$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa File: c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa (raw, json) Hash identifier: Aq1GsMV0+Fohi5T6/3m9vxtsAAn6jDkV8rpKfytwME8= Subject key identifier: 62:83:6D:67:E3:4E:B3:1C:9B:4F:52:DB:06:AD:CA:37:3A:2A:92:85 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E96506E5BFDBAC967ABB680 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 72.31.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:50:6e:5b:fd:ba:c9:67:ab:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=41ceb70d-d952-4008-8f8d-28d8fe45b785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:bc:8b:6f:09:67:8a:8a:8d:1b:f0:1c:3d:44: 0f:96:05:47:63:6b:41:eb:de:23:c7:cb:46:a3:71: 99:73:4e:dc:4e:a7:d5:fd:7b:0a:d7:14:b1:bc:24: a6:39:9f:a1:12:60:8f:50:ab:75:98:36:a4:94:9f: 00:b4:69:f9:a8:03:fc:16:c3:44:b9:c8:a8:a4:97: 45:14:b0:f5:39:4d:71:bb:9c:a8:fb:60:e5:32:c4: 52:92:38:68:d0:36:4f:82:6e:7e:d2:11:51:6f:4c: 5c:ac:1d:0f:be:29:93:38:56:80:9e:93:bc:51:41: a6:94:30:7f:16:4d:23:71:22:cb:48:9a:3f:0b:03: e0:7b:26:82:3e:ac:13:1e:31:54:07:28:00:81:64: 21:5e:81:a1:2f:69:f4:69:04:7d:d8:1d:d8:ff:f9: 75:f7:54:ba:61:03:87:df:08:f6:8a:10:2f:f6:07: 73:b8:5e:51:bc:fc:03:f8:5a:1b:6a:85:eb:6e:25: 75:c5:4c:52:60:9a:82:ef:79:fd:83:f1:d5:60:da: ae:75:7b:b1:f4:44:6b:b2:7a:3d:7d:85:e4:dc:75: 62:08:62:05:55:5b:e1:4e:5a:23:e9:90:78:ac:5b: 61:1e:67:64:e9:c2:a6:88:82:1a:b2:f8:1b:9a:5b: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:83:6D:67:E3:4E:B3:1C:9B:4F:52:DB:06:AD:CA:37:3A:2A:92:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c40cbd31-a5ab-39c2-891d-cc7d996e6c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b2:ed:97:64:c0:e9:b3:8a:c0:28:18:ec:84:4b:66:c3:5f: 46:5f:c6:9f:2c:ee:88:33:95:6c:7b:a2:55:01:8e:38:e0:08: 78:9b:1c:d2:87:3b:35:55:36:ce:2e:5c:b7:05:07:54:43:73: 71:28:0a:b2:1c:d8:25:49:80:c0:13:51:11:8a:1d:39:15:c7: 58:b4:31:a9:47:8a:af:45:74:3d:68:bd:1d:6a:c6:e8:23:37: 9f:b7:96:a5:2c:c7:67:da:31:cf:0e:72:48:f6:a1:d8:a2:82: 3d:0a:65:1e:1d:6f:ad:1b:5b:36:50:e3:b9:5a:6b:e2:82:cc: c1:c4:43:67:67:e6:21:e3:3a:fb:89:38:19:c9:19:35:97:0f: a4:c3:0a:e9:99:12:50:a5:f1:f7:31:ff:4f:8f:df:08:98:2f: fd:75:0e:fe:be:57:8f:6b:27:f5:e0:1b:ac:f1:e6:ac:96:cf: 85:23:1f:a8:37:c0:26:79:45:50:f2:41:fd:28:d5:49:a3:0d: 9f:ae:1d:85:11:17:99:21:61:0f:4a:e2:86:48:cb:ec:5b:17: 21:63:44:d0:3e:17:a5:ba:dc:45:d8:44:a3:b0:42:5d:65:f6: 02:ee:51:a5:f2:8e:c8:8b:ec:4b:31:a6:29:90:24:4f:59:1a: a7:f8:c9:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqellBuW/26yWertoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NDFjZWI3MGQtZDk1Mi00MDA4LThmOGQtMjhkOGZlNDViNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+7yLbwlnioqNG/AcPUQPlgVHY2tB694jx8tG o3GZc07cTqfV/XsK1xSxvCSmOZ+hEmCPUKt1mDaklJ8AtGn5qAP8FsNEuciopJdF FLD1OU1xu5yo+2DlMsRSkjho0DZPgm5+0hFRb0xcrB0PvimTOFaAnpO8UUGmlDB/ Fk0jcSLLSJo/CwPgeyaCPqwTHjFUBygAgWQhXoGhL2n0aQR92B3Y//l191S6YQOH 3wj2ihAv9gdzuF5RvPwD+FobaoXrbiV1xUxSYJqC73n9g/HVYNqudXux9ERrsno9 fYXk3HViCGIFVVvhTloj6ZB4rFthHmdk6cKmiIIasvgbmluhDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKDbWfjTrMcm09S2watyjc6KpKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzQwY2JkMzEtYTVhYi0z OWMyLTg5MWQtY2M3ZDk5NmU2YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB+SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFay7ZdkwOmzisAoGOyES2bDX0Zfxp8s7ogzlWx7olUBjjjgCHibHNKH OzVVNs4uXLcFB1RDc3EoCrIc2CVJgMATURGKHTkVx1i0MalHiq9FdD1ovR1qxugj N5+3lqUsx2faMc8Ockj2odiigj0KZR4db60bWzZQ47laa+KCzMHEQ2dn5iHjOvuJ OBnJGTWXD6TDCumZElCl8fcx/0+P3wiYL/11Dv6+V49rJ/XgG6zx5qyWz4UjH6g3 wCZ5RVDyQf0o1UmjDZ+uHYURF5khYQ9K4oZIy+xbFyFjRNA+F6W63EXYRKOwQl1l 9gLuUaXyjsiL7EsxpimQJE9ZGqf4yVc= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:51 2025 by rpki-client