$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa File: 561680dd-d76f-3173-b887-f57d9e178ec2.roa (raw, json) Hash identifier: pYu8xToUnHLj9gQvUcYBYnnLLoZS4yNxqo4YlPwAygA= Subject key identifier: 25:82:06:53:94:97:6B:38:6B:83:A2:6A:C6:78:3C:72:CF:1B:D4:86 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584DFBD5E7E5156E2F84456D3C00 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 394437 IP address blocks: 72.20.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:e7:e5:15:6e:2f:84:45:6d:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=00b3b7df-ed5a-4ed2-aeee-64941f4d9ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:c7:e7:30:9a:ea:46:db:8e:17:42:0c:5c: 69:d5:94:ba:39:c6:6c:1f:31:51:ca:9a:19:46:09: c5:f5:87:21:f3:7a:fa:b4:49:1a:58:cb:c8:9a:a3: 17:98:74:a0:0f:17:bb:dc:8d:ac:9a:9d:37:16:b9: ab:25:94:c9:3b:71:1c:03:59:42:09:61:86:6d:31: 07:ea:05:35:cd:9b:2a:c0:8e:1d:5e:03:7f:48:a0: ff:ab:44:bd:93:6e:f5:e4:de:08:fa:f7:ef:bb:1e: dc:78:77:04:f3:27:f0:1b:ee:f9:4d:23:fa:f4:4c: 35:c5:6d:05:2e:77:7b:b7:6f:6f:70:96:85:07:df: 9a:16:88:73:13:a8:4a:95:ae:bb:96:1f:54:16:e6: a5:6b:5a:5b:bd:85:5a:91:e1:67:7c:6c:8e:20:ad: a0:aa:61:e5:26:e6:58:11:fc:f9:fe:09:c5:96:48: f6:44:82:a6:9f:8f:11:ce:78:9b:67:9a:e3:c2:e3: 7d:c7:92:5f:c8:68:a1:1a:a7:37:ce:03:44:bb:62: 01:53:2f:b7:d1:fb:00:32:d4:17:93:8c:5a:48:61: 06:b6:23:9e:58:5c:5f:a1:54:f9:f5:5d:36:76:1a: 8b:9d:0d:c1:55:11:44:04:40:f9:e2:1f:49:33:be: f0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:82:06:53:94:97:6B:38:6B:83:A2:6A:C6:78:3C:72:CF:1B:D4:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b6:b6:64:12:5a:dd:2b:4a:16:c2:11:80:73:f5:8d:21:af: 5f:0f:82:b0:98:c3:fd:9f:9a:2f:52:f8:d2:df:df:88:67:a3: 2e:52:e0:ba:42:d4:01:4c:55:d1:aa:b1:0d:ae:d9:e2:3d:76: 19:58:4c:38:f6:ae:27:8a:fc:aa:3d:1c:91:36:7e:bb:b5:e5: af:c6:ba:bc:8b:55:97:5f:44:79:d5:55:6b:ba:6a:46:b1:aa: c3:4d:52:7d:c4:b2:ef:ba:aa:97:85:ab:19:1b:7d:12:57:e2: d6:d8:67:a1:b7:8a:a1:6f:61:0d:fe:b4:80:e5:12:b7:7d:45: 54:31:73:14:2a:5e:42:9d:7c:76:17:e2:4a:fe:0b:26:71:4b: 91:36:cd:0b:4a:84:65:2e:8f:92:f8:f7:f0:55:92:bd:f6:c1: 3f:e8:da:e2:08:db:6f:18:42:4c:2a:98:60:69:5e:c1:34:97: 7b:67:0a:be:e3:5c:28:8c:92:e6:c2:32:51:9e:f8:20:4f:0f: 2c:4b:26:e7:a8:5c:14:5f:07:f7:2c:6b:b4:5f:5e:7c:15:eb: 1b:21:1c:80:d3:00:96:83:d5:c0:d3:7e:49:3a:86:50:f5:a7: 85:a6:7e:65:8f:8c:13:53:ac:50:ab:1a:29:9d:d9:44:72:80: a1:19:25:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371eflFW4vhEVtPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk MDBiM2I3ZGYtZWQ1YS00ZWQyLWFlZWUtNjQ5NDFmNGQ5ZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5jH5zCa6kbbjhdCDFxp1ZS6OcZsHzFRypoZ RgnF9Ych83r6tEkaWMvImqMXmHSgDxe73I2smp03FrmrJZTJO3EcA1lCCWGGbTEH 6gU1zZsqwI4dXgN/SKD/q0S9k2715N4I+vfvux7ceHcE8yfwG+75TSP69Ew1xW0F Lnd7t29vcJaFB9+aFohzE6hKla67lh9UFuala1pbvYVakeFnfGyOIK2gqmHlJuZY Efz5/gnFlkj2RIKmn48RznibZ5rjwuN9x5JfyGihGqc3zgNEu2IBUy+30fsAMtQX k4xaSGEGtiOeWFxfoVT59V02dhqLnQ3BVRFEBED54h9JM77w+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWCBlOUl2s4a4OiasZ4PHLPG9SGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNTYxNjgwZGQtZDc2Zi0z MTczLWI4ODctZjU3ZDllMTc4ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu2tmQSWt0rShbCEYBz9Y0hr18PgrCYw/2fmi9S+NLf34hnoy5S4LpC 1AFMVdGqsQ2u2eI9dhlYTDj2rieK/Ko9HJE2fru15a/GuryLVZdfRHnVVWu6akax qsNNUn3Esu+6qpeFqxkbfRJX4tbYZ6G3iqFvYQ3+tIDlErd9RVQxcxQqXkKdfHYX 4kr+CyZxS5E2zQtKhGUuj5L49/BVkr32wT/o2uII228YQkwqmGBpXsE0l3tnCr7j XCiMkubCMlGe+CBPDyxLJueoXBRfB/csa7RfXnwV6xshHIDTAJaD1cDTfkk6hlD1 p4WmfmWPjBNTrFCrGimd2URygKEZJfE= -----END CERTIFICATE-----Generated at Sun Jun 14 02:36:05 2026 by rpki-client