$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa File: 1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa (raw, json) Hash identifier: zmp7q5cJ71dbh096y4uAQMy0yWRg5HeKzj1RSwaMgrU= Subject key identifier: A4:FB:DF:6A:A6:51:EB:C9:1C:A9:58:3B:0E:26:F7:F2:3F:59:F6:C2 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584A7A4B4DFFFE34723602B9AE80 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 394437 IP address blocks: 72.20.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:4d:ff:fe:34:72:36:02:b9:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=ca34bc62-ef3d-4d4e-ade2-3f4cb2d78bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cb:52:28:3e:73:2f:fb:ac:c9:18:d8:af:84: f9:b4:a0:1f:1f:33:26:9b:89:00:29:f5:b4:c2:7f: 22:18:b8:87:bb:67:a0:e6:49:68:78:25:85:08:0a: e9:9c:c9:82:1a:e2:b6:68:ca:6e:be:87:66:0d:ec: 1a:bb:9d:56:bf:d7:ad:47:42:92:aa:e3:8b:62:62: 5f:82:1a:22:31:cf:5b:34:c4:77:f7:04:04:e4:5f: 37:16:98:74:84:a5:c9:4f:e0:bf:49:ea:59:8e:47: 8f:66:a3:f4:64:1b:2b:c7:43:c2:d3:66:b9:18:0d: 1a:af:33:ec:6c:f6:64:0b:07:ed:c8:5e:1d:68:a5: 95:b3:82:5a:fe:14:95:f0:cb:e4:0f:a5:f5:df:91: 63:79:b5:28:58:89:d5:ac:84:6f:20:5d:23:ed:da: f5:ff:a9:0f:a9:7a:f8:f3:a0:c6:8e:3d:d7:c4:58: 74:60:80:34:52:46:a7:44:fd:69:0b:8a:b9:04:1a: 9b:80:13:ac:44:4b:70:84:9b:0b:99:d3:90:b4:a2: bc:d4:1c:9c:27:bc:30:40:fc:ca:b1:b3:36:7a:62: 77:d0:64:a4:cf:90:d3:1d:ae:32:12:53:34:a3:7b: 47:cc:85:0d:34:67:5d:18:35:75:b2:d2:a0:bf:c4: 34:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FB:DF:6A:A6:51:EB:C9:1C:A9:58:3B:0E:26:F7:F2:3F:59:F6:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:91:2d:5e:74:14:1e:a5:f4:8f:ed:b1:77:c5:71:6f:7a:64: b8:9d:0f:01:2c:f6:66:71:dd:45:ad:9b:19:1c:75:ef:eb:fc: 3b:b5:e8:aa:5e:2c:ba:d2:ab:8a:3d:91:85:fd:c2:ef:2e:e2: ce:62:12:a0:d2:ef:72:24:99:67:59:90:15:ae:9e:4a:ec:f5: 72:f7:20:69:39:77:66:d5:bd:8e:d2:6b:f6:ef:fc:bc:fa:fd: 76:38:3d:fb:7e:0c:84:e5:64:85:93:7b:c2:42:ee:a8:db:13: ec:75:24:77:2e:34:b2:55:a5:31:20:7c:d3:e4:c5:1f:79:8e: 32:27:8f:93:86:40:13:a3:90:aa:b1:bc:27:73:d6:91:0d:c4: 9c:b9:9e:1d:ef:83:ef:7f:09:e9:6c:8d:26:d1:01:f2:f0:3e: d7:06:31:14:5b:23:5d:b6:24:22:63:d2:8d:d9:14:26:7c:f2: d8:66:60:9e:bf:6b:a8:0c:1f:54:28:a1:f4:08:1e:1a:c0:ae: a7:fd:28:87:76:f6:1d:b9:ea:b9:e1:5c:ca:4b:3a:76:3f:1b: 98:10:d6:db:4b:5e:2a:4c:9e:88:7d:80:c9:5d:4f:0c:43:38: c9:83:6f:be:f4:bf:73:93:77:62:5b:36:95:c8:34:5f:14:64: 59:da:f6:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S03//jRyNgK5roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk Y2EzNGJjNjItZWYzZC00ZDRlLWFkZTItM2Y0Y2IyZDc4YmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhstSKD5zL/usyRjYr4T5tKAfHzMmm4kAKfW0 wn8iGLiHu2eg5kloeCWFCArpnMmCGuK2aMpuvodmDewau51Wv9etR0KSquOLYmJf ghoiMc9bNMR39wQE5F83Fph0hKXJT+C/SepZjkePZqP0ZBsrx0PC02a5GA0arzPs bPZkCwftyF4daKWVs4Ja/hSV8MvkD6X135FjebUoWInVrIRvIF0j7dr1/6kPqXr4 86DGjj3XxFh0YIA0UkanRP1pC4q5BBqbgBOsREtwhJsLmdOQtKK81BycJ7wwQPzK sbM2emJ30GSkz5DTHa4yElM0o3tHzIUNNGddGDV1stKgv8Q09wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT732qmUevJHKlYOw4m9/I/WfbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMTcyODM4MWUtZGJiMS0z Nzk2LTg3MGQtOGEzY2RjOTNkOWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmRLV50FB6l9I/tsXfFcW96ZLidDwEs9mZx3UWtmxkcde/r/Du16Kpe LLrSq4o9kYX9wu8u4s5iEqDS73IkmWdZkBWunkrs9XL3IGk5d2bVvY7Sa/bv/Lz6 /XY4Pft+DITlZIWTe8JC7qjbE+x1JHcuNLJVpTEgfNPkxR95jjInj5OGQBOjkKqx vCdz1pENxJy5nh3vg+9/CelsjSbRAfLwPtcGMRRbI122JCJj0o3ZFCZ88thmYJ6/ a6gMH1QoofQIHhrArqf9KId29h256rnhXMpLOnY/G5gQ1ttLXipMnoh9gMldTwxD OMmDb770v3OTd2JbNpXINF8UZFna9pA= -----END CERTIFICATE-----Generated at Wed Aug 6 11:01:09 2025 by rpki-client