$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa File: 308232c7-7251-38cc-86fe-9125a605bda8.roa (raw, json) Hash identifier: VUIfY7dP2xdw4x9+s9r1pm1OrmqD5Hgowi817Zi/VWo= Subject key identifier: 67:F9:B0:EF:91:BA:1F:32:6C:0F:CC:94:48:18:A5:24:5B:9F:85:C3 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584BAA97A3234F41901548441A80 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 394437 IP address blocks: 72.20.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a3:23:4f:41:90:15:48:44:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=2129b4dd-9597-4d2f-9c9d-ee73c66bce2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:16:91:f6:22:5f:7d:91:23:e5:30:76:24: f4:0b:44:dd:26:3e:b3:d9:0d:11:c3:98:93:f6:45: 53:89:ce:a2:a5:b5:5c:82:a9:07:c1:79:38:ba:34: 5e:17:57:a7:14:a2:5e:3b:71:4a:2c:c4:9e:f0:28: e2:53:a3:e5:6f:34:2c:4c:7a:8b:f4:bc:83:bb:eb: b7:c3:81:77:62:56:6f:1e:b8:75:51:84:8d:2a:a1: 29:1c:37:2d:e7:c4:84:85:30:4a:f0:84:48:d8:32: c4:6e:d0:80:69:c7:0d:87:70:06:b1:ca:73:9d:4f: 02:a8:bc:c5:bd:1c:b3:bd:7c:d7:b4:80:a5:7f:a2: 10:bd:b1:56:74:7d:0e:a7:27:6c:20:63:2c:ee:36: 27:61:65:47:e0:f0:59:91:0b:e2:28:0e:f3:0a:b2: af:d7:81:ad:20:21:19:09:23:3e:6d:9e:68:26:bd: 9a:a4:c9:61:36:20:49:c8:72:43:7c:f6:10:26:c2: 6c:1a:b8:50:cb:96:bd:7c:c9:6b:c9:c3:44:db:04: e0:db:8b:86:2f:0f:94:4e:47:a8:1e:67:ac:e7:2e: 21:59:de:3f:3a:20:42:ae:de:c4:c9:81:74:30:40: 1a:55:2e:e5:07:74:ec:fa:cd:c0:b9:2b:14:c3:56: fe:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F9:B0:EF:91:BA:1F:32:6C:0F:CC:94:48:18:A5:24:5B:9F:85:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:bd:57:8d:2f:1f:66:63:b6:a7:9a:ad:34:e0:cc:de:6d:34: 72:88:87:d2:93:a0:a0:f6:82:fa:8f:da:c3:28:fa:7b:de:ff: 38:f7:50:81:a2:89:fb:ba:48:d0:3d:f6:39:ca:85:a8:72:7a: 81:7d:46:7d:23:12:f7:09:45:3f:9c:76:75:25:af:3e:57:cf: f3:45:d3:7a:41:15:7e:a3:8b:06:7e:a7:20:7f:3f:84:9c:5d: 39:93:e7:f8:97:78:40:21:b9:6b:ff:b7:84:10:4a:37:97:e0: e4:d7:34:b5:40:04:14:73:bb:59:51:34:a4:fe:00:48:29:f8: f9:f2:30:05:f7:84:ee:35:73:f2:60:14:f6:13:a2:cc:39:a7: a8:76:ee:28:74:eb:3a:e2:ab:94:f9:f4:eb:bb:26:db:ff:f9: c5:17:97:8e:07:c8:13:d3:d2:24:3e:23:4c:67:0c:21:d9:0d: f0:96:94:b5:40:8c:cf:cf:0f:00:91:01:27:9a:db:5e:1d:47: f7:7a:fb:0d:bb:f1:26:64:a6:31:0e:7b:22:8e:0d:1e:9e:6f: ac:43:ec:e5:5a:f1:08:36:80:55:e0:18:c5:a2:4e:7d:b5:73: be:d1:b6:dd:45:ab:31:0f:b5:47:e7:ed:66:16:a5:df:28:44: 2e:97:ac:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6MjT0GQFUhEGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MjEyOWI0ZGQtOTU5Ny00ZDJmLTljOWQtZWU3M2M2NmJjZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP4WkfYiX32RI+UwdiT0C0TdJj6z2Q0Rw5iT 9kVTic6ipbVcgqkHwXk4ujReF1enFKJeO3FKLMSe8CjiU6PlbzQsTHqL9LyDu+u3 w4F3YlZvHrh1UYSNKqEpHDct58SEhTBK8IRI2DLEbtCAaccNh3AGscpznU8CqLzF vRyzvXzXtIClf6IQvbFWdH0OpydsIGMs7jYnYWVH4PBZkQviKA7zCrKv14GtICEZ CSM+bZ5oJr2apMlhNiBJyHJDfPYQJsJsGrhQy5a9fMlrycNE2wTg24uGLw+UTkeo Hmes5y4hWd4/OiBCrt7EyYF0MEAaVS7lB3Ts+s3AuSsUw1b+cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf5sO+Ruh8ybA/MlEgYpSRbn4XDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMzA4MjMyYzctNzI1MS0z OGNjLTg2ZmUtOTEyNWE2MDViZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+9V40vH2ZjtqearTTgzN5tNHKIh9KToKD2gvqP2sMo+nve/zj3UIGi ifu6SNA99jnKhahyeoF9Rn0jEvcJRT+cdnUlrz5Xz/NF03pBFX6jiwZ+pyB/P4Sc XTmT5/iXeEAhuWv/t4QQSjeX4OTXNLVABBRzu1lRNKT+AEgp+PnyMAX3hO41c/Jg FPYTosw5p6h27ih06zriq5T59Ou7Jtv/+cUXl44HyBPT0iQ+I0xnDCHZDfCWlLVA jM/PDwCRASea214dR/d6+w278SZkpjEOeyKODR6eb6xD7OVa8Qg2gFXgGMWiTn21 c77Rtt1FqzEPtUfn7WYWpd8oRC6XrLw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:59:40 2025 by rpki-client