$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa File: 00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa (raw, json) Hash identifier: 0kGkf9QihEd91yRyLqt9cB/PrqjwEoJYFniUNnRnJBg= Subject key identifier: E4:E2:39:F2:A8:73:09:38:47:50:B9:08:99:62:F8:13:FD:B4:F2:88 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B5B0742DC5A62973733434900 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 394437 IP address blocks: 72.20.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:42:dc:5a:62:97:37:33:43:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=a3cbd31e-9232-4f19-a4ca-6045104a8ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b4:f6:68:7e:e2:e5:f5:61:6d:c3:bb:15:74: e1:6d:80:d0:46:ba:fa:85:2d:80:e6:44:60:64:ea: 52:03:74:b3:79:9d:24:40:d1:b7:9c:e1:38:a8:c9: a8:5f:15:10:55:dc:5c:a8:d4:1f:d6:bc:64:89:04: 28:7a:33:50:41:22:d4:7f:30:22:9b:52:89:8d:51: 05:8b:2f:04:6c:65:39:f6:6e:05:5f:5f:d3:2e:8b: 15:93:0d:bd:41:b5:d3:fd:0b:66:3c:14:45:ff:79: ea:53:b6:bf:24:35:35:b1:93:a2:48:31:84:b4:8d: 41:72:c0:23:6c:a9:d5:09:24:43:41:9d:3a:ef:6b: 58:46:ad:86:c1:34:87:97:b1:4e:5b:39:18:09:03: 29:1a:10:8b:e1:a9:1b:c5:8d:71:32:2a:66:8e:98: dc:2d:32:77:ab:7e:8f:69:68:bf:68:36:06:6d:dd: d6:58:c0:c3:37:dd:2b:20:76:9d:ee:1d:e4:4b:c7: a3:6b:db:b5:03:1f:cf:da:10:cc:ef:1a:e6:a3:b2: 07:fb:68:1e:fe:a9:aa:5d:73:c8:fc:10:56:6a:94: 45:90:64:dd:35:35:f0:1c:fe:e3:3c:88:63:38:f0: 29:d9:13:e2:00:8a:7c:b7:78:8d:f1:33:1a:1d:91: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E2:39:F2:A8:73:09:38:47:50:B9:08:99:62:F8:13:FD:B4:F2:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9c:56:15:c4:50:54:94:d0:45:00:cc:6b:dd:be:66:5a:cb: b6:a0:36:54:3a:33:8b:80:ff:c6:41:6f:5a:d9:f7:8c:57:5c: 09:cd:2e:40:89:3a:2d:69:cf:df:b8:bd:d3:d7:dc:08:30:43: 92:5e:8b:51:5d:6c:b5:40:40:a4:a1:9e:82:1c:f5:af:af:ec: a3:53:71:39:a5:5e:87:04:86:df:c7:69:27:00:80:1d:4d:db: bb:d4:9e:ac:f7:e5:f4:24:25:42:5c:1b:44:eb:f2:9c:ef:0d: 77:ee:31:78:29:40:82:b3:08:2a:e3:d3:51:7b:0f:28:0f:7a: f6:45:f3:1a:a7:10:ec:e6:df:d0:14:c1:d0:22:f1:e3:ba:18: d0:6f:24:1d:df:14:78:5b:87:74:6a:56:d5:97:11:5f:42:b5: 1f:a7:2b:12:df:9f:c3:55:4c:1f:5b:9d:ed:ea:94:bf:40:b6: 58:da:2b:84:4b:89:4f:d8:48:41:66:e1:64:5e:6a:6b:31:d4: e2:e7:67:ca:a5:91:e4:58:40:6d:87:87:d1:0e:db:06:ef:73: 55:99:82:73:63:9e:85:2b:58:e5:c6:78:6a:66:2f:a7:b0:7a: 11:9e:42:5e:2c:03:22:7d:a3:1b:ae:7b:d1:f6:ae:ef:d8:70: ed:a7:d9:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0LcWmKXNzNDSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YTNjYmQzMWUtOTIzMi00ZjE5LWE0Y2EtNjA0NTEwNGE4YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7T2aH7i5fVhbcO7FXThbYDQRrr6hS2A5kRg ZOpSA3SzeZ0kQNG3nOE4qMmoXxUQVdxcqNQf1rxkiQQoejNQQSLUfzAim1KJjVEF iy8EbGU59m4FX1/TLosVkw29QbXT/QtmPBRF/3nqU7a/JDU1sZOiSDGEtI1BcsAj bKnVCSRDQZ0672tYRq2GwTSHl7FOWzkYCQMpGhCL4akbxY1xMipmjpjcLTJ3q36P aWi/aDYGbd3WWMDDN90rIHad7h3kS8eja9u1Ax/P2hDM7xrmo7IH+2ge/qmqXXPI /BBWapRFkGTdNTXwHP7jPIhjOPAp2RPiAIp8t3iN8TMaHZG+7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTiOfKocwk4R1C5CJli+BP9tPKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMDBkODQwNDktY2UzZC0z OGZkLThmN2ItNmIyYzJiODk2Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKcVhXEUFSU0EUAzGvdvmZay7agNlQ6M4uA/8ZBb1rZ94xXXAnNLkCJ Oi1pz9+4vdPX3AgwQ5Jei1FdbLVAQKShnoIc9a+v7KNTcTmlXocEht/HaScAgB1N 27vUnqz35fQkJUJcG0Tr8pzvDXfuMXgpQIKzCCrj01F7DygPevZF8xqnEOzm39AU wdAi8eO6GNBvJB3fFHhbh3RqVtWXEV9CtR+nKxLfn8NVTB9bne3qlL9AtljaK4RL iU/YSEFm4WReamsx1OLnZ8qlkeRYQG2Hh9EO2wbvc1WZgnNjnoUrWOXGeGpmL6ew ehGeQl4sAyJ9oxuue9H2ru/YcO2n2dU= -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:43 2025 by rpki-client