$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa File: 2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa (raw, json) Hash identifier: 4puBgcboa9Wl50d/PDRSnjc1DZ6Mw8KXc02SzrbQcz4= Subject key identifier: 8D:A8:3F:F6:74:90:3F:B8:41:21:8B:FE:18:2A:47:C3:5C:10:22:38 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584A7A4B45C4DD65EC8C3307F100 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 394437 IP address blocks: 72.20.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:45:c4:dd:65:ec:8c:33:07:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=6ef85bf3-c504-4078-b66f-7fabdb8a116b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:0d:3c:b7:6c:36:f7:ba:8b:c9:b4:33:ca: e3:85:35:19:90:9b:78:16:00:58:e4:77:6a:b8:51: 28:47:45:3c:e9:93:cb:b7:50:42:67:87:65:66:ea: 3d:60:a2:20:f3:4b:19:e6:24:29:6f:22:e4:4a:5d: 5e:be:b8:a3:35:1b:ed:c7:60:ff:49:f3:af:9a:75: b1:bf:12:25:59:f5:1a:83:a9:23:f0:ef:19:69:50: c3:31:0a:a0:81:16:05:3a:e8:18:7c:22:9e:22:85: 0e:19:f1:4d:aa:b2:1a:71:7d:b3:29:90:56:dc:fd: e6:76:c2:79:24:bb:73:3d:6c:1f:18:a3:00:4e:72: b4:6e:28:fc:ed:16:8c:45:a5:fd:6c:73:23:44:e7: 7f:c3:c3:ec:61:4a:63:2a:9c:d2:a4:8b:f3:c7:34: a9:56:fd:77:af:9e:9f:85:e0:8d:0a:f7:ed:4b:90: fe:74:ff:62:8d:ba:d3:4f:db:4b:2f:cc:13:1e:b5: e5:4d:d4:4a:15:65:09:a1:51:89:87:e4:e1:04:c8: 00:5b:ac:77:33:eb:92:a7:87:ed:61:33:01:b0:5e: 6c:8b:d3:0e:bc:b2:9e:65:26:43:fe:4c:d7:d1:e5: f0:d5:0d:e2:aa:8e:7f:ac:97:81:2d:1a:98:9c:19: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A8:3F:F6:74:90:3F:B8:41:21:8B:FE:18:2A:47:C3:5C:10:22:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:81:0e:42:2c:9b:4e:27:3e:00:27:ed:44:8f:07:91:72:64: 14:bc:d4:8a:f9:6a:b4:67:1a:9f:69:8b:ee:e6:74:24:92:db: 8d:6e:ed:e0:fb:f2:18:ac:07:6f:5b:a8:a1:55:98:e2:1c:b1: 47:f5:63:f4:ce:82:e4:e3:47:bb:8a:29:1a:8c:47:98:da:af: 9c:c6:01:99:db:5b:b0:56:d4:53:7a:21:a0:20:4f:80:e3:33: 68:ee:cc:07:16:5d:43:58:f2:c1:3a:ac:a0:8f:f2:df:63:ac: e7:ed:e2:6f:9c:c7:ff:da:63:88:94:15:b9:93:31:f5:ee:2f: da:6c:28:8a:f1:96:b8:cf:91:37:d6:43:61:25:e3:47:4c:80: e4:9b:83:cf:3d:b3:ef:ac:08:93:cc:d8:e0:cd:30:51:e1:3c: a1:e6:57:b5:a1:8c:2b:d1:e5:e4:8d:f7:81:89:23:e1:ad:42: 39:2e:9c:ef:ed:b9:03:dc:b2:b9:7c:49:70:65:bc:10:b6:7e: 20:39:ac:da:7a:a0:a4:ed:c5:29:7a:aa:b9:51:af:e8:ba:f2: 31:46:ff:e1:22:b9:1b:bf:af:3e:37:b3:e8:6f:24:bf:f7:21: 6a:13:9f:11:c2:c5:2f:4a:e7:5a:1a:b4:ce:6d:87:41:a8:ef: 1a:07:39:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0XE3WXsjDMH8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NmVmODViZjMtYzUwNC00MDc4LWI2NmYtN2ZhYmRiOGExMTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdwNPLdsNve6i8m0M8rjhTUZkJt4FgBY5Hdq uFEoR0U86ZPLt1BCZ4dlZuo9YKIg80sZ5iQpbyLkSl1evrijNRvtx2D/SfOvmnWx vxIlWfUag6kj8O8ZaVDDMQqggRYFOugYfCKeIoUOGfFNqrIacX2zKZBW3P3mdsJ5 JLtzPWwfGKMATnK0bij87RaMRaX9bHMjROd/w8PsYUpjKpzSpIvzxzSpVv13r56f heCNCvftS5D+dP9ijbrTT9tLL8wTHrXlTdRKFWUJoVGJh+ThBMgAW6x3M+uSp4ft YTMBsF5si9MOvLKeZSZD/kzX0eXw1Q3iqo5/rJeBLRqYnBlH/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2oP/Z0kD+4QSGL/hgqR8NcECI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMmUwMDQwNGMtNmYwZS0z OTZjLWFkM2EtYzAwYWU3OGY3ZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6BDkIsm04nPgAn7USPB5FyZBS81Ir5arRnGp9pi+7mdCSS241u7eD7 8hisB29bqKFVmOIcsUf1Y/TOguTjR7uKKRqMR5jar5zGAZnbW7BW1FN6IaAgT4Dj M2juzAcWXUNY8sE6rKCP8t9jrOft4m+cx//aY4iUFbmTMfXuL9psKIrxlrjPkTfW Q2El40dMgOSbg889s++sCJPM2ODNMFHhPKHmV7WhjCvR5eSN94GJI+GtQjkunO/t uQPcsrl8SXBlvBC2fiA5rNp6oKTtxSl6qrlRr+i68jFG/+EiuRu/rz43s+hvJL/3 IWoTnxHCxS9K51oatM5th0Go7xoHOW0= -----END CERTIFICATE-----Generated at Mon Aug 4 22:26:43 2025 by rpki-client