$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e2524b0-b88a-3bcf-b64b-9ba2f7152168.roa File: 8e2524b0-b88a-3bcf-b64b-9ba2f7152168.roa (raw, json) Hash identifier: WeOM+dK6jllDXOVYsUGs+w56nKO9kTxG8rkp3foz25g= Subject key identifier: 43:22:D5:D3:5F:4A:A4:B5:39:FC:90:7A:DA:9F:8E:85:57:CE:57:F3 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E9627D41A76B9B270963A00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e2524b0-b88a-3bcf-b64b-9ba2f7152168.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 72.31.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:27:d4:1a:76:b9:b2:70:96:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=8a89fa3a-1bb9-4c19-a2f0-47c9ac3a0e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:ec:61:c7:cc:e1:43:9e:1d:04:93:10:ae: 91:37:21:fa:74:63:50:e3:65:87:f3:e8:c0:0a:1a: 11:15:10:4e:3a:4f:a6:94:36:57:dd:02:6d:41:63: c6:5c:08:4f:47:70:7e:46:df:02:99:59:32:d5:32: c7:13:e2:ae:30:18:10:d6:5f:80:de:a4:75:fa:e7: 4d:76:35:45:fe:3b:e8:89:38:43:ff:ca:df:dd:0b: 95:71:0c:aa:ab:35:37:59:3d:ee:09:48:dd:9a:45: 1e:92:9d:88:60:ba:4f:ae:74:5a:a4:c1:84:b3:0a: 35:06:1b:22:37:23:7a:59:42:a7:3e:94:79:ba:e7: 6e:d6:50:c1:04:b0:51:71:dc:8f:f2:04:ea:0f:5c: 89:e3:82:c6:b4:27:a7:f2:3f:16:8c:8b:40:a5:a2: 34:58:64:7f:14:a1:24:ab:5b:58:7b:e5:9d:06:72: c4:28:36:8e:f8:f4:cb:f5:0e:7b:d6:0e:7b:72:15: 83:7c:3b:bc:83:f9:8d:50:86:ba:fe:11:54:cf:94: 5d:e8:f0:d4:9a:27:0c:c9:4e:b8:8d:b4:a7:58:de: d4:7d:0e:2f:42:ae:df:dc:18:c7:59:99:b2:0a:1f: 43:39:d7:3f:36:e0:c5:cf:34:d0:b7:93:08:76:36: 34:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:22:D5:D3:5F:4A:A4:B5:39:FC:90:7A:DA:9F:8E:85:57:CE:57:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8e2524b0-b88a-3bcf-b64b-9ba2f7152168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d3:2e:be:e6:01:c5:79:b8:65:59:5e:f4:70:9f:49:e3:2c: 1f:6c:42:eb:00:16:5e:14:f0:b9:9c:81:9b:6b:5c:eb:aa:56: 36:9f:0e:03:14:dc:af:61:ad:fa:93:69:3c:14:c1:56:25:f6: 90:91:41:eb:b9:1f:b1:d4:33:47:4f:36:46:55:de:70:30:84: 3d:02:1e:6c:a8:d8:ae:49:a4:05:a1:5d:89:21:8a:81:17:03: de:d9:87:f2:c8:a8:5d:9b:f0:3a:1f:4c:71:ea:40:99:a1:62: ed:1a:28:cb:c0:e9:a4:56:55:41:5a:b8:78:3d:42:a2:02:f4: d5:eb:c5:60:1c:20:72:ad:bf:d0:0b:5c:6e:b4:92:ab:44:f3: 2b:b3:d9:bd:77:97:9e:ca:2b:6c:8b:9b:2d:90:49:a6:92:b1: 1a:a7:08:39:69:71:65:ac:eb:5c:49:e7:f4:1a:06:2a:c5:98: 13:85:77:1f:64:d7:22:ea:7d:0f:c3:a4:c5:62:99:09:21:6f: 92:4f:08:1f:d8:57:82:54:89:11:b2:31:ea:3b:de:31:50:26: 40:3a:9f:f4:8d:b1:7e:57:63:49:8f:af:37:42:d6:4a:1e:ef: 02:a8:d4:35:13:44:b1:ef:91:ac:74:dd:4a:24:01:9d:76:b3: 61:25:4d:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelifUGna5snCWOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk OGE4OWZhM2EtMWJiOS00YzE5LWEyZjAtNDdjOWFjM2EwZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbvsYcfM4UOeHQSTEK6RNyH6dGNQ42WH8+jA ChoRFRBOOk+mlDZX3QJtQWPGXAhPR3B+Rt8CmVky1TLHE+KuMBgQ1l+A3qR1+udN djVF/jvoiThD/8rf3QuVcQyqqzU3WT3uCUjdmkUekp2IYLpPrnRapMGEswo1Bhsi NyN6WUKnPpR5uudu1lDBBLBRcdyP8gTqD1yJ44LGtCen8j8WjItApaI0WGR/FKEk q1tYe+WdBnLEKDaO+PTL9Q571g57chWDfDu8g/mNUIa6/hFUz5Rd6PDUmicMyU64 jbSnWN7UfQ4vQq7f3BjHWZmyCh9DOdc/NuDFzzTQt5MIdjY0cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMi1dNfSqS1OfyQetqfjoVXzlfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOGUyNTI0YjAtYjg4YS0z YmNmLWI2NGItOWJhMmY3MTUyMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESB/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvTLr7mAcV5uGVZXvRwn0njLB9sQusAFl4U8LmcgZtrXOuqVjafDgMU 3K9hrfqTaTwUwVYl9pCRQeu5H7HUM0dPNkZV3nAwhD0CHmyo2K5JpAWhXYkhioEX A97Zh/LIqF2b8DofTHHqQJmhYu0aKMvA6aRWVUFauHg9QqIC9NXrxWAcIHKtv9AL XG60kqtE8yuz2b13l57KK2yLmy2QSaaSsRqnCDlpcWWs61xJ5/QaBirFmBOFdx9k 1yLqfQ/DpMVimQkhb5JPCB/YV4JUiRGyMeo73jFQJkA6n/SNsX5XY0mPrzdC1koe 7wKo1DUTRLHvkax03UokAZ12s2ElTXk= -----END CERTIFICATE-----Generated at Mon Aug 4 19:16:38 2025 by rpki-client