$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa File: 10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa (raw, json) Hash identifier: 4aHW0kdf4dola7s2fFI4ZkmXjJrHzKlWSnr3cgfxYIc= Subject key identifier: E1:01:62:58:E1:5F:C4:79:E3:07:0D:BE:BB:AD:AE:9D:8C:92:F0:51 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E965051A3491065A6E28E00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 72.31.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:50:51:a3:49:10:65:a6:e2:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=dd7260fb-af41-4df2-b20c-cf27bb55ef35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:0d:b8:04:60:64:c2:8d:dc:f5:d6:73:e1: 55:45:76:0a:38:5d:e0:58:96:7f:e3:b8:37:77:17: 04:70:25:1a:36:3f:fe:44:b4:51:24:0f:7e:46:9d: ad:bd:bf:fb:2c:ce:83:5a:3a:c5:11:4c:54:ff:84: a9:9a:93:f7:29:03:d0:88:15:1f:de:71:1e:b5:13: e7:d0:f8:ae:09:2f:5b:01:88:94:59:8a:ab:17:a9: 54:b6:a0:cf:f3:ed:d1:6b:39:3a:1b:82:a2:16:60: d7:9d:49:65:0f:aa:c0:fd:ca:72:33:77:00:51:59: 8d:e2:61:08:4d:14:42:a8:1d:51:f6:c3:8c:ac:ae: 72:52:a9:d6:d4:16:b4:dc:d6:8e:2a:35:d2:89:c5: 4b:c0:10:3e:5f:1f:8b:7e:f5:0f:78:ef:56:61:0e: a1:7e:58:66:94:44:40:d2:ad:5a:b7:e1:c3:7d:54: 1d:8f:6c:de:6c:6d:b5:10:77:0e:e1:36:ee:2b:45: ea:af:cb:78:8f:80:99:fb:45:17:5e:dd:21:c1:50: e8:7e:f7:f3:47:87:f2:f1:6f:8f:30:9f:b0:b5:cb: d5:ef:df:f9:3e:bb:36:60:be:62:72:f6:5f:5a:11: 39:64:32:26:cd:de:bf:f7:16:02:d1:bd:2a:1d:12: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:01:62:58:E1:5F:C4:79:E3:07:0D:BE:BB:AD:AE:9D:8C:92:F0:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10ce5a68-25ea-3908-a5a8-13bbd9e1942a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b3:3d:97:22:e0:ef:79:c6:82:b0:03:c7:46:5d:6d:fd:63: ee:9b:4f:fb:fc:7d:63:c0:61:1d:4d:75:a6:ea:5a:e8:9c:01: b0:9b:90:31:5a:20:62:5d:04:1b:a8:4c:c9:a1:a4:53:cc:89: eb:9b:67:99:9e:a6:4b:88:52:0b:43:c6:cb:a4:4a:76:1b:1c: 05:0a:84:c2:6a:22:18:a8:10:b8:09:70:51:e7:cd:fd:b4:4e: 7f:60:b7:cb:da:c1:7c:66:c4:ba:df:16:b6:df:d9:fc:88:28: 2e:e7:9f:64:2e:a3:a1:c6:89:05:73:92:64:45:ff:7a:bc:ac: 67:c1:2d:65:bd:18:02:14:8f:d8:d7:28:de:9c:53:23:0a:b4: 13:f6:a7:b2:b4:2a:b7:56:c2:9c:4e:cf:18:14:8d:e7:2f:4f: c3:f4:a6:2c:4b:b2:25:4c:5e:31:ad:5b:9c:71:3c:54:6a:3e: b0:98:72:5f:cf:3c:40:5d:62:a1:ac:20:b3:a9:c6:7f:28:c4: 54:8d:98:0e:e2:e7:a6:a3:05:81:7c:fc:f8:b4:4a:5a:c8:ce: be:59:86:99:93:6c:57:c4:fa:a7:89:ee:ea:e4:3d:25:ba:77: 38:00:53:b8:6a:b5:b8:c2:7f:6d:c4:7f:38:fc:cc:c1:72:ef: ef:1a:e7:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqellBRo0kQZabijgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZGQ3MjYwZmItYWY0MS00ZGYyLWIyMGMtY2YyN2JiNTVlZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMMNuARgZMKN3PXWc+FVRXYKOF3gWJZ/47g3 dxcEcCUaNj/+RLRRJA9+Rp2tvb/7LM6DWjrFEUxU/4SpmpP3KQPQiBUf3nEetRPn 0PiuCS9bAYiUWYqrF6lUtqDP8+3Razk6G4KiFmDXnUllD6rA/cpyM3cAUVmN4mEI TRRCqB1R9sOMrK5yUqnW1Ba03NaOKjXSicVLwBA+Xx+LfvUPeO9WYQ6hflhmlERA 0q1at+HDfVQdj2zebG21EHcO4TbuK0Xqr8t4j4CZ+0UXXt0hwVDofvfzR4fy8W+P MJ+wtcvV79/5Prs2YL5icvZfWhE5ZDImzd6/9xYC0b0qHRK3IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEBYljhX8R54wcNvrutrp2MkvBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTBjZTVhNjgtMjVlYS0z OTA4LWE1YTgtMTNiYmQ5ZTE5NDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOzPZci4O95xoKwA8dGXW39Y+6bT/v8fWPAYR1NdabqWuicAbCbkDFa IGJdBBuoTMmhpFPMieubZ5mepkuIUgtDxsukSnYbHAUKhMJqIhioELgJcFHnzf20 Tn9gt8vawXxmxLrfFrbf2fyIKC7nn2Quo6HGiQVzkmRF/3q8rGfBLWW9GAIUj9jX KN6cUyMKtBP2p7K0KrdWwpxOzxgUjecvT8P0pixLsiVMXjGtW5xxPFRqPrCYcl/P PEBdYqGsILOpxn8oxFSNmA7i56ajBYF8/Pi0SlrIzr5ZhpmTbFfE+qeJ7urkPSW6 dzgAU7hqtbjCf23Efzj8zMFy7+8a58c= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:46 2025 by rpki-client