$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa File: c851c3fd-7eed-3f14-bb90-6206ef839144.roa (raw, json) Hash identifier: pgDidJHWTHbGNxyr5b88OthbIH8gmLJP0HDr+jp9498= Subject key identifier: FD:AF:BF:74:17:D7:AE:E2:EF:E4:59:3A:46:D7:50:EA:97:FC:95:C4 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584F629300C6F6F5838F58D06700 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 33363 IP address blocks: 72.31.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:00:c6:f6:f5:83:8f:58:d0:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=1f914717-de56-4488-a478-0a404ef6cb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:77:ee:06:e7:ff:4e:e3:79:c9:9b:53:97:9d: 7f:9b:60:c8:09:81:b3:cb:66:a9:f8:46:e3:1d:a2: 73:57:39:44:9e:e4:1d:3e:92:53:3e:76:ef:75:c3: b6:51:81:9a:3e:81:5e:9b:5c:bb:27:8c:e0:1c:d3: 01:ad:37:ee:2c:91:69:c0:ff:f5:27:13:66:0f:c2: c3:0f:a4:e0:fe:0b:1b:c2:9b:1e:01:bd:d8:42:5e: 3f:ec:5f:89:d4:0f:a1:09:2f:ef:cb:4e:c4:fb:88: df:12:63:d7:8e:0a:1b:be:4e:ba:21:5c:1c:3e:72: 3d:42:f9:f5:14:7b:b7:f5:01:94:bc:6d:cd:a8:b3: fa:64:79:04:49:61:95:9b:6c:f0:30:88:9f:8b:ec: 69:29:87:84:6e:75:29:60:f6:3a:5f:3e:51:de:5b: 22:00:4a:17:1e:98:3d:24:9d:53:a2:2e:4f:bd:f1: 06:0d:91:96:82:a8:3b:d7:01:bf:18:85:71:52:9e: af:6f:c6:22:1f:31:28:0d:83:67:0e:1f:4c:de:3f: f4:6b:ea:2b:24:fd:44:90:01:d7:67:11:2c:48:ef: 32:16:08:5f:dc:4b:a0:95:dd:27:d5:0f:b4:bf:6d: 27:02:98:70:3b:28:88:cc:9c:83:54:02:37:0b:83: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AF:BF:74:17:D7:AE:E2:EF:E4:59:3A:46:D7:50:EA:97:FC:95:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f9:b8:99:d3:97:7e:7c:82:1e:c0:df:0a:6d:b2:47:4c:c2: 52:33:79:24:68:95:7f:27:be:e9:b8:b8:b0:c1:24:bb:7f:62: 02:3b:ee:67:03:98:a7:6a:b5:6d:61:32:d4:85:41:89:01:60: 5a:45:ed:20:81:6e:3a:d1:1c:3e:2a:40:ee:f4:6a:3f:ec:14: 6b:7c:e1:d4:87:a3:85:bd:36:85:e6:fa:6a:20:00:3e:10:cd: ac:d4:01:4c:e1:01:02:f6:0d:22:8a:71:5f:00:36:71:68:04: 30:2b:3a:18:39:dd:55:0f:f8:0e:58:2c:72:51:64:9e:a7:03: 5f:5a:81:8a:08:a5:bf:10:00:fa:96:3e:3f:6c:a8:30:18:c8: 00:c0:36:18:15:56:3a:9b:24:4c:ee:78:c1:21:04:c9:cf:d7: 50:32:0e:c7:c7:6b:3a:ad:6b:d8:bf:ca:b2:bf:c5:f2:71:1d: 52:04:f8:95:cd:0a:fc:ca:ab:9f:e1:24:ce:02:68:fe:05:39: 0d:cb:b6:33:3c:9f:1a:6f:f7:d3:53:4e:4c:8c:88:05:e9:cd: de:53:15:b2:d0:c4:3e:61:89:53:fa:a1:e4:a4:87:08:06:ee: c8:0a:44:b2:7d:a5:06:33:2e:8a:4d:2a:a8:92:db:2f:e4:e9: b8:d7:a7:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwDG9vWDj1jQZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MWY5MTQ3MTctZGU1Ni00NDg4LWE0NzgtMGE0MDRlZjZjYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3fuBuf/TuN5yZtTl51/m2DICYGzy2ap+Ebj HaJzVzlEnuQdPpJTPnbvdcO2UYGaPoFem1y7J4zgHNMBrTfuLJFpwP/1JxNmD8LD D6Tg/gsbwpseAb3YQl4/7F+J1A+hCS/vy07E+4jfEmPXjgobvk66IVwcPnI9Qvn1 FHu39QGUvG3NqLP6ZHkESWGVm2zwMIifi+xpKYeEbnUpYPY6Xz5R3lsiAEoXHpg9 JJ1Toi5PvfEGDZGWgqg71wG/GIVxUp6vb8YiHzEoDYNnDh9M3j/0a+orJP1EkAHX ZxEsSO8yFghf3Eugld0n1Q+0v20nAphwOyiIzJyDVAI3C4NguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2vv3QX167i7+RZOkbXUOqX/JXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzg1MWMzZmQtN2VlZC0z ZjE0LWJiOTAtNjIwNmVmODM5MTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB++MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL5uJnTl358gh7A3wptskdMwlIzeSRolX8nvum4uLDBJLt/YgI77mcD mKdqtW1hMtSFQYkBYFpF7SCBbjrRHD4qQO70aj/sFGt84dSHo4W9NoXm+mogAD4Q zazUAUzhAQL2DSKKcV8ANnFoBDArOhg53VUP+A5YLHJRZJ6nA19agYoIpb8QAPqW Pj9sqDAYyADANhgVVjqbJEzueMEhBMnP11AyDsfHazqta9i/yrK/xfJxHVIE+JXN CvzKq5/hJM4CaP4FOQ3LtjM8nxpv99NTTkyMiAXpzd5TFbLQxD5hiVP6oeSkhwgG 7sgKRLJ9pQYzLopNKqiS2y/k6bjXp8U= -----END CERTIFICATE-----Generated at Sat Oct 10 06:49:35 2026 by rpki-client