$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa File: 2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa (raw, json) Hash identifier: fA6KBWO1/t+WC50mk1foPINSeVupby45DhkH9LgsJUc= Subject key identifier: A7:53:9E:B2:F4:FB:D0:E1:C4:A7:DE:59:0F:0C:35:19:B2:B3:B7:79 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584EA798DB3F6C5F30EABA0B0680 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 394437 IP address blocks: 72.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:db:3f:6c:5f:30:ea:ba:0b:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b0067d93-76f9-4aa2-8270-82a6ae5d2e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:b5:7d:1f:e5:3e:a4:01:f8:c9:ed:03:ab: 2b:2b:bc:05:b0:1c:21:2a:ba:cb:1a:ae:ca:96:f2: 69:63:c4:b6:e6:07:80:ce:b2:9b:44:fd:41:c0:5c: 35:fc:fa:2d:36:bd:17:2d:ef:07:05:4d:79:a2:84: aa:d4:3b:02:0e:42:ab:05:78:ad:33:77:67:ec:e9: 78:20:10:c9:20:e3:41:02:26:e8:15:36:1d:0f:d0: 20:3f:79:88:d4:02:63:5c:ac:f5:4a:12:51:3c:84: b3:e4:8b:c4:f3:4d:c2:6b:13:7e:96:27:7d:37:25: f8:b6:4c:ff:e4:af:57:33:b6:5a:f5:0b:b3:26:d0: ea:1b:a7:8d:79:58:3d:35:cd:01:8d:bc:f1:63:3d: 9b:62:a6:12:4f:69:14:27:5a:f7:9b:20:33:c1:6a: 75:de:a6:81:b2:cf:fa:b6:d5:0e:a5:7f:05:4c:5e: 70:ad:f3:b3:9b:5d:05:ed:3e:65:5b:2e:a5:fd:9b: 6d:6d:5a:c5:ba:a8:45:bb:3f:ed:92:1b:3f:86:ad: 3b:b8:c3:dc:b6:b8:db:7c:62:40:02:6c:e3:cd:ee: d0:12:95:01:f4:59:1c:67:9f:9b:4d:13:81:71:ca: a0:bf:02:25:cf:c4:c6:dc:60:2a:a7:ac:02:d7:e2: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:53:9E:B2:F4:FB:D0:E1:C4:A7:DE:59:0F:0C:35:19:B2:B3:B7:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:52:8b:9b:a0:0d:fa:a5:83:bd:f1:12:65:fd:4a:fb:7f:9b: 25:b7:78:95:e3:85:0e:a7:ac:98:8c:62:c3:1a:7b:92:47:e1: 7e:ba:32:62:66:97:37:a6:ac:ea:fe:e7:d0:47:ea:a4:40:9e: d9:98:2a:e5:a1:23:ef:59:ea:86:7b:75:b2:da:74:9c:e0:1a: e9:f0:1f:f4:4a:43:bc:24:a2:0b:6b:f8:db:e9:fd:c5:69:5f: f7:b5:5e:c4:78:2f:14:fd:e8:30:d6:ba:b6:60:2a:4a:53:5f: 50:98:b9:cf:fd:81:6e:6a:d6:f9:15:07:50:dc:32:95:0a:02: 15:77:e7:62:64:5c:e2:05:6e:2a:98:23:c8:c8:fe:a3:8d:cf: 7b:fb:41:e0:9c:32:a6:48:49:bd:cc:5e:13:a2:81:fb:65:12: 77:6b:03:70:1b:e3:86:ac:36:66:73:d2:41:8c:e8:ab:43:e9: fc:a1:6e:95:75:fa:16:ec:de:80:b6:8b:ad:35:d8:bc:18:6b: 28:93:13:7c:66:58:83:b4:0e:59:f6:30:54:c9:9f:ba:0d:f5: 00:2f:e8:65:4d:ab:dd:b4:76:e1:df:76:71:e2:cb:a2:22:2a: e0:b0:89:4d:ae:db:7f:1e:9d:d5:8f:0d:97:4b:7f:ca:c7:77: 83:77:e5:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmNs/bF8w6roLBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjAwNjdkOTMtNzZmOS00YWEyLTgyNzAtODJhNmFlNWQyZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWO1fR/lPqQB+MntA6srK7wFsBwhKrrLGq7K lvJpY8S25geAzrKbRP1BwFw1/PotNr0XLe8HBU15ooSq1DsCDkKrBXitM3dn7Ol4 IBDJIONBAiboFTYdD9AgP3mI1AJjXKz1ShJRPISz5IvE803CaxN+lid9NyX4tkz/ 5K9XM7Za9QuzJtDqG6eNeVg9Nc0BjbzxYz2bYqYST2kUJ1r3myAzwWp13qaBss/6 ttUOpX8FTF5wrfOzm10F7T5lWy6l/ZttbVrFuqhFuz/tkhs/hq07uMPctrjbfGJA Amzjze7QEpUB9FkcZ5+bTROBccqgvwIlz8TG3GAqp6wC1+KXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdTnrL0+9DhxKfeWQ8MNRmys7d5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMjMyMGRmMGEtYmExYS0z ODBjLWJlMGYtZDhlM2M3Zjk3M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZSi5ugDfqlg73xEmX9Svt/myW3eJXjhQ6nrJiMYsMae5JH4X66MmJm lzemrOr+59BH6qRAntmYKuWhI+9Z6oZ7dbLadJzgGunwH/RKQ7wkogtr+Nvp/cVp X/e1XsR4LxT96DDWurZgKkpTX1CYuc/9gW5q1vkVB1DcMpUKAhV352JkXOIFbiqY I8jI/qONz3v7QeCcMqZISb3MXhOigftlEndrA3Ab44asNmZz0kGM6KtD6fyhbpV1 +hbs3oC2i6012LwYayiTE3xmWIO0Dln2MFTJn7oN9QAv6GVNq920duHfdnHiy6Ii KuCwiU2u238endWPDZdLf8rHd4N35Yw= -----END CERTIFICATE-----Generated at Wed Jul 29 12:53:44 2026 by rpki-client