$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa File: 8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa (raw, json) Hash identifier: DgugcXu/OKxYC2u+bihCHCHgA9MkmL74L5QfkKcuDdg= Subject key identifier: CE:4B:5E:E3:02:9F:60:1B:13:C2:2F:45:E8:2A:91:74:ED:9D:90:43 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584F1467A21A8287B9974B8EBE80 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 22362 IP address blocks: 72.20.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a2:1a:82:87:b9:97:4b:8e:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=8d7843e8-b6b4-4f1f-bfd1-43f64497b089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:2b:bc:4b:94:c4:c1:41:99:28:c1:f4:04: 9e:15:14:16:9c:ea:1c:b0:1a:f8:cf:62:eb:82:35: fa:df:cd:b0:22:50:61:00:ca:b5:49:99:2a:b5:85: 17:f2:64:aa:bc:d7:a6:a6:17:d9:33:6c:2b:2c:b7: 11:96:9c:63:aa:be:90:5e:47:8a:57:ae:1d:81:8d: b1:e5:d7:38:e2:f8:ce:29:00:a7:59:c3:28:6a:91: ae:9a:8e:1f:11:c5:d7:7a:2d:11:31:16:10:02:8f: 49:7d:ff:cc:cd:e9:d9:04:de:3b:d2:0f:7d:07:a0: 1a:e0:12:90:7d:97:a4:47:4e:0d:93:ff:07:87:75: 1a:1f:9e:3f:46:de:ee:27:4c:51:69:1f:3f:78:c7: 5b:5d:60:48:55:e6:5a:a1:f9:b4:33:77:cb:d0:62: 8a:d0:01:39:49:e1:18:3c:76:1f:ce:7f:08:8c:87: 52:c8:79:40:19:48:ab:1d:41:c6:65:81:30:9e:a4: 63:cd:f7:be:df:69:9c:04:4e:5a:2b:65:76:ac:c4: be:89:a5:ae:af:36:d3:a3:1f:7d:ca:85:4c:74:00: 78:ab:d6:aa:92:94:52:a1:a6:2c:a5:a9:5c:69:82: 7d:94:fe:12:68:5f:c7:b3:58:38:31:bd:ce:e4:dc: 8d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4B:5E:E3:02:9F:60:1B:13:C2:2F:45:E8:2A:91:74:ED:9D:90:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:66:0e:6f:68:c0:3e:69:32:43:7e:ed:e2:3f:a5:74:16:a4: 8a:61:11:fc:de:a7:83:01:0c:c7:0c:e2:1a:df:75:8c:38:3c: ac:01:69:04:cc:bd:74:43:c3:d2:9f:4c:dc:cf:27:6f:22:5f: 9e:7e:e3:85:92:1d:31:29:f4:41:72:2b:8a:00:25:18:a1:1a: 6a:19:17:63:0a:ca:0a:14:e9:71:f4:2e:67:a9:6c:84:2d:9d: 24:be:be:25:07:a8:c3:6c:e3:2e:27:44:f9:c3:30:01:2d:42: b0:28:c9:07:e5:b3:85:0d:ff:55:b3:1b:a1:e3:a1:ee:19:23: a8:63:90:d7:d1:04:a2:ed:75:60:41:16:1f:71:2b:4a:22:cf: f1:44:07:3d:2d:0d:60:86:ac:12:7c:88:42:61:90:c6:14:32: c6:d0:c6:a7:05:c1:f2:85:a3:ee:5c:ae:22:8b:80:93:c6:b9: e6:9e:3c:13:7d:17:d2:ea:3d:8f:67:94:ab:15:a9:24:dc:ad: d4:88:90:f1:ad:2c:8e:28:c1:2c:f9:38:f8:b8:a5:6e:d6:9d: e4:25:00:5d:c9:28:61:1a:86:74:aa:be:2b:a7:cd:e4:49:b3: d1:04:23:68:db:95:7e:57:ff:d8:ea:d4:53:b2:89:27:6a:62: 2f:a9:b0:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6Iagoe5l0uOvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk OGQ3ODQzZTgtYjZiNC00ZjFmLWJmZDEtNDNmNjQ0OTdiMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKErvEuUxMFBmSjB9ASeFRQWnOocsBr4z2Lr gjX6382wIlBhAMq1SZkqtYUX8mSqvNemphfZM2wrLLcRlpxjqr6QXkeKV64dgY2x 5dc44vjOKQCnWcMoapGumo4fEcXXei0RMRYQAo9Jff/MzenZBN470g99B6Aa4BKQ fZekR04Nk/8Hh3UaH54/Rt7uJ0xRaR8/eMdbXWBIVeZaofm0M3fL0GKK0AE5SeEY PHYfzn8IjIdSyHlAGUirHUHGZYEwnqRjzfe+32mcBE5aK2V2rMS+iaWurzbTox99 yoVMdAB4q9aqkpRSoaYspalcaYJ9lP4SaF/Hs1g4Mb3O5NyN9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5LXuMCn2AbE8IvRegqkXTtnZBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvODQ2NmM4YzQtMWVhNy0z YmM2LWI1YzMtNTZlZDZjMTYzZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdmDm9owD5pMkN+7eI/pXQWpIphEfzep4MBDMcM4hrfdYw4PKwBaQTM vXRDw9KfTNzPJ28iX55+44WSHTEp9EFyK4oAJRihGmoZF2MKygoU6XH0LmepbIQt nSS+viUHqMNs4y4nRPnDMAEtQrAoyQfls4UN/1WzG6Hjoe4ZI6hjkNfRBKLtdWBB Fh9xK0oiz/FEBz0tDWCGrBJ8iEJhkMYUMsbQxqcFwfKFo+5criKLgJPGueaePBN9 F9LqPY9nlKsVqSTcrdSIkPGtLI4owSz5OPi4pW7WneQlAF3JKGEahnSqviunzeRJ s9EEI2jblX5X/9jq1FOyiSdqYi+psMk= -----END CERTIFICATE-----Generated at Sat Oct 10 23:09:02 2026 by rpki-client