$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa File: 2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa (raw, json) Hash identifier: O67+ncaqFLC33q0WAvemNEfo/WV92yKVPPHv2ijqBbw= Subject key identifier: D9:86:1C:FF:4B:18:31:9C:AB:72:6F:DF:DB:18:11:9A:BA:6A:79:92 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584A7A4B4538FD2D7C55387D4BA0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 394437 IP address blocks: 72.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:45:38:fd:2d:7c:55:38:7d:4b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=868fc99f-dea8-43c0-bc3c-4187948d0bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4e:9f:9a:cf:e6:6f:83:62:f7:8e:04:1a:74: 1c:21:5c:75:46:2f:41:80:85:e8:73:82:40:0d:d7: ba:bd:b4:97:da:8d:78:63:22:22:f5:dc:4d:26:52: 2b:dd:24:a6:e8:d0:31:b6:f8:c5:2f:9a:2f:c5:f9: ab:1a:37:28:2c:cf:fc:aa:c2:77:5d:01:82:e2:6a: 04:bc:2e:f9:93:5b:65:4b:42:d2:5d:5e:c7:88:39: b7:1c:fb:57:8c:ac:ed:0a:5a:f2:77:57:d1:1c:13: 30:54:45:62:ce:4d:33:8f:96:b4:e4:16:78:82:51: c1:2a:a8:a2:71:41:e6:8e:0b:f7:d8:d0:85:e9:ce: f8:6d:a6:4d:35:10:95:69:8b:f9:1f:d2:c8:22:76: 79:56:aa:5e:40:68:fe:28:68:eb:c5:d6:50:cc:f6: a7:a7:e1:f6:58:ea:a3:0d:63:e3:42:ad:ce:dc:b7: 80:cb:dc:65:97:72:fd:e3:99:cb:dd:e9:36:71:1a: 60:a0:83:be:4b:78:cb:16:53:7e:a2:90:7a:fc:4a: 13:45:e2:b1:19:8a:dc:48:f4:bc:60:92:0b:f6:75: a7:91:4f:00:6a:09:3f:08:1a:3e:21:9e:cf:35:fb: eb:8a:7e:c8:c4:e2:e3:1f:1d:ed:65:13:a4:32:ee: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:86:1C:FF:4B:18:31:9C:AB:72:6F:DF:DB:18:11:9A:BA:6A:79:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:9d:74:a6:34:94:ad:a0:57:18:03:b6:9f:7d:42:6d:88:56: f1:6c:f6:da:0c:f4:ba:c0:df:79:c5:64:b5:ce:fc:c9:6e:c2: f0:8f:45:34:8f:3b:c8:60:71:07:b5:36:e9:73:5a:38:22:3f: c3:02:99:cf:4a:05:74:45:1c:99:04:e4:35:5e:5b:a5:22:28: b0:e7:a6:dc:16:ad:7d:fd:1c:6c:0c:53:d4:80:f2:f0:e5:06: e7:08:42:28:4f:d2:e6:f3:80:4f:c1:f5:d9:14:ee:95:bb:33: 4a:a4:91:21:b6:09:4d:bb:46:93:8a:a8:c9:be:f9:2f:d9:4c: f2:68:4c:28:10:c8:ee:a9:3d:1a:3b:16:92:82:7e:3f:c6:ae: 6c:08:48:a8:68:f1:01:6d:a4:ab:94:12:74:00:f5:47:82:68: c6:6e:c7:30:0a:a7:c7:65:c5:a8:4f:19:9a:ca:f3:75:a8:fc: ad:3b:8c:ba:3b:c9:1b:e1:1f:5a:b6:f3:d1:75:c1:fc:12:91: a6:4b:38:6b:d0:d9:8d:fc:9b:c1:e6:93:b6:69:5d:79:c2:85: 71:50:c8:ac:8e:3b:e2:43:df:4c:1b:19:b0:32:a3:d9:49:ac: 30:61:22:49:62:42:dd:1a:fc:f9:15:dc:ef:42:e4:07:75:d0: e2:70:6d:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0U4/S18VTh9S6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ODY4ZmM5OWYtZGVhOC00M2MwLWJjM2MtNDE4Nzk0OGQwYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU6fms/mb4Ni944EGnQcIVx1Ri9BgIXoc4JA Dde6vbSX2o14YyIi9dxNJlIr3SSm6NAxtvjFL5ovxfmrGjcoLM/8qsJ3XQGC4moE vC75k1tlS0LSXV7HiDm3HPtXjKztClryd1fRHBMwVEVizk0zj5a05BZ4glHBKqii cUHmjgv32NCF6c74baZNNRCVaYv5H9LIInZ5VqpeQGj+KGjrxdZQzPanp+H2WOqj DWPjQq3O3LeAy9xll3L945nL3ek2cRpgoIO+S3jLFlN+opB6/EoTReKxGYrcSPS8 YJIL9nWnkU8Aagk/CBo+IZ7PNfvrin7IxOLjHx3tZROkMu7E0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmGHP9LGDGcq3Jv39sYEZq6anmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMjMyMGRmMGEtYmExYS0z ODBjLWJlMGYtZDhlM2M3Zjk3M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqddKY0lK2gVxgDtp99Qm2IVvFs9toM9LrA33nFZLXO/MluwvCPRTSP O8hgcQe1NulzWjgiP8MCmc9KBXRFHJkE5DVeW6UiKLDnptwWrX39HGwMU9SA8vDl BucIQihP0ubzgE/B9dkU7pW7M0qkkSG2CU27RpOKqMm++S/ZTPJoTCgQyO6pPRo7 FpKCfj/GrmwISKho8QFtpKuUEnQA9UeCaMZuxzAKp8dlxahPGZrK83Wo/K07jLo7 yRvhH1q289F1wfwSkaZLOGvQ2Y38m8Hmk7ZpXXnChXFQyKyOO+JD30wbGbAyo9lJ rDBhIkliQt0a/PkV3O9C5Ad10OJwbRY= -----END CERTIFICATE-----Generated at Wed Aug 6 11:04:45 2025 by rpki-client