$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a1cf585-1dec-3c96-9823-7febeed081a8.roa File: 3a1cf585-1dec-3c96-9823-7febeed081a8.roa (raw, json) Hash identifier: vnSPSy5tc2eI1/Z9ReVvjVtozT8F5M9vR3tI3fBP2/A= Subject key identifier: E4:02:99:D8:10:21:A1:15:95:56:49:92:10:F7:11:6A:88:C2:60:11 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F524E0393073BC5EC041DE0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a1cf585-1dec-3c96-9823-7febeed081a8.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 72.31.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:4e:03:93:07:3b:c5:ec:04:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=173b725c-f45f-4347-a35f-20e43d9f3258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e3:36:9a:d9:79:0e:04:98:f3:a6:1a:3d:66: 22:8b:aa:12:2e:46:66:9f:4c:bc:10:80:65:bd:06: d7:e5:89:98:95:4a:86:84:54:0a:86:1e:a5:37:42: 6c:0e:26:45:89:ee:17:4b:ee:4f:fd:27:c6:16:cb: 04:ef:c3:f4:74:b3:32:cf:d5:09:3c:da:9c:15:cb: e1:30:53:70:ff:7f:4e:df:97:be:68:a2:21:3c:9d: c8:63:f6:03:11:4f:fc:3c:d7:96:bd:07:ef:3b:21: 2f:f3:c1:93:ba:70:44:9b:c7:b9:5a:82:93:62:60: 7a:3f:d2:7c:17:10:59:24:ee:4a:f6:b1:09:87:b9: 47:f4:44:cc:56:3a:7b:b2:0d:bd:07:11:bc:2f:b0: 70:d0:3e:28:0f:87:62:61:1b:d9:b6:d0:a3:82:35: 99:6d:6f:b7:0f:35:0a:94:8e:10:a7:5d:80:33:70: c6:bf:66:27:64:84:ae:19:9f:4d:6f:b9:a6:25:4a: 21:4e:e9:00:5d:11:2e:61:a7:66:fe:12:6c:f7:9c: b3:de:c6:9d:d9:c0:12:30:39:72:26:4e:c3:0c:91: 6f:fb:04:41:73:cb:ee:f3:df:72:50:32:d4:fb:77: 44:e2:10:47:89:61:f9:74:fc:30:b1:15:e1:32:52: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:02:99:D8:10:21:A1:15:95:56:49:92:10:F7:11:6A:88:C2:60:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3a1cf585-1dec-3c96-9823-7febeed081a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e8:70:50:c4:6a:79:14:da:de:47:c9:ae:94:96:6b:7b:bc: af:a6:b2:a2:e5:16:72:6d:09:15:e1:77:4c:cd:74:e5:bf:72: 0f:71:e7:12:83:0d:35:5e:fc:cd:a5:b9:ac:98:64:dd:65:cd: 91:90:c4:cf:f0:4f:64:29:87:5c:d3:df:e2:ce:2c:fc:8c:4d: a2:0d:4b:08:29:f6:79:33:a5:8a:78:f3:08:4f:c6:d3:f9:a0: f2:9e:4a:fe:d7:e9:0a:71:4c:5c:b0:94:79:19:c6:55:46:18: 7e:14:a7:4e:f2:df:69:73:c2:35:e6:08:1a:83:03:aa:74:11: 8c:7d:6c:12:60:57:a0:c2:59:28:79:ff:f4:2c:a7:33:d4:5d: 9f:80:55:e1:2f:48:15:3b:40:c7:b6:56:05:ef:c5:bf:4e:d7: 15:ff:3e:21:34:02:48:32:5e:84:87:14:5d:ac:20:68:07:80: 41:e2:12:08:61:b8:23:d1:d5:97:42:db:0c:b5:87:45:c1:a0: cd:77:23:1a:90:5e:bd:44:a6:37:ca:1b:44:5a:02:76:e2:81: 4b:84:93:a8:52:75:31:27:bc:bc:3d:1a:05:9b:24:89:8d:8a: 79:f5:14:83:e1:f4:38:41:6d:fe:a2:8e:f8:08:bb:85:f2:bf: f1:f4:bf:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uk4Dkwc7xewEHeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MTczYjcyNWMtZjQ1Zi00MzQ3LWEzNWYtMjBlNDNkOWYzMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguM2mtl5DgSY86YaPWYii6oSLkZmn0y8EIBl vQbX5YmYlUqGhFQKhh6lN0JsDiZFie4XS+5P/SfGFssE78P0dLMyz9UJPNqcFcvh MFNw/39O35e+aKIhPJ3IY/YDEU/8PNeWvQfvOyEv88GTunBEm8e5WoKTYmB6P9J8 FxBZJO5K9rEJh7lH9ETMVjp7sg29BxG8L7Bw0D4oD4diYRvZttCjgjWZbW+3DzUK lI4Qp12AM3DGv2YnZISuGZ9Nb7mmJUohTukAXREuYadm/hJs95yz3sad2cASMDly Jk7DDJFv+wRBc8vu899yUDLU+3dE4hBHiWH5dPwwsRXhMlI3rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQCmdgQIaEVlVZJkhD3EWqIwmARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvM2ExY2Y1ODUtMWRlYy0z Yzk2LTk4MjMtN2ZlYmVlZDA4MWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSB8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLocFDEankU2t5Hya6Ulmt7vK+msqLlFnJtCRXhd0zNdOW/cg9x5xKD DTVe/M2luayYZN1lzZGQxM/wT2Qph1zT3+LOLPyMTaINSwgp9nkzpYp48whPxtP5 oPKeSv7X6QpxTFywlHkZxlVGGH4Up07y32lzwjXmCBqDA6p0EYx9bBJgV6DCWSh5 //QspzPUXZ+AVeEvSBU7QMe2VgXvxb9O1xX/PiE0AkgyXoSHFF2sIGgHgEHiEghh uCPR1ZdC2wy1h0XBoM13IxqQXr1EpjfKG0RaAnbigUuEk6hSdTEnvLw9GgWbJImN inn1FIPh9DhBbf6ijvgIu4Xyv/H0vwc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:54:48 2025 by rpki-client