$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa File: 00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa (raw, json) Hash identifier: yMK50JX2nYukIRFYQ64X5VC85AWlVqV1fdmlgKpoiUs= Subject key identifier: 59:C6:73:6A:0C:ED:17:05:2E:89:F2:AA:CD:8C:B5:A3:F8:2E:48:00 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584A7A4B45E67F4B9F8B95498980 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 394437 IP address blocks: 72.20.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:45:e6:7f:4b:9f:8b:95:49:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=e437b8da-0dd3-40b2-b6ec-deb9e806c468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:65:ef:65:a9:ec:8f:9a:76:74:78:4d:c6:8a: 4d:3a:7a:fd:57:f0:3c:7c:0d:d2:c0:e2:e4:73:6f: 05:96:60:11:f6:ce:04:2b:6f:f9:64:18:42:9f:fc: a8:d9:5e:4d:0a:c5:5c:f6:54:77:21:ee:5f:b6:33: 56:eb:e2:76:23:d5:95:a8:ee:6a:5b:6c:83:74:88: 91:ee:ab:0c:7f:10:b4:ea:61:a8:a7:79:f0:62:0b: 02:08:5f:88:17:28:e5:fa:a6:1b:a2:81:91:42:fd: c6:a6:6e:c6:62:45:69:6f:8c:14:ce:e3:17:71:d3: a1:7d:f9:fa:5c:e3:d7:a1:7e:b8:18:b8:92:85:99: 66:ef:7a:10:2b:e8:39:75:48:10:86:6d:b4:be:ef: 10:36:ac:a9:c2:12:6c:0f:44:cf:cc:68:d6:31:56: eb:6a:4f:ee:7f:f0:5c:f7:ca:58:3f:65:2c:43:40: 17:ab:e6:f4:7f:ad:48:2b:e9:58:8a:e6:f4:3a:9c: 95:54:23:da:5d:92:0f:40:87:72:1d:a8:4d:95:a5: b4:b7:ec:b1:b1:2e:eb:1d:2d:53:1d:79:a3:90:08: a8:e5:b7:41:20:34:76:03:ab:f3:34:31:e0:24:97: a1:e1:bd:35:ee:2e:91:1d:92:a4:88:eb:7a:1f:13: 05:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C6:73:6A:0C:ED:17:05:2E:89:F2:AA:CD:8C:B5:A3:F8:2E:48:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:82:37:5b:8b:0e:4e:c2:86:34:40:f1:05:bc:0c:c2:92:6d: 36:08:83:75:25:42:64:0f:b1:31:7a:13:66:db:72:f8:b3:75: 45:b3:34:8f:71:21:24:3d:72:97:ff:15:e8:cd:88:4a:77:3b: 3d:bc:67:5f:b9:75:52:28:f0:40:ef:97:31:92:99:42:71:f9: 5a:b4:6a:9c:8f:d4:c5:16:c7:bc:9f:13:1a:45:8c:66:65:6b: 6b:0a:9b:7c:f0:34:d9:6c:51:34:55:00:91:e4:cc:c9:52:44: 57:c0:f4:3d:ae:e8:9d:cc:c2:c3:fb:3f:91:d5:69:eb:6b:19: af:a3:1b:aa:7f:47:ba:7e:b0:01:df:7b:84:c5:ef:12:0f:b3: 1e:9b:92:33:12:c2:a9:87:7b:f6:18:25:90:2b:a8:11:2a:0b: 79:7c:0c:59:ff:20:97:0a:c0:c5:ef:ec:11:40:56:0e:e1:d9: e5:60:13:48:82:26:5a:c6:c1:67:72:9b:d0:1b:73:ef:78:6c: 98:83:24:9e:f3:fd:57:5c:51:e6:e7:30:b4:d0:1f:3c:c2:29: 32:f5:cc:10:6b:68:7d:b0:cb:9f:5d:a8:c6:02:69:01:02:94: ff:f8:4f:f4:14:d6:b0:06:ab:7f:e5:47:da:1b:94:1d:06:27: fb:a4:9a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0Xmf0ufi5VJiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ZTQzN2I4ZGEtMGRkMy00MGIyLWI2ZWMtZGViOWU4MDZjNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmXvZansj5p2dHhNxopNOnr9V/A8fA3SwOLk c28FlmAR9s4EK2/5ZBhCn/yo2V5NCsVc9lR3Ie5ftjNW6+J2I9WVqO5qW2yDdIiR 7qsMfxC06mGop3nwYgsCCF+IFyjl+qYbooGRQv3Gpm7GYkVpb4wUzuMXcdOhffn6 XOPXoX64GLiShZlm73oQK+g5dUgQhm20vu8QNqypwhJsD0TPzGjWMVbrak/uf/Bc 98pYP2UsQ0AXq+b0f61IK+lYiub0OpyVVCPaXZIPQIdyHahNlaW0t+yxsS7rHS1T HXmjkAio5bdBIDR2A6vzNDHgJJeh4b017i6RHZKkiOt6HxMFCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnGc2oM7RcFLonyqs2MtaP4LkgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMDBkODQwNDktY2UzZC0z OGZkLThmN2ItNmIyYzJiODk2Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6CN1uLDk7ChjRA8QW8DMKSbTYIg3UlQmQPsTF6E2bbcvizdUWzNI9x ISQ9cpf/FejNiEp3Oz28Z1+5dVIo8EDvlzGSmUJx+Vq0apyP1MUWx7yfExpFjGZl a2sKm3zwNNlsUTRVAJHkzMlSRFfA9D2u6J3MwsP7P5HVaetrGa+jG6p/R7p+sAHf e4TF7xIPsx6bkjMSwqmHe/YYJZArqBEqC3l8DFn/IJcKwMXv7BFAVg7h2eVgE0iC JlrGwWdym9Abc+94bJiDJJ7z/VdcUebnMLTQHzzCKTL1zBBraH2wy59dqMYCaQEC lP/4T/QU1rAGq3/lR9oblB0GJ/ukmvg= -----END CERTIFICATE-----Generated at Sat Aug 9 01:07:41 2025 by rpki-client