1c:5a:2c:18:41:f1:d8:43:32:2b: 53:f0:15:ba:15:74:2f:44:80:51:68:f3:d1:61:20: 5b:71:fa:e9:de:cd:a7:be:96:2e:e7:1f:66:df:8d: 9c:ad:07:14:6b:95:24:06:78:56:7d:b2:e0:93:55: b8:05:33:5d:ed:94:d8:ee:3e:bd:cc:fe:12:ee:3d: 81:64:e0:80:f7:2f:fd:81:2b:1f:82:13:61:cb:0e: cd:72:5c:6c:44:55:f7:2b:a8:63:72:5f:58:72:77: bf:19:a9:82:c5:b9:63:15:8b:6f:14:95:20:35:e8: 26:cd:49:1e:ce:a4:32:8f:ee:d8:91:89:46:0a:d6: 55:3f:e3:df:d7:11:6e:c6:0c:15:3c:4b:a0:1a:93: bc:63:9c:bb:e1:7c:26:00:ac:bd:e4:a1:a1:c9:ae: 16:f5:66:01:38:4a:4e:2e:9e:48:fd:22:b2:3d:cd: 3f:db:52:34:81:b5:b0:98:d9:0f:e4:a4:9e:78:82: ca:76:2f:50:38:2a:4d:cb:f2:c6:98:06:97:d0:cb: 60:42:69:95:3f:52:94:b6:9f:27:e9:9d:40:6b:50: 9c:be:e0:22:bd:e1:5f:fe:2d:5f:7b:26:fd:d6:e1: 66:bf:77:52:66:96:f3:8c:1d:e8:1b:3c:01:c7:f9: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A5:85:4D:6D:F0:15:40:94:10:FA:9D:25:04:34:A2:17:45:C0:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c35888ef-4cd3-3aef-af71-6a02f56f600d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:31:eb:08:67:04:e3:d4:70:2a:16:e8:ec:fa:ef:fd:4a:15: ac:30:6c:bc:04:26:a4:ad:77:a0:c2:7a:5c:34:5f:4d:bf:39: 3d:7c:42:bc:8b:8f:55:9f:8f:ed:00:31:8f:7a:d0:90:2e:bb: 34:61:32:a2:1c:59:bb:5c:3a:f9:97:b5:cf:96:c6:df:10:96: 6b:fc:3e:cf:b7:46:ea:ce:88:a1:7a:e0:6e:9a:3f:14:a9:98: 45:a7:a6:1a:66:ad:f7:72:15:72:f4:64:97:24:4e:62:af:86: 4f:79:18:ed:82:8e:04:ae:81:c5:11:a2:21:db:14:63:c9:4e: ee:9d:e8:39:61:70:b1:77:74:4c:62:67:1c:b0:d1:02:49:da: e8:27:ce:cd:2b:72:b1:da:74:0d:2d:c7:bc:e1:a3:3a:e5:64: e4:c8:f1:16:55:b1:50:74:f0:02:9f:d4:f1:53:28:61:dc:56: a1:84:5c:d1:88:36:9c:1f:d9:94:5c:b7:03:ea:30:d5:a6:23: fe:6d:64:e0:a9:ee:c7:1a:12:7a:86:21:59:08:9e:97:e0:84: 62:f2:bc:ef:5a:2c:ad:a4:38:6d:8d:6a:06:f4:2e:ee:ff:9f: e2:88:e6:f6:8d:70:72:a7:47:47:50:97:bd:11:be:63:e7:32: 14:b0:92:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap0sFTQoPvJrbs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk MDNlMjE3MDEtYjdkNy00MTg3LTkzMjUtOWQxZjMwYTQ5Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNUXWRxaLBhB8dhDMitT8BW6FXQvRIBRaPPR YSBbcfrp3s2nvpYu5x9m342crQcUa5UkBnhWfbLgk1W4BTNd7ZTY7j69zP4S7j2B ZOCA9y/9gSsfghNhyw7NclxsRFX3K6hjcl9Ycne/GamCxbljFYtvFJUgNegmzUke zqQyj+7YkYlGCtZVP+Pf1xFuxgwVPEugGpO8Y5y74XwmAKy95KGhya4W9WYBOEpO Lp5I/SKyPc0/21I0gbWwmNkP5KSeeILKdi9QOCpNy/LGmAaX0MtgQmmVP1KUtp8n 6Z1Aa1CcvuAiveFf/i1feyb91uFmv3dSZpbzjB3oGzwBx/m/OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHelhU1t8BVAlBD6nSUENKIXRcDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzM1ODg4ZWYtNGNkMy0z YWVmLWFmNzEtNmEwMmY1NmY2MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4x6whnBOPUcCoW6Oz67/1KFawwbLwEJqStd6DCelw0X02/OT18QryL j1Wfj+0AMY960JAuuzRhMqIcWbtcOvmXtc+Wxt8Qlmv8Ps+3RurOiKF64G6aPxSp mEWnphpmrfdyFXL0ZJckTmKvhk95GO2CjgSugcURoiHbFGPJTu6d6DlhcLF3dExi Zxyw0QJJ2ugnzs0rcrHadA0tx7zhozrlZOTI8RZVsVB08AKf1PFTKGHcVqGEXNGI Npwf2ZRctwPqMNWmI/5tZOCp7scaEnqGIVkInpfghGLyvO9aLK2kOG2Nagb0Lu7/ n+KI5vaNcHKnR0dQl70RvmPnMhSwkpw= -----END CERTIFICATE-----Generated at Sat Sep 5 00:41:51 2026 by rpki-client