$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa File: 99c07aae-832f-32e0-8580-8a3e6c4911c9.roa (raw, json) Hash identifier: 9wsTJ/z5Vqp2I+ER2Y3XkT609psRHsJNbgpM+uyTStM= Subject key identifier: 99:C5:63:AC:2C:AE:5A:C5:46:1F:E8:89:35:BD:1E:14:E0:3C:07:6C Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E965082F57AB29FC503DD80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 72.31.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:50:82:f5:7a:b2:9f:c5:03:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=c4e86757-d72b-4ca7-a65d-980de90c0d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a5:69:23:c9:62:4a:71:d6:14:72:4a:ef:40: ef:ab:5d:93:a2:d7:f3:b3:0e:45:4a:f4:b3:eb:73: 3f:98:a1:03:f6:06:9c:b5:b1:d3:58:ad:1d:fd:19: 34:98:c9:6d:83:55:96:8d:46:b5:06:17:de:72:a5: 8d:5d:ab:8b:57:37:4d:6a:c9:61:83:77:7e:fe:ca: f7:f9:de:19:d7:7a:d3:42:cb:00:54:8c:41:a4:5d: 51:a6:8d:53:de:7d:c8:5c:f7:15:41:da:87:15:6c: 86:da:22:56:71:29:93:13:56:4d:a4:17:cb:96:46: 87:f5:2d:42:01:bf:71:58:56:4b:fb:d3:b4:12:72: 63:ed:1c:2e:ee:de:71:08:f3:6c:6b:88:05:5a:46: ce:86:1b:6a:f6:61:67:dc:97:ce:04:42:3b:aa:ca: fd:a2:ae:de:d7:d3:d3:52:00:79:d7:69:af:27:3b: 4a:8e:97:8d:f8:7c:29:1c:48:34:1c:d4:14:85:05: 09:e6:3c:2c:21:4f:33:57:f7:1d:d9:54:eb:1b:b9: d9:a7:9f:17:da:35:70:52:b0:0b:70:ec:48:9a:67: 93:64:bb:27:cf:43:fc:9a:bd:c1:4b:0f:c7:7f:3a: db:f1:51:91:60:6c:f5:2b:a9:36:de:c4:f5:85:62: 15:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C5:63:AC:2C:AE:5A:C5:46:1F:E8:89:35:BD:1E:14:E0:3C:07:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:71:e5:ed:69:6b:9b:cc:12:fd:b5:19:af:cb:53:41:14:42: 1c:01:19:6f:2f:6d:a5:3d:7a:43:94:73:d5:1d:0b:55:be:97: 3b:d5:ee:c9:b2:d6:b8:71:5d:92:57:46:45:2f:8e:e8:e2:96: 00:f3:92:38:e5:a1:7f:6b:8e:38:56:35:fb:93:56:91:54:60: d9:a7:ee:9e:a2:36:6d:d2:7c:fc:12:ab:6f:38:b6:e9:cf:17: cd:b5:bd:9e:75:13:5e:c0:ff:0d:1b:18:d1:86:48:15:ae:1f: 95:fe:b6:75:10:ec:b0:09:df:74:00:71:54:c4:da:50:bc:21: 09:9f:90:4b:3c:1c:54:c8:da:59:97:77:3b:7c:b6:30:a0:64: 19:45:c8:44:64:74:3e:ad:d6:c1:e6:4f:7a:b0:63:f3:ea:ed: 3d:9b:3f:a6:a0:ce:57:f1:7c:71:64:b3:cb:f8:f5:fe:2c:59: 8f:a0:57:cc:4a:a8:96:e1:1e:a8:38:51:b5:ce:9f:8f:8f:31: c7:6b:2d:94:33:75:d6:8a:7c:ff:f0:75:cb:7e:e1:fb:68:9b: be:08:00:86:83:d6:67:26:6e:15:23:e9:fa:bc:28:4d:d1:6c: 88:e6:71:80:54:a6:40:3c:26:a1:c6:be:35:bc:e9:d6:0b:1e: 41:be:b6:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqellCC9Xqyn8UD3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk YzRlODY3NTctZDcyYi00Y2E3LWE2NWQtOTgwZGU5MGMwZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaVpI8liSnHWFHJK70Dvq12Totfzsw5FSvSz 63M/mKED9gactbHTWK0d/Rk0mMltg1WWjUa1BhfecqWNXauLVzdNaslhg3d+/sr3 +d4Z13rTQssAVIxBpF1Rpo1T3n3IXPcVQdqHFWyG2iJWcSmTE1ZNpBfLlkaH9S1C Ab9xWFZL+9O0EnJj7Rwu7t5xCPNsa4gFWkbOhhtq9mFn3JfOBEI7qsr9oq7e19PT UgB512mvJztKjpeN+HwpHEg0HNQUhQUJ5jwsIU8zV/cd2VTrG7nZp58X2jVwUrAL cOxImmeTZLsnz0P8mr3BSw/Hfzrb8VGRYGz1K6k23sT1hWIVKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnFY6wsrlrFRh/oiTW9HhTgPAdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOTljMDdhYWUtODMyZi0z MmUwLTg1ODAtOGEzZTZjNDkxMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBx5e1pa5vMEv21Ga/LU0EUQhwBGW8vbaU9ekOUc9UdC1W+lzvV7smy 1rhxXZJXRkUvjujilgDzkjjloX9rjjhWNfuTVpFUYNmn7p6iNm3SfPwSq284tunP F821vZ51E17A/w0bGNGGSBWuH5X+tnUQ7LAJ33QAcVTE2lC8IQmfkEs8HFTI2lmX dzt8tjCgZBlFyERkdD6t1sHmT3qwY/Pq7T2bP6agzlfxfHFks8v49f4sWY+gV8xK qJbhHqg4UbXOn4+PMcdrLZQzddaKfP/wdct+4ftom74IAIaD1mcmbhUj6fq8KE3R bIjmcYBUpkA8JqHGvjW86dYLHkG+tjs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:00 2025 by rpki-client