$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/3d884570-87a9-34e5-b8d7-d777763d0b30.roa File: 3d884570-87a9-34e5-b8d7-d777763d0b30.roa (raw, json) Hash identifier: yaJpKrZujaEdnktVCcmfPXk0rHeKvaaymL2++w6Rdow= Subject key identifier: 16:0A:D5:9F:99:CB:35:90:FA:30:A2:08:66:EF:CE:97:6F:8C:2C:3D Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584EA798DB5034418F86A03F9200 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/3d884570-87a9-34e5-b8d7-d777763d0b30.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 394437 IP address blocks: 72.20.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:db:50:34:41:8f:86:a0:3f:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=638c72ad-93b1-4065-a2a3-3d7ee20182f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:46:be:5a:67:c8:80:c4:34:bb:a0:28:9d: 75:37:ba:62:90:34:1e:8f:9c:91:72:94:d3:32:51: a2:a9:3e:72:dc:37:8a:af:c1:f0:db:74:1e:ca:d2: 0a:1e:12:3a:b2:cf:8f:49:0b:5a:18:5a:c5:d6:02: e7:dd:db:20:01:f5:44:4f:45:6e:18:a4:53:93:27: 7b:3a:ca:a9:3a:f6:b0:c5:4a:d8:a2:f6:d4:cc:64: 31:ca:a6:77:a1:59:97:91:70:b5:4a:9c:12:93:20: be:15:99:83:aa:36:9a:2b:e7:c4:ef:09:5b:01:c4: ff:f7:38:ca:9d:67:44:a4:67:c4:22:ed:43:d4:f6: 70:e3:9e:31:3d:54:83:3a:21:4a:9f:b8:ac:70:d2: 96:9a:cc:ec:b3:96:e8:1e:cc:6d:57:0d:bf:87:26: 3d:95:4e:dc:89:5a:5a:43:ac:b5:67:04:46:af:87: 67:73:25:a0:6a:5e:7d:55:96:d4:1a:c1:b5:2d:e3: ee:b2:0a:8f:26:41:80:5c:37:08:a8:3b:2f:a2:22: fd:82:84:57:de:c0:45:04:c2:78:ed:53:e6:41:19: e9:95:4b:61:96:1b:e2:b9:ea:df:67:00:5f:b0:3b: 00:14:a9:70:bc:8f:c3:78:f4:f7:e5:52:b2:38:c1: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0A:D5:9F:99:CB:35:90:FA:30:A2:08:66:EF:CE:97:6F:8C:2C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/3d884570-87a9-34e5-b8d7-d777763d0b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:9d:af:d8:90:de:4e:b9:36:24:c6:b5:15:49:24:d2:58:70: 58:e0:80:28:2a:ec:af:ce:b6:8d:1d:62:57:88:2f:e7:9a:9b: 7e:ca:53:82:72:90:e7:17:aa:f6:95:d5:cd:0d:20:65:5d:e6: 67:95:21:21:28:99:2c:35:a3:36:56:85:e7:b6:d2:aa:43:6b: 6e:5a:60:54:28:17:72:44:7b:46:c2:bc:16:2d:13:7e:e9:11: b1:40:ab:86:20:cb:cf:c1:c9:0c:b4:36:fa:86:c6:63:fc:2f: 65:60:3b:61:43:71:62:a2:ff:90:5c:95:ca:69:b7:7f:7d:44: de:ff:d1:dc:53:18:d5:c8:76:58:66:84:02:9a:c8:20:73:e7: 62:df:f7:9a:09:a3:e4:d4:ce:95:38:36:ad:06:27:e9:1a:98: a9:f1:27:b4:7d:62:d5:4a:36:14:b4:d1:7d:00:0a:73:2c:1e: 71:a4:49:c6:60:de:09:97:15:6c:e0:66:c8:63:52:01:d2:c4: 8a:2a:a3:e0:79:8d:69:e5:84:2d:87:86:2a:a9:ce:0f:33:f5: f4:29:6f:8f:1f:26:eb:d0:d4:72:50:c8:6d:e0:4a:55:16:28: 2f:80:22:5f:99:2e:ba:99:a7:3c:79:99:e9:98:3c:c8:2e:11: b4:9f:16:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmNtQNEGPhqA/kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjM4YzcyYWQtOTNiMS00MDY1LWEyYTMtM2Q3ZWUyMDE4MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsshGvlpnyIDENLugKJ11N7pikDQej5yRcpTT MlGiqT5y3DeKr8Hw23QeytIKHhI6ss+PSQtaGFrF1gLn3dsgAfVET0VuGKRTkyd7 OsqpOvawxUrYovbUzGQxyqZ3oVmXkXC1SpwSkyC+FZmDqjaaK+fE7wlbAcT/9zjK nWdEpGfEIu1D1PZw454xPVSDOiFKn7iscNKWmszss5boHsxtVw2/hyY9lU7ciVpa Q6y1ZwRGr4dncyWgal59VZbUGsG1LePusgqPJkGAXDcIqDsvoiL9goRX3sBFBMJ4 7VPmQRnplUthlhviuerfZwBfsDsAFKlwvI/DePT35VKyOMHAJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYK1Z+ZyzWQ+jCiCGbvzpdvjCw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvM2Q4ODQ1NzAtODdhOS0z NGU1LWI4ZDctZDc3Nzc2M2QwYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMedr9iQ3k65NiTGtRVJJNJYcFjggCgq7K/Oto0dYleIL+eam37KU4Jy kOcXqvaV1c0NIGVd5meVISEomSw1ozZWhee20qpDa25aYFQoF3JEe0bCvBYtE37p EbFAq4Ygy8/ByQy0NvqGxmP8L2VgO2FDcWKi/5Bclcppt399RN7/0dxTGNXIdlhm hAKayCBz52Lf95oJo+TUzpU4Nq0GJ+kamKnxJ7R9YtVKNhS00X0ACnMsHnGkScZg 3gmXFWzgZshjUgHSxIoqo+B5jWnlhC2Hhiqpzg8z9fQpb48fJuvQ1HJQyG3gSlUW KC+AIl+ZLrqZpzx5memYPMguEbSfFk0= -----END CERTIFICATE-----Generated at Wed Jul 29 10:36:10 2026 by rpki-client