$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa File: 7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa (raw, json) Hash identifier: PTXPDjVbku5A/hlOKzvkcC97cD56MPEZyDG+n6pqo8c= Subject key identifier: 32:8B:2E:C0:64:B1:7B:73:26:B6:43:4C:8A:66:D6:97:35:46:A0:E6 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584EA798DD0FFA25C739ECA0E5C0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 394437 IP address blocks: 72.20.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:dd:0f:fa:25:c7:39:ec:a0:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=06bfaa9d-1e2f-4a1e-9f87-8befe5378c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:df:9b:ac:7b:2a:d1:9e:57:c6:c0:4e:56:47: 8d:d2:e2:b9:31:c5:0b:37:3d:a2:5c:1c:7b:0e:62: d5:20:83:6e:7a:5c:35:b4:8c:4c:64:24:3e:aa:34: aa:06:07:59:c6:40:67:bc:dc:50:a4:d7:c9:b2:79: 4c:67:8d:03:c5:e6:ec:01:ba:fa:f4:00:d8:8d:bd: ca:c0:0a:ce:fa:d1:d5:0b:d0:7f:6f:8d:02:4d:1c: 3f:17:f4:29:11:0b:40:dc:8c:9f:00:cf:ef:f8:a9: 6d:47:93:4d:5f:94:0e:35:cd:4f:15:8f:9e:3e:d4: 8d:b7:97:f8:df:1b:56:67:64:6c:3a:e3:33:2b:e4: 2d:7b:e6:f5:a2:6b:33:74:23:94:3a:6e:a6:ba:0c: 81:d4:da:7d:31:d1:a8:4b:eb:b0:b0:a8:d9:fa:e5: 30:e6:71:cf:b6:ca:cc:cf:94:39:dd:85:3b:d1:aa: 08:73:d5:d0:c5:67:9e:7b:d4:9c:07:35:24:6a:91: 01:a0:a0:ff:a9:dc:b8:c6:27:7b:93:3a:e7:44:99: c0:ad:d3:eb:14:e7:7a:98:1b:b2:3e:8c:53:db:0b: 19:94:bd:72:5f:87:14:53:e2:e5:ba:8a:4b:a5:82: 6d:ef:9f:c7:77:46:41:bd:b6:eb:03:4d:fb:b3:98: 82:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8B:2E:C0:64:B1:7B:73:26:B6:43:4C:8A:66:D6:97:35:46:A0:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:3d:52:55:f4:2e:9f:a0:f5:a0:ff:76:7e:88:d2:4d:ff:6e: 88:5c:11:dc:d8:d0:a3:92:66:32:ac:49:74:27:ac:cf:88:5f: e1:a7:72:4c:ac:6f:d0:7e:f6:9f:5b:a0:d0:f4:0c:cf:bb:32: 59:0e:94:09:40:91:0e:d7:07:33:c5:c8:a7:b4:a8:c2:78:9f: d8:d1:c0:57:90:9c:7d:51:ab:be:2e:04:d6:02:e0:9e:52:07: c8:f1:e7:e0:05:e4:39:50:9c:5c:26:3b:a6:3e:2c:ab:ca:0c: 43:b7:87:45:70:ed:98:2b:bc:48:9a:01:9d:13:6d:8e:73:cf: 63:dc:61:9e:89:c5:31:ea:54:50:fe:c5:35:d8:f0:5a:b6:30: 6a:3b:7f:b0:77:ac:42:f5:d3:0e:67:e6:b0:7d:4e:22:67:70: 3f:f2:a0:32:c8:9e:7a:46:bc:3a:7b:72:97:7a:6e:06:e9:0d: 92:5b:3b:a0:b2:da:1b:d7:63:c9:5b:f7:72:20:8e:a9:fb:09: 6b:de:26:2a:1b:ea:33:8f:52:f9:e7:8c:17:ba:d2:8e:c4:0f: ca:22:8a:a8:95:52:c3:b6:6e:4e:c7:75:27:c2:cf:0a:dd:67: ab:22:8b:d8:c0:4d:01:53:6c:a3:78:4d:28:9a:cd:24:fd:71: 3b:f6:82:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmN0P+iXHOeyg5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDZiZmFhOWQtMWUyZi00YTFlLTlmODctOGJlZmU1Mzc4YzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N+brHsq0Z5XxsBOVkeN0uK5McULNz2iXBx7 DmLVIINuelw1tIxMZCQ+qjSqBgdZxkBnvNxQpNfJsnlMZ40DxebsAbr69ADYjb3K wArO+tHVC9B/b40CTRw/F/QpEQtA3IyfAM/v+KltR5NNX5QONc1PFY+ePtSNt5f4 3xtWZ2RsOuMzK+Qte+b1omszdCOUOm6mugyB1Np9MdGoS+uwsKjZ+uUw5nHPtsrM z5Q53YU70aoIc9XQxWeee9ScBzUkapEBoKD/qdy4xid7kzrnRJnArdPrFOd6mBuy PoxT2wsZlL1yX4cUU+LluopLpYJt75/Hd0ZBvbbrA037s5iCgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKLLsBksXtzJrZDTIpm1pc1RqDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvN2VjYjhlNWQtYjhmMy0z OTIyLWE1MjYtZGUzNzFlY2Y0ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMU9UlX0Lp+g9aD/dn6I0k3/bohcEdzY0KOSZjKsSXQnrM+IX+Gnckys b9B+9p9boND0DM+7MlkOlAlAkQ7XBzPFyKe0qMJ4n9jRwFeQnH1Rq74uBNYC4J5S B8jx5+AF5DlQnFwmO6Y+LKvKDEO3h0Vw7ZgrvEiaAZ0TbY5zz2PcYZ6JxTHqVFD+ xTXY8Fq2MGo7f7B3rEL10w5n5rB9TiJncD/yoDLInnpGvDp7cpd6bgbpDZJbO6Cy 2hvXY8lb93Igjqn7CWveJiob6jOPUvnnjBe60o7ED8oiiqiVUsO2bk7HdSfCzwrd Z6sii9jATQFTbKN4TSiazST9cTv2gqk= -----END CERTIFICATE-----Generated at Wed Jul 29 11:43:26 2026 by rpki-client