$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa File: c851c3fd-7eed-3f14-bb90-6206ef839144.roa (raw, json) Hash identifier: oFw0tvWxBh6m1eiV1aZMbg2xOs93W1DvAwSE78DTm54= Subject key identifier: 95:43:EE:43:E7:63:94:99:9E:BF:5E:7A:3C:C0:DD:04:DF:8F:C0:BB Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E9652A4D3F144B42F6CF880 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 72.31.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:52:a4:d3:f1:44:b4:2f:6c:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=2f9d467c-0517-42ec-bcee-a1dd5c41778f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:be:a0:84:ac:96:66:c5:a4:0d:cd:68:6a: d3:1a:83:a9:f3:a4:61:d6:c5:64:1b:c7:ad:ce:78: 15:8e:56:a5:d4:51:80:39:a6:e9:d8:5b:80:49:09: e6:99:de:c1:23:01:b7:2d:85:58:d5:8c:eb:37:c4: f8:b8:07:cd:28:87:d5:36:92:7b:ad:a2:c1:48:ba: 2d:72:71:bf:27:d6:be:e9:a9:32:e8:99:42:2d:2b: d8:51:28:33:a9:f0:e5:80:e6:84:2b:fc:a8:7a:7e: 7a:ad:5a:1f:60:96:a1:47:e5:f3:45:97:21:e4:50: 2f:9b:e0:04:5d:5a:7b:c1:4f:d8:ba:d8:42:02:0d: 46:ed:43:71:bf:d6:a7:e6:6d:1a:0e:ec:c3:f4:0f: e5:6c:d5:dc:ee:6c:f6:19:6b:fa:99:f2:ee:7e:c0: 7b:bd:7e:13:e4:e6:a4:2f:68:e6:d7:79:41:2e:dd: 11:53:9d:29:7f:75:ca:d2:2b:e5:1d:1e:0a:93:90: 3e:13:b7:b5:da:84:e8:bf:ca:6c:2e:65:be:ff:21: 5c:61:1d:06:34:8f:95:4a:7b:7d:6c:0c:17:f0:0a: 80:e6:61:c7:e5:8a:a5:f3:63:50:ef:4a:52:67:c3: 49:09:51:ea:f2:38:aa:96:93:40:0b:bd:79:06:f8: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:43:EE:43:E7:63:94:99:9E:BF:5E:7A:3C:C0:DD:04:DF:8F:C0:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1d:06:f5:cb:dc:4c:6f:7d:5e:88:b7:ce:87:a5:62:dc:78: 96:d3:4d:95:fd:37:1a:85:56:00:24:31:b7:aa:97:f9:87:1c: 4f:f1:84:b8:8b:3b:c3:47:ad:8d:52:48:b2:86:48:39:eb:52: a6:61:dc:f0:de:7d:78:a7:02:7a:c3:13:4c:aa:a1:59:76:63: f8:75:09:d6:16:1f:d0:0f:6e:8f:ee:05:6b:08:c9:29:9f:d3: c6:c9:e9:57:7f:1c:de:ec:52:16:f3:ad:28:97:ad:29:f6:5a: 29:ef:ea:00:e7:4a:d0:a1:91:14:92:a1:76:f9:86:80:bf:0a: e4:36:cd:27:4e:80:bc:a9:f3:69:9e:00:6e:9f:f8:15:8c:e2: ff:75:88:10:0b:a3:cd:fa:2c:dc:37:9a:45:89:6b:c0:3f:19: 7c:f0:0a:1a:24:b9:cd:ad:05:e5:24:52:b4:5c:c6:fe:20:b7: 33:1d:36:73:69:87:ba:bd:38:49:00:bd:19:bd:82:76:bb:4f: 7f:a4:30:8d:03:32:e1:78:86:9e:d7:d7:d1:3b:ef:45:99:63: 30:04:3a:a3:6d:09:68:c1:46:44:bf:d4:95:b4:bd:f3:1e:fd: 50:15:6b:5b:36:a7:52:5c:fc:3c:9b:af:65:d7:a9:29:04:17: 77:46:21:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqellKk0/FEtC9s+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MmY5ZDQ2N2MtMDUxNy00MmVjLWJjZWUtYTFkZDVjNDE3NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYC+oISslmbFpA3NaGrTGoOp86Rh1sVkG8et zngVjlal1FGAOabp2FuASQnmmd7BIwG3LYVY1YzrN8T4uAfNKIfVNpJ7raLBSLot cnG/J9a+6aky6JlCLSvYUSgzqfDlgOaEK/yoen56rVofYJahR+XzRZch5FAvm+AE XVp7wU/YuthCAg1G7UNxv9an5m0aDuzD9A/lbNXc7mz2GWv6mfLufsB7vX4T5Oak L2jm13lBLt0RU50pf3XK0ivlHR4Kk5A+E7e12oTov8psLmW+/yFcYR0GNI+VSnt9 bAwX8AqA5mHH5Yql82NQ70pSZ8NJCVHq8jiqlpNAC715BvjAqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVD7kPnY5SZnr9eejzA3QTfj8C7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzg1MWMzZmQtN2VlZC0z ZjE0LWJiOTAtNjIwNmVmODM5MTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB++MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACodBvXL3ExvfV6It86HpWLceJbTTZX9NxqFVgAkMbeql/mHHE/xhLiL O8NHrY1SSLKGSDnrUqZh3PDefXinAnrDE0yqoVl2Y/h1CdYWH9APbo/uBWsIySmf 08bJ6Vd/HN7sUhbzrSiXrSn2Winv6gDnStChkRSSoXb5hoC/CuQ2zSdOgLyp82me AG6f+BWM4v91iBALo836LNw3mkWJa8A/GXzwChokuc2tBeUkUrRcxv4gtzMdNnNp h7q9OEkAvRm9gna7T3+kMI0DMuF4hp7X19E770WZYzAEOqNtCWjBRkS/1JW0vfMe /VAVa1s2p1Jc/Dybr2XXqSkEF3dGIas= -----END CERTIFICATE-----Generated at Wed Aug 6 00:53:51 2025 by rpki-client