$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa File: 561680dd-d76f-3173-b887-f57d9e178ec2.roa (raw, json) Hash identifier: 5OZe0EQYlDTKdwZ+1bfPVi7lNV7K3vj7cein0ncTVpg= Subject key identifier: 96:05:33:6D:1C:35:F4:93:B6:6F:5B:5A:C2:40:21:F5:62:EE:03:CD Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584A7A4B459BA723CCBF96B1BB20 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 394437 IP address blocks: 72.20.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:45:9b:a7:23:cc:bf:96:b1:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=0e857ac7-a54b-4833-b152-6fbf6c172900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:7e:fe:2d:23:a5:89:f6:98:c2:e9:04:47: 1c:e5:db:02:11:d7:95:b4:5a:51:bd:7b:c7:a7:8c: 0b:2e:cd:df:be:c3:03:db:a5:d6:31:69:f7:85:55: 56:d1:e4:fb:96:07:6d:77:aa:18:e8:65:37:1f:e3: 75:9c:b2:7f:ef:d2:53:71:46:f7:0a:4a:f8:be:57: ce:7e:2b:f1:88:a8:17:fc:44:4f:c3:5f:0d:f1:0d: 27:8b:34:ce:a3:06:62:d2:96:46:60:e1:15:29:54: a4:34:ff:3f:93:aa:f9:36:c8:8c:95:fc:4e:23:cf: 86:c4:6d:ef:d7:59:b3:36:e2:91:e2:12:4b:5b:89: e8:55:fd:8d:2d:c2:f5:a3:7f:ec:38:50:49:24:cd: e8:51:7a:b6:a9:df:b7:e7:da:0d:d1:d2:f1:ab:2a: 8c:69:10:40:69:fd:d8:bf:7d:9b:9a:fd:8c:f3:c9: af:24:9b:1e:bb:dd:97:f7:23:75:ff:c2:4d:dc:56: 14:fd:8a:c9:ca:f6:51:0c:30:8e:55:6b:eb:ad:81: 42:60:e1:34:4c:43:66:26:81:85:18:19:8c:0a:cd: 4c:a1:12:8f:5d:b1:ed:ba:af:d2:4e:aa:f6:04:68: e4:9b:da:d8:56:d3:2a:95:85:84:99:18:75:73:e9: 78:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:05:33:6D:1C:35:F4:93:B6:6F:5B:5A:C2:40:21:F5:62:EE:03:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:59:92:0e:25:34:bd:b8:55:ba:ed:8f:92:23:66:d1:8f:b6: eb:fe:a5:99:73:fc:5e:53:82:80:43:0b:ba:f0:b3:91:17:e8: 27:2e:88:6f:9a:3f:6e:99:80:20:d9:d7:c0:d7:26:35:ae:ed: 2b:d8:d0:e0:e6:91:9b:ba:46:27:39:e3:a1:db:57:bc:ea:49: 80:47:e3:dc:b9:fe:af:54:32:65:45:e2:62:9c:a0:94:dd:08: 9f:9b:be:2a:8f:3e:9d:2d:9c:25:6d:8e:11:9f:f5:75:ee:fc: 63:38:ea:67:b0:d2:cd:fd:c5:84:0b:18:d2:96:a9:c5:fb:eb: 87:9b:94:11:43:a8:33:bb:ea:39:86:42:81:7a:86:fa:61:fa: 31:d8:a7:ff:71:76:f6:e1:37:00:f0:37:8e:ed:18:f6:4d:ab: 2e:4c:57:46:b9:0d:83:98:30:2e:45:2a:7a:de:60:e9:09:1a: 0b:cc:04:33:56:c8:2a:e4:ee:b3:5a:f0:03:d3:6d:f1:e6:2c: 44:c3:e0:78:a0:29:13:77:fe:24:e2:3c:78:78:a8:c2:ec:4f: 70:1e:e2:49:47:33:4f:05:d0:42:a3:81:36:4e:60:b9:5d:06: 62:f1:a1:df:88:4e:97:5d:31:c0:12:ab:6c:31:f0:ac:05:d8: 02:b4:1d:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0WbpyPMv5axuyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MGU4NTdhYzctYTU0Yi00ODMzLWIxNTItNmZiZjZjMTcyOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb9+/i0jpYn2mMLpBEcc5dsCEdeVtFpRvXvH p4wLLs3fvsMD26XWMWn3hVVW0eT7lgdtd6oY6GU3H+N1nLJ/79JTcUb3Ckr4vlfO fivxiKgX/ERPw18N8Q0nizTOowZi0pZGYOEVKVSkNP8/k6r5NsiMlfxOI8+GxG3v 11mzNuKR4hJLW4noVf2NLcL1o3/sOFBJJM3oUXq2qd+359oN0dLxqyqMaRBAaf3Y v32bmv2M88mvJJseu92X9yN1/8JN3FYU/YrJyvZRDDCOVWvrrYFCYOE0TENmJoGF GBmMCs1MoRKPXbHtuq/STqr2BGjkm9rYVtMqlYWEmRh1c+l4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYFM20cNfSTtm9bWsJAIfVi7gPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNTYxNjgwZGQtZDc2Zi0z MTczLWI4ODctZjU3ZDllMTc4ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVZkg4lNL24Vbrtj5IjZtGPtuv+pZlz/F5TgoBDC7rws5EX6CcuiG+a P26ZgCDZ18DXJjWu7SvY0ODmkZu6Ric546HbV7zqSYBH49y5/q9UMmVF4mKcoJTd CJ+bviqPPp0tnCVtjhGf9XXu/GM46mew0s39xYQLGNKWqcX764eblBFDqDO76jmG QoF6hvph+jHYp/9xdvbhNwDwN47tGPZNqy5MV0a5DYOYMC5FKnreYOkJGgvMBDNW yCrk7rNa8APTbfHmLETD4HigKRN3/iTiPHh4qMLsT3Ae4klHM08F0EKjgTZOYLld BmLxod+ITpddMcASq2wx8KwF2AK0HQA= -----END CERTIFICATE-----Generated at Wed Aug 6 05:14:36 2025 by rpki-client