$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b6f1156-1bce-362b-ae95-de3f0875aa6f.roa File: 5b6f1156-1bce-362b-ae95-de3f0875aa6f.roa (raw, json) Hash identifier: Fewy9JHPOEXexc6Zbxbf2hae2XbqlM5+0GIaJf6XFcc= Subject key identifier: A0:C6:40:1B:17:4F:A4:9F:88:DE:AA:8E:0C:BC:05:C5:1A:FC:2A:94 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E962730EC831F947A00CE80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b6f1156-1bce-362b-ae95-de3f0875aa6f.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 72.31.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:27:30:ec:83:1f:94:7a:00:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=ee5c9da5-c128-4dbe-90a6-6b6a4e343177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5e:54:10:0e:1e:3a:e8:3c:d3:87:1b:87:0a: c6:86:50:61:74:df:b4:58:2b:70:23:23:f4:e0:af: 48:b9:89:21:2b:03:25:57:36:3b:2b:6e:ca:4b:fe: 67:bb:16:48:50:63:5d:b1:27:b0:df:72:36:12:0e: fe:d4:4b:e2:5f:d3:7d:a7:60:f3:16:aa:3d:bd:05: c6:e2:97:6f:e9:e4:06:84:ec:4b:10:09:db:d5:e3: 67:8d:2a:d7:b5:47:03:3e:d9:6c:65:cd:bd:76:2b: d2:4e:4c:be:7a:f2:93:46:30:ce:d9:35:c7:3b:e9: e5:b4:21:b3:30:87:40:7a:8e:ac:09:0b:14:9a:3a: 38:1d:d8:7a:cb:61:dd:bf:ba:33:22:5f:4a:e5:a6: 03:21:bd:7b:c8:c8:5d:52:fe:40:65:68:59:73:57: 61:22:10:4e:aa:86:b8:c7:19:97:e9:65:c9:d1:9d: b5:d8:38:35:c8:ac:6d:70:4d:88:6b:6d:95:eb:bd: 1b:13:fa:80:40:19:64:e4:3c:b4:14:bf:89:48:09: 94:56:31:f4:7b:76:1b:a1:fe:bf:c8:39:4a:e8:78: 47:03:43:64:56:1a:e1:d9:68:bb:4c:e4:00:11:0f: 86:5c:ee:99:2b:68:d0:e4:ae:03:9f:71:19:b7:6c: 32:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C6:40:1B:17:4F:A4:9F:88:DE:AA:8E:0C:BC:05:C5:1A:FC:2A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b6f1156-1bce-362b-ae95-de3f0875aa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:66:58:32:6c:0f:9b:0a:ca:df:fd:a0:5f:f9:58:4d:b9:0f: a7:90:0e:a7:37:c3:b7:c5:fe:b5:e3:b0:bf:fc:38:59:79:7e: 9d:8a:db:bb:21:6a:3b:b6:1c:0a:30:7f:e3:8b:af:27:37:30: a2:4a:08:f8:35:ec:56:f1:e1:bc:99:2d:36:4a:27:a9:c3:68: b7:db:5d:ff:fc:24:d9:8f:47:3e:d4:3e:44:53:85:fa:e6:78: 5d:45:c9:0e:77:c3:bb:54:4d:d2:87:2a:6e:a7:1f:0f:dd:0d: cd:14:d2:ee:a6:a3:07:30:a2:04:8c:5e:60:df:79:db:c7:9f: 59:ff:ff:d8:42:6e:0d:d4:87:ca:55:c9:b3:ae:2e:32:1b:23: d5:b7:f6:ca:f6:ef:9f:4d:c9:b9:36:52:5a:ae:54:1a:bb:0e: dd:08:76:74:5b:65:3a:9e:07:f7:4a:26:79:66:39:b2:db:aa: ea:a7:d0:c7:a2:a3:2e:db:d6:1f:32:b0:95:bc:ad:32:f5:d6: 86:80:3a:8d:05:e1:a7:d8:e6:ad:a9:15:81:3a:ed:36:3e:e4: 10:5c:2a:c1:17:a5:ff:9a:73:e9:7e:e4:13:82:8d:53:40:9e: 2f:d1:ee:2b:ca:94:8d:7d:f5:5f:6d:e2:95:3d:16:91:6d:73: 60:9d:28:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelicw7IMflHoAzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZWU1YzlkYTUtYzEyOC00ZGJlLTkwYTYtNmI2YTRlMzQzMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll5UEA4eOug804cbhwrGhlBhdN+0WCtwIyP0 4K9IuYkhKwMlVzY7K27KS/5nuxZIUGNdsSew33I2Eg7+1EviX9N9p2DzFqo9vQXG 4pdv6eQGhOxLEAnb1eNnjSrXtUcDPtlsZc29divSTky+evKTRjDO2TXHO+nltCGz MIdAeo6sCQsUmjo4Hdh6y2Hdv7ozIl9K5aYDIb17yMhdUv5AZWhZc1dhIhBOqoa4 xxmX6WXJ0Z212Dg1yKxtcE2Ia22V670bE/qAQBlk5Dy0FL+JSAmUVjH0e3Ybof6/ yDlK6HhHA0NkVhrh2Wi7TOQAEQ+GXO6ZK2jQ5K4Dn3EZt2wyQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDGQBsXT6SfiN6qjgy8BcUa/CqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNWI2ZjExNTYtMWJjZS0z NjJiLWFlOTUtZGUzZjA4NzVhYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdmWDJsD5sKyt/9oF/5WE25D6eQDqc3w7fF/rXjsL/8OFl5fp2K27sh aju2HAowf+OLryc3MKJKCPg17Fbx4byZLTZKJ6nDaLfbXf/8JNmPRz7UPkRThfrm eF1FyQ53w7tUTdKHKm6nHw/dDc0U0u6mowcwogSMXmDfedvHn1n//9hCbg3Uh8pV ybOuLjIbI9W39sr2759Nybk2UlquVBq7Dt0IdnRbZTqeB/dKJnlmObLbquqn0Mei oy7b1h8ysJW8rTL11oaAOo0F4afY5q2pFYE67TY+5BBcKsEXpf+ac+l+5BOCjVNA ni/R7ivKlI199V9t4pU9FpFtc2CdKEI= -----END CERTIFICATE-----Generated at Mon Aug 4 15:40:45 2025 by rpki-client