$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa File: 35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa (raw, json) Hash identifier: k+iZLAhZMzig1irkMpFEoa2zrlktF8lBuOGhDS0YAN4= Subject key identifier: 82:B6:C2:A3:CE:0D:11:ED:07:4D:AD:9E:1B:AC:20:76:78:38:56:5E Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584EA798DB8FA21DA0CA1F4B1680 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 394437 IP address blocks: 72.20.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:db:8f:a2:1d:a0:ca:1f:4b:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0a02b306-c04f-40ac-9f7e-6a42ccd861c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2c:58:2b:0a:61:0c:f1:12:bf:89:21:bf:ad: 24:72:73:7e:ed:a4:32:62:2a:68:c8:05:c8:cd:32: b2:df:01:71:76:89:7d:85:56:3c:36:74:01:e9:49: fc:b7:f8:4f:19:78:7c:2a:6f:e1:c4:fa:02:ec:1e: bb:8d:a4:ae:48:0d:33:5a:40:0f:22:68:17:53:30: fa:59:26:b9:94:19:02:6c:ed:8e:cb:66:e9:5a:f1: 97:25:b9:d0:a9:90:f8:af:e6:2c:40:3f:70:f9:f7: 29:7e:72:30:63:08:41:62:91:f8:06:bc:0b:29:d9: b1:6f:09:8f:9a:de:65:33:37:c3:9f:43:a2:a7:60: 3a:4b:62:b0:d9:08:be:2d:da:fa:c4:ef:7d:82:6d: 7d:0b:29:3a:f6:10:da:0b:ca:a3:03:63:5f:5c:fc: a6:99:50:93:73:1e:20:f8:ed:ff:7b:e5:17:2c:75: 39:18:31:3b:b2:17:13:31:94:c8:7e:e0:7c:d1:4a: 5d:7d:29:8d:a2:93:0e:e8:71:5d:6a:78:60:34:1a: 14:6d:6d:e6:5b:c9:1c:03:4d:d5:ef:1a:9e:b2:7a: 8c:df:5b:d4:0a:a6:7b:65:46:5d:dc:40:b1:f3:6d: 61:6c:fc:63:5b:de:54:0d:e4:6c:80:fe:ad:3f:07: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B6:C2:A3:CE:0D:11:ED:07:4D:AD:9E:1B:AC:20:76:78:38:56:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:d3:9d:b6:14:43:a7:43:93:e3:b0:ec:6e:87:cf:c5:b4:8b: 6e:45:75:26:77:2c:7b:ac:23:81:65:73:5b:cd:75:c2:3e:5a: 09:e7:53:be:82:5e:17:b3:68:79:a9:6f:a3:d3:f0:f1:1b:8a: 23:e0:f2:75:c3:21:94:93:0b:a8:ca:23:3d:b4:3f:51:ed:df: f4:a6:a4:b1:76:71:72:43:8f:3d:22:84:15:2d:c5:a5:d5:a6: 07:06:31:51:00:f1:0e:33:fd:be:89:fe:88:af:c6:51:95:bd: 24:a5:a5:a9:0d:d8:3d:fe:ae:35:e5:88:53:f9:f2:9b:c0:56: c8:a0:a5:71:c1:da:47:10:c6:34:9e:25:3b:84:07:6d:33:c9: 66:d5:eb:a1:e3:3a:f1:a8:60:68:84:8d:3c:48:41:43:2d:7c: 8e:60:d8:f3:e2:28:38:4b:65:c9:52:35:84:12:29:e9:01:7b: 6d:4a:ec:5e:9b:f6:e3:f0:10:3b:24:8c:68:18:28:12:02:25: af:68:ec:77:d6:e2:c9:ea:1f:03:75:c1:57:94:a4:e9:35:89: f4:32:b1:98:fe:f1:04:51:53:cc:7b:1b:08:41:ae:8c:06:bd: 8d:80:58:0f:a4:a4:03:1e:ab:ac:82:e2:71:67:61:46:f0:36: a7:72:4b:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmNuPoh2gyh9LFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGEwMmIzMDYtYzA0Zi00MGFjLTlmN2UtNmE0MmNjZDg2MWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ixYKwphDPESv4khv60kcnN+7aQyYipoyAXI zTKy3wFxdol9hVY8NnQB6Un8t/hPGXh8Km/hxPoC7B67jaSuSA0zWkAPImgXUzD6 WSa5lBkCbO2Oy2bpWvGXJbnQqZD4r+YsQD9w+fcpfnIwYwhBYpH4BrwLKdmxbwmP mt5lMzfDn0Oip2A6S2Kw2Qi+Ldr6xO99gm19Cyk69hDaC8qjA2NfXPymmVCTcx4g +O3/e+UXLHU5GDE7shcTMZTIfuB80UpdfSmNopMO6HFdanhgNBoUbW3mW8kcA03V 7xqesnqM31vUCqZ7ZUZd3ECx821hbPxjW95UDeRsgP6tPwdBeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK2wqPODRHtB02tnhusIHZ4OFZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMzUzOTZiYzQtMGVkMC0z YjI2LThmZTUtYzI4ODNiYWYwOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvTnbYUQ6dDk+Ow7G6Hz8W0i25FdSZ3LHusI4Flc1vNdcI+WgnnU76C XhezaHmpb6PT8PEbiiPg8nXDIZSTC6jKIz20P1Ht3/SmpLF2cXJDjz0ihBUtxaXV pgcGMVEA8Q4z/b6J/oivxlGVvSSlpakN2D3+rjXliFP58pvAVsigpXHB2kcQxjSe JTuEB20zyWbV66HjOvGoYGiEjTxIQUMtfI5g2PPiKDhLZclSNYQSKekBe21K7F6b 9uPwEDskjGgYKBICJa9o7HfW4snqHwN1wVeUpOk1ifQysZj+8QRRU8x7GwhBrowG vY2AWA+kpAMeq6yC4nFnYUbwNqdyS7w= -----END CERTIFICATE-----Generated at Wed Jul 29 10:38:25 2026 by rpki-client