$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa File: 4776edfc-bc46-3221-b5cc-4294fec1d431.roa (raw, json) Hash identifier: kpegxbdyBN51zCl0IJuSznCAOJ9RRSNO9WfQEI8fwE4= Subject key identifier: 2A:87:9E:A1:83:A3:36:AC:71:D3:90:8D:B9:DE:AF:0A:3D:87:0B:3D Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584A7A4B4556D341C81C37E45E00 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 394437 IP address blocks: 72.20.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:45:56:d3:41:c8:1c:37:e4:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=14c8cc6e-49a5-483e-84cb-fb4a986bd9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2f:31:95:22:61:41:94:b8:29:6d:58:87:f5: 06:46:ab:9e:a2:15:3d:dc:f3:4f:5d:3d:ff:36:fd: 7c:e5:1f:d1:ce:1f:f2:ce:bd:4a:1d:d5:1c:8b:d4: d7:c6:b1:4a:49:c3:84:2b:de:70:15:4e:23:d8:a5: 99:37:92:65:b1:e6:4c:18:b0:3f:09:a3:33:d8:7a: c8:2c:6f:51:44:3d:4b:d7:d4:a7:d2:d2:c1:2e:1d: f2:0e:9e:a8:69:d6:7a:05:09:96:8f:98:32:6e:b1: bd:a0:7f:ac:fb:66:c0:95:c8:77:43:17:d3:bf:f1: 29:3d:3f:9b:ec:22:75:f8:58:70:d3:db:43:6d:83: 69:5e:fd:68:bb:99:ff:87:2a:05:05:59:d2:8d:14: 85:61:11:84:bd:a1:fb:83:0e:31:5c:6e:db:ff:22: 1e:dc:cd:24:80:17:95:dd:9f:99:21:cc:af:90:e1: 00:f5:93:3f:3c:1d:17:4a:a3:0e:d2:5a:22:cb:4e: c5:c4:8b:1f:64:77:d9:6c:97:ed:8e:94:2c:8e:82: 46:05:a1:f3:c8:19:f4:1d:8f:22:30:88:d2:2c:55: 90:20:7f:f2:79:72:f1:16:f1:7c:a6:d7:29:4a:3e: 23:fb:a1:d6:72:78:26:b7:b0:ff:06:be:ac:fa:6f: 8a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:87:9E:A1:83:A3:36:AC:71:D3:90:8D:B9:DE:AF:0A:3D:87:0B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d6:c2:a2:b3:db:d4:e9:8b:ad:5b:fc:f7:3a:92:79:57:34: 0a:52:72:40:00:64:0a:9c:9e:7a:0c:ff:05:9b:58:ec:a5:02: e1:43:e8:72:5c:a1:cd:ea:d6:b5:4a:ee:41:dc:85:0b:e5:e5: 4c:62:9f:ad:f5:19:da:65:12:db:e8:c7:e5:4c:d4:d1:3e:80: b1:94:c6:53:93:b1:1b:18:e5:3f:a5:2a:90:91:0e:d9:4f:df: ce:04:9d:d1:7c:27:03:be:e3:5d:72:bb:a1:d4:3a:dc:78:87: b7:8f:18:cd:34:2f:76:f4:9d:a5:ae:21:f5:ec:47:a6:b3:27: 64:50:f0:d6:59:19:cd:b0:2c:19:75:3e:bc:14:8c:0a:43:88: 1d:67:dc:79:f9:d9:28:0b:21:89:21:60:1e:02:80:b6:ab:39: c1:3c:de:b4:91:6f:4c:9e:55:83:fa:1d:19:d9:d6:1a:9e:02: fe:a7:02:00:51:5d:f5:f1:8a:30:e6:d3:8f:39:9d:7f:80:e7: bc:af:80:91:f1:05:b7:8e:4b:d5:6c:f6:12:56:05:c8:8e:a5: 99:77:d6:67:9a:ff:56:1a:ed:ff:d8:ad:2e:81:cd:ab:3a:15: 29:2b:a0:34:03:32:31:19:d8:93:6b:11:f5:3f:2a:49:30:f6: b1:c7:50:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0VW00HIHDfkXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MTRjOGNjNmUtNDlhNS00ODNlLTg0Y2ItZmI0YTk4NmJkOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii8xlSJhQZS4KW1Yh/UGRqueohU93PNPXT3/ Nv185R/Rzh/yzr1KHdUci9TXxrFKScOEK95wFU4j2KWZN5JlseZMGLA/CaMz2HrI LG9RRD1L19Sn0tLBLh3yDp6oadZ6BQmWj5gybrG9oH+s+2bAlch3QxfTv/EpPT+b 7CJ1+Fhw09tDbYNpXv1ou5n/hyoFBVnSjRSFYRGEvaH7gw4xXG7b/yIe3M0kgBeV 3Z+ZIcyvkOEA9ZM/PB0XSqMO0loiy07FxIsfZHfZbJftjpQsjoJGBaHzyBn0HY8i MIjSLFWQIH/yeXLxFvF8ptcpSj4j+6HWcngmt7D/Br6s+m+KNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqHnqGDozascdOQjbnerwo9hws9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNDc3NmVkZmMtYmM0Ni0z MjIxLWI1Y2MtNDI5NGZlYzFkNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvWwqKz29Tpi61b/Pc6knlXNApSckAAZAqcnnoM/wWbWOylAuFD6HJc oc3q1rVK7kHchQvl5Uxin631GdplEtvox+VM1NE+gLGUxlOTsRsY5T+lKpCRDtlP 384EndF8JwO+411yu6HUOtx4h7ePGM00L3b0naWuIfXsR6azJ2RQ8NZZGc2wLBl1 PrwUjApDiB1n3Hn52SgLIYkhYB4CgLarOcE83rSRb0yeVYP6HRnZ1hqeAv6nAgBR XfXxijDm0485nX+A57yvgJHxBbeOS9Vs9hJWBciOpZl31mea/1Ya7f/YrS6Bzas6 FSkroDQDMjEZ2JNrEfU/Kkkw9rHHUEE= -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:04 2025 by rpki-client