$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa File: 7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa (raw, json) Hash identifier: 6gyzuVBlXKe6mQ4ROcdLpj5UyAqRHSa7E/wOXBU7/fw= Subject key identifier: 65:D8:83:98:07:D2:DE:A3:85:09:6A:8F:E0:78:95:B3:8E:61:7D:BA Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B5B0742ECA1A40A4A86408F80 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 394437 IP address blocks: 72.20.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:42:ec:a1:a4:0a:4a:86:40:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=04e3afbb-a388-4ef5-b899-7b267d2d482f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:98:e9:85:92:c3:31:6c:16:87:07:98:fb:6d: d6:1e:47:02:8d:a4:dd:8d:d4:c4:c1:08:e4:16:a5: d0:aa:2a:fe:00:2f:60:61:4f:c9:2f:8f:ee:f1:f9: e3:26:98:a4:ab:50:5c:ec:14:7f:bc:30:e2:13:3d: b3:d1:ba:97:aa:72:bd:1d:0d:e1:15:70:58:29:fb: fa:a1:2d:71:2a:ee:c9:30:e7:5b:a5:b3:8c:ce:3d: 62:54:aa:a7:dd:51:eb:f5:e2:07:03:5a:13:5b:28: dd:55:bf:cb:98:e2:8b:37:1a:a5:b0:ff:6f:2c:47: fe:3e:18:53:88:0c:3e:ef:52:78:96:55:d1:b1:2c: 7e:a4:bc:59:bc:64:ca:8c:c0:6d:bd:c2:56:e6:ca: f3:e0:47:da:fa:06:94:c1:23:4d:db:33:5f:e6:ec: d7:bb:51:31:21:e5:f4:8b:d9:c8:8d:12:30:88:54: 78:d2:a4:19:df:87:df:1f:af:3d:ad:6b:e3:3d:be: 08:25:a6:15:f5:e2:cd:fd:7c:44:25:b8:d1:8c:77: 58:26:14:7a:f9:62:be:61:52:ca:0b:72:8c:4b:26: 86:5c:00:21:67:a7:19:44:4b:9b:d7:ab:8c:87:69: 88:f5:db:db:ef:fb:fe:5b:81:38:1c:33:a3:ed:b1: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D8:83:98:07:D2:DE:A3:85:09:6A:8F:E0:78:95:B3:8E:61:7D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d0:27:03:09:4a:b9:e8:d6:22:4e:ef:03:57:f2:32:a0:4b: 07:f1:23:0a:69:26:38:4c:c2:af:55:ca:9b:ba:9b:4d:11:d2: 2f:9d:bc:27:52:a6:71:50:4e:d0:8d:64:80:18:5a:79:5e:15: ae:be:77:33:47:99:97:8f:95:e2:ef:24:c1:c1:81:43:fb:54: ad:d8:f0:ce:d0:a4:7a:8a:88:df:45:70:4c:65:51:c6:97:3b: 34:fb:ac:76:92:c9:4b:da:0a:2c:ad:a0:25:5a:0d:17:b8:95: dd:27:0d:67:c6:d9:51:91:2c:01:16:0c:5e:e9:fe:c8:c5:4e: ef:f0:38:8e:ef:42:3f:63:23:ee:77:aa:bc:36:00:53:68:5c: 9d:2f:f6:9b:55:8c:0f:b6:f0:2f:e6:93:52:4c:03:cd:b9:e3: 6b:0b:ec:a0:50:a5:89:10:be:32:f0:03:c1:8d:40:63:00:c5: 0f:02:c5:0e:01:39:6e:71:d2:52:e0:9f:26:0d:98:68:cb:78: 06:a7:b4:08:5a:1a:f6:0a:6b:2a:db:bc:4c:b9:eb:5a:aa:33: 1a:84:5d:33:4a:3d:49:7e:4b:f4:aa:8d:0c:d7:6f:d3:10:33: ef:79:65:12:58:7c:73:40:2a:ce:6f:77:6d:e5:c7:08:4f:3e: e7:3f:0f:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0LsoaQKSoZAj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MDRlM2FmYmItYTM4OC00ZWY1LWI4OTktN2IyNjdkMmQ0ODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZjphZLDMWwWhweY+23WHkcCjaTdjdTEwQjk FqXQqir+AC9gYU/JL4/u8fnjJpikq1Bc7BR/vDDiEz2z0bqXqnK9HQ3hFXBYKfv6 oS1xKu7JMOdbpbOMzj1iVKqn3VHr9eIHA1oTWyjdVb/LmOKLNxqlsP9vLEf+PhhT iAw+71J4llXRsSx+pLxZvGTKjMBtvcJW5srz4Efa+gaUwSNN2zNf5uzXu1ExIeX0 i9nIjRIwiFR40qQZ34ffH689rWvjPb4IJaYV9eLN/XxEJbjRjHdYJhR6+WK+YVLK C3KMSyaGXAAhZ6cZREub16uMh2mI9dvb7/v+W4E4HDOj7bFeNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXYg5gH0t6jhQlqj+B4lbOOYX26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvN2VjYjhlNWQtYjhmMy0z OTIyLWE1MjYtZGUzNzFlY2Y0ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITQJwMJSrno1iJO7wNX8jKgSwfxIwppJjhMwq9Vypu6m00R0i+dvCdS pnFQTtCNZIAYWnleFa6+dzNHmZePleLvJMHBgUP7VK3Y8M7QpHqKiN9FcExlUcaX OzT7rHaSyUvaCiytoCVaDRe4ld0nDWfG2VGRLAEWDF7p/sjFTu/wOI7vQj9jI+53 qrw2AFNoXJ0v9ptVjA+28C/mk1JMA82542sL7KBQpYkQvjLwA8GNQGMAxQ8CxQ4B OW5x0lLgnyYNmGjLeAantAhaGvYKayrbvEy561qqMxqEXTNKPUl+S/SqjQzXb9MQ M+95ZRJYfHNAKs5vd23lxwhPPuc/D7o= -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:10 2025 by rpki-client