$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa File: 0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa (raw, json) Hash identifier: 8bezAyNeJrUXKA8VBBO50guEDacTLOtkE2p80fq5W2k= Subject key identifier: 64:70:09:4E:A8:02:88:6D:93:F0:52:12:90:54:D0:03:C2:E4:1E:DF Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B5B0742507F3F49E23CE56800 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 394437 IP address blocks: 72.20.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:42:50:7f:3f:49:e2:3c:e5:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=d3bdbd03-9a79-4919-bb92-93d8aa649438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:37:75:22:22:5f:ec:08:96:7d:bb:eb:04:c2: 2d:89:d4:83:3c:b3:83:2e:9c:33:33:2a:d0:91:04: 75:07:b0:9e:9a:91:99:00:aa:35:6c:a9:75:0e:02: 45:cc:fd:4e:6c:54:05:03:b7:07:7f:d4:c4:56:d8: d6:14:58:32:e3:a9:37:fd:31:35:d8:9f:8b:70:d8: dd:86:df:05:6e:a4:61:4d:1f:80:65:90:6d:e2:1b: d9:a1:92:ce:b8:42:61:96:1f:6a:a0:66:3d:32:4f: a4:89:1d:e9:bc:f4:ad:0d:6c:ea:6d:b7:30:f3:09: 1f:13:19:30:05:33:77:f2:70:c2:80:0a:68:cb:a7: b5:9f:09:5c:d6:88:38:4b:91:50:b9:91:2c:7c:8e: 4a:84:33:c1:f9:cf:d7:38:f6:c4:07:5a:11:c2:27: d3:c8:49:d0:54:20:47:89:d5:30:ec:4a:1d:3c:03: f4:6b:c0:06:e2:d3:14:b1:49:44:78:ee:c6:dc:32: ba:e7:b8:b3:36:dd:d2:d6:96:16:53:70:99:ed:48: 59:6e:54:46:12:06:97:41:9b:36:3f:a0:b3:32:a8: b1:b2:29:59:93:04:4a:aa:3f:29:b2:b3:58:bb:6b: d0:29:9f:00:b5:e2:c2:dd:4d:98:3f:65:6e:aa:db: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:70:09:4E:A8:02:88:6D:93:F0:52:12:90:54:D0:03:C2:E4:1E:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ff:c8:bb:d5:ec:c2:ee:60:26:13:79:a0:af:3c:41:fa:d7: bc:e6:ae:07:7a:6d:66:d8:9d:f9:22:1e:8d:5f:ae:92:4a:49: 06:f6:29:6b:84:b4:96:83:83:3a:89:79:b5:52:39:82:ee:56: 80:03:44:0b:74:1e:64:69:34:00:37:0c:f0:c9:52:fe:3a:21: ac:c2:ef:85:f9:d1:65:78:64:a3:83:22:69:21:ff:21:21:e1: 04:97:e7:38:33:e6:71:2c:2a:04:45:ca:5c:30:45:d3:37:27: 20:bc:49:46:ff:77:50:96:9e:78:2b:f6:f4:62:63:fe:be:45: 3e:f4:a4:41:de:d7:21:aa:69:fc:45:f6:05:8a:cc:41:26:a8: 27:f0:3f:dc:6f:82:ad:32:c2:e6:64:8d:9e:ca:05:fd:4a:03: 47:d5:98:23:66:e0:bc:c8:58:02:59:52:72:aa:eb:20:f3:b3: 6c:2a:37:dc:4e:59:7c:41:34:05:c7:10:5a:99:72:5c:d4:90: 2f:64:51:09:58:8a:fd:4c:76:c3:0e:b9:d8:a6:ba:61:2d:bd: e2:9a:93:8b:67:76:a6:08:4e:25:bc:cd:6f:b6:b4:63:0e:bf: b9:f2:ca:e7:af:82:88:13:c7:70:f0:00:31:bb:eb:4b:4d:86: dc:b6:2d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0JQfz9J4jzlaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZDNiZGJkMDMtOWE3OS00OTE5LWJiOTItOTNkOGFhNjQ5NDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Td1IiJf7AiWfbvrBMItidSDPLODLpwzMyrQ kQR1B7CempGZAKo1bKl1DgJFzP1ObFQFA7cHf9TEVtjWFFgy46k3/TE12J+LcNjd ht8FbqRhTR+AZZBt4hvZoZLOuEJhlh9qoGY9Mk+kiR3pvPStDWzqbbcw8wkfExkw BTN38nDCgApoy6e1nwlc1og4S5FQuZEsfI5KhDPB+c/XOPbEB1oRwifTyEnQVCBH idUw7EodPAP0a8AG4tMUsUlEeO7G3DK657izNt3S1pYWU3CZ7UhZblRGEgaXQZs2 P6CzMqixsilZkwRKqj8psrNYu2vQKZ8AteLC3U2YP2Vuqts9CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRwCU6oAohtk/BSEpBU0APC5B7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMGFjNTY5OTgtYWIyMS0z ZjRiLWFkZjctODVkNTE2YzFhZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv/yLvV7MLuYCYTeaCvPEH617zmrgd6bWbYnfkiHo1frpJKSQb2KWuE tJaDgzqJebVSOYLuVoADRAt0HmRpNAA3DPDJUv46IazC74X50WV4ZKODImkh/yEh 4QSX5zgz5nEsKgRFylwwRdM3JyC8SUb/d1CWnngr9vRiY/6+RT70pEHe1yGqafxF 9gWKzEEmqCfwP9xvgq0ywuZkjZ7KBf1KA0fVmCNm4LzIWAJZUnKq6yDzs2wqN9xO WXxBNAXHEFqZclzUkC9kUQlYiv1MdsMOudimumEtveKak4tndqYITiW8zW+2tGMO v7nyyuevgogTx3DwADG760tNhty2LTI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:18:10 2025 by rpki-client