$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa File: 308232c7-7251-38cc-86fe-9125a605bda8.roa (raw, json) Hash identifier: UIKFQIYHou/ydyjfTgBOylXKOUNAFq7Zr1ubVY53V6I= Subject key identifier: 78:62:B0:F0:C7:30:B8:0A:14:90:13:9C:44:1B:D4:2F:DD:1F:76:CC Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584AC9DBA19C21BD0E88D5FF7000 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 394437 IP address blocks: 72.20.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a1:9c:21:bd:0e:88:d5:ff:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=06c40718-824e-4474-8aca-b20793f5910f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:09:e3:16:35:46:61:48:38:48:b2:bb:e6: 28:a0:5d:26:e0:8f:ed:2a:a7:4e:da:c8:a7:34:59: 02:c6:2c:6d:a9:eb:5e:b5:3d:b4:23:e2:d0:78:20: 81:b0:a4:66:f9:61:1c:aa:70:f0:a0:4f:a7:55:54: 19:2c:a2:70:97:e3:f4:89:d4:9c:e6:94:8c:ad:b0: d3:35:41:78:5c:aa:7d:3b:77:22:4a:5b:59:ac:07: c8:76:a4:34:25:e8:91:4a:f6:05:a9:18:9d:13:67: b3:b7:e6:85:49:33:a8:d2:7b:ab:af:1c:f7:4b:cb: dc:f8:0b:8f:c8:18:db:96:06:5d:51:d2:76:58:24: 06:7e:9c:30:99:61:ec:06:88:d9:64:01:75:6e:1b: d4:3b:a7:db:fb:23:b9:66:4e:4f:62:b8:ae:a1:09: d1:bb:4b:e7:c7:c7:cb:aa:02:19:06:75:3f:b3:a1: 83:62:cd:1e:9c:cb:83:22:33:5c:09:c5:22:c2:e1: 0e:37:31:bd:72:f1:cc:36:c7:64:d9:40:b4:03:43: b6:5a:b2:d6:eb:17:8e:61:f9:e5:9a:02:c0:4f:11: e0:2f:be:ed:0b:f1:f7:d9:4b:3c:92:11:0b:61:e9: 27:e2:23:3b:d4:f4:ad:d3:e2:70:d7:ff:a5:85:bc: 18:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:62:B0:F0:C7:30:B8:0A:14:90:13:9C:44:1B:D4:2F:DD:1F:76:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:10:98:7a:ef:65:2c:e6:f6:e2:5d:d8:fe:65:7d:2d:2b:aa: 78:00:1a:3a:6a:9e:5d:32:fe:d7:f0:07:de:86:ea:52:16:3a: b8:45:03:7e:dc:1f:e4:2d:30:11:24:34:a9:71:0c:6c:aa:f0: 5f:7a:6b:8b:dc:b0:fb:f5:73:2b:e2:1a:a8:9e:ad:e3:26:c6: f6:b7:b4:5c:bd:2c:cb:f0:16:21:be:d1:c8:19:30:11:3e:1b: 73:92:06:39:d7:44:8d:c6:d3:1f:a9:de:88:80:87:30:96:98: 92:a2:f7:9d:0a:01:19:7a:83:dc:68:ec:1b:9d:5a:99:ae:d4: 21:61:4a:7b:55:e0:52:a9:65:2c:c5:f0:1e:5c:ed:d8:75:41: 55:53:29:1c:db:cb:9c:d9:0e:be:c2:8c:e6:22:c6:fc:9f:7d: a0:b6:19:a3:ac:00:71:49:5d:e2:a4:5f:6d:fb:f3:38:60:80: 2c:6d:48:64:79:6e:82:de:b3:21:36:c4:eb:20:bd:44:26:00: 31:2a:15:8f:10:fb:7e:b1:e9:c0:ee:14:cb:23:29:06:33:50: a8:70:40:4b:b1:58:b2:70:38:8f:ef:51:0e:06:77:e9:fb:de: ed:e2:81:c0:8f:48:d7:5d:e9:df:41:c9:0e:c9:f8:70:1f:38: e1:9c:96:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26GcIb0OiNX/cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk MDZjNDA3MTgtODI0ZS00NDc0LThhY2EtYjIwNzkzZjU5MTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoYJ4xY1RmFIOEiyu+YooF0m4I/tKqdO2sin NFkCxixtqetetT20I+LQeCCBsKRm+WEcqnDwoE+nVVQZLKJwl+P0idSc5pSMrbDT NUF4XKp9O3ciSltZrAfIdqQ0JeiRSvYFqRidE2ezt+aFSTOo0nurrxz3S8vc+AuP yBjblgZdUdJ2WCQGfpwwmWHsBojZZAF1bhvUO6fb+yO5Zk5PYriuoQnRu0vnx8fL qgIZBnU/s6GDYs0enMuDIjNcCcUiwuEONzG9cvHMNsdk2UC0A0O2WrLW6xeOYfnl mgLATxHgL77tC/H32Us8khELYekn4iM71PSt0+Jw1/+lhbwYSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhisPDHMLgKFJATnEQb1C/dH3bMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMzA4MjMyYzctNzI1MS0z OGNjLTg2ZmUtOTEyNWE2MDViZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIQmHrvZSzm9uJd2P5lfS0rqngAGjpqnl0y/tfwB96G6lIWOrhFA37c H+QtMBEkNKlxDGyq8F96a4vcsPv1cyviGqiereMmxva3tFy9LMvwFiG+0cgZMBE+ G3OSBjnXRI3G0x+p3oiAhzCWmJKi950KARl6g9xo7BudWpmu1CFhSntV4FKpZSzF 8B5c7dh1QVVTKRzby5zZDr7CjOYixvyffaC2GaOsAHFJXeKkX2378zhggCxtSGR5 boLesyE2xOsgvUQmADEqFY8Q+36x6cDuFMsjKQYzUKhwQEuxWLJwOI/vUQ4Gd+n7 3u3igcCPSNdd6d9ByQ7J+HAfOOGcliI= -----END CERTIFICATE-----Generated at Sat Aug 9 10:37:25 2025 by rpki-client