$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa File: 9b381475-2f37-3a66-a109-346ba5355fa0.roa (raw, json) Hash identifier: 7cUxaJWr4pp2Cr2jijvS4R0m9vnkQDSdLRMQAAeFUyk= Subject key identifier: 1D:C7:76:B2:F5:D2:66:C4:9D:A9:09:D0:CD:F0:AD:2B:05:C7:A6:9D Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584F30528166B14046F531564CC0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 394437 IP address blocks: 72.20.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:81:66:b1:40:46:f5:31:56:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=a262b53e-c180-4583-9944-4a8dad9d82f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:52:6f:d3:b8:84:13:50:90:71:2f:20:7c: b6:4e:51:4d:d4:91:1b:c8:88:c3:f5:b7:d3:50:7b: a8:13:09:ff:ba:2d:cd:e2:78:eb:ff:90:7d:68:5c: 84:c3:98:fa:f0:1b:04:b9:d9:bd:8e:51:03:dd:11: f7:f6:97:00:db:fb:40:76:40:43:4c:9f:e7:fc:0a: 5d:08:ef:b1:77:36:40:8a:4d:b6:e4:f5:53:0e:ae: 1d:71:70:5b:cc:fb:95:13:41:65:15:47:88:be:1f: b0:ee:63:bf:62:6a:13:08:37:56:43:50:a2:89:3c: 0f:74:f4:ea:85:ab:c2:2d:35:47:0d:5e:6b:03:de: 80:fe:a1:c7:54:cd:cc:1d:36:97:9d:cf:93:42:50: 02:b6:d3:47:35:92:4d:de:14:ae:53:50:8b:0f:ca: fc:21:44:6c:0e:77:95:b1:25:be:46:ee:11:af:da: 3c:9f:49:b4:14:39:a9:b5:c1:00:71:da:ef:47:f0: 48:ab:20:18:c9:dc:66:3c:11:25:19:75:86:d0:5d: 3b:60:91:1b:12:b7:42:84:91:a2:89:c5:7a:e7:19: bc:88:6b:87:f6:36:53:6d:1a:72:70:40:b1:16:6e: e3:3e:b1:41:52:53:3f:e0:a5:4b:af:24:d2:12:a0: b2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C7:76:B2:F5:D2:66:C4:9D:A9:09:D0:CD:F0:AD:2B:05:C7:A6:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:dc:c5:e8:88:d9:70:01:05:47:dc:0d:be:34:e3:d1:87:43: 66:fa:a7:3e:d3:5b:da:1c:8a:19:04:71:38:b6:d7:90:86:a3: ab:b0:13:52:43:58:5e:0c:35:34:fb:ec:7a:7c:82:4c:9e:b9: 9f:7b:6f:5e:90:b0:ec:e1:05:a6:40:cb:75:0c:62:7a:d8:02: 43:dc:22:c6:7c:48:e5:1e:99:00:99:c6:62:45:7b:e4:85:39: fb:5b:6b:7b:18:1b:94:ec:c5:5a:b9:13:9b:90:40:89:5b:a3: 2c:67:75:ef:85:80:d3:4f:01:03:53:a3:01:84:aa:23:4f:74: d5:8e:bf:b3:9e:a5:93:46:f1:54:ca:02:60:50:55:27:e3:08: 95:ee:d8:29:14:92:91:d5:23:94:68:c2:d9:7a:c4:7e:3b:a1: a9:07:72:61:26:41:4b:b1:69:cb:ee:2d:13:e4:7a:78:e5:63: d6:55:bc:19:73:07:db:1b:49:73:6c:51:37:48:c9:86:31:54: 96:96:bc:84:c8:2f:dc:b2:d2:0c:ae:80:a0:5a:d3:a0:5e:78: e5:08:36:05:15:f0:ac:57:76:69:8c:e0:6c:9e:ba:b1:1c:62: 04:82:c5:7b:b0:21:4e:6a:c1:8a:52:a6:3d:33:24:48:5b:95: b1:b9:94:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUoFmsUBG9TFWTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YTI2MmI1M2UtYzE4MC00NTgzLTk5NDQtNGE4ZGFkOWQ4MmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig5Sb9O4hBNQkHEvIHy2TlFN1JEbyIjD9bfT UHuoEwn/ui3N4njr/5B9aFyEw5j68BsEudm9jlED3RH39pcA2/tAdkBDTJ/n/Apd CO+xdzZAik225PVTDq4dcXBbzPuVE0FlFUeIvh+w7mO/YmoTCDdWQ1CiiTwPdPTq havCLTVHDV5rA96A/qHHVM3MHTaXnc+TQlACttNHNZJN3hSuU1CLD8r8IURsDneV sSW+Ru4Rr9o8n0m0FDmptcEAcdrvR/BIqyAYydxmPBElGXWG0F07YJEbErdChJGi icV65xm8iGuH9jZTbRpycECxFm7jPrFBUlM/4KVLryTSEqCyXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3HdrL10mbEnakJ0M3wrSsFx6adMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOWIzODE0NzUtMmYzNy0z YTY2LWExMDktMzQ2YmE1MzU1ZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXcxeiI2XABBUfcDb4049GHQ2b6pz7TW9ocihkEcTi215CGo6uwE1JD WF4MNTT77Hp8gkyeuZ97b16QsOzhBaZAy3UMYnrYAkPcIsZ8SOUemQCZxmJFe+SF Oftba3sYG5TsxVq5E5uQQIlboyxnde+FgNNPAQNTowGEqiNPdNWOv7OepZNG8VTK AmBQVSfjCJXu2CkUkpHVI5Rowtl6xH47oakHcmEmQUuxacvuLRPkenjlY9ZVvBlz B9sbSXNsUTdIyYYxVJaWvITIL9yy0gyugKBa06BeeOUINgUV8KxXdmmM4GyeurEc YgSCxXuwIU5qwYpSpj0zJEhblbG5lKE= -----END CERTIFICATE-----Generated at Sun Sep 20 19:15:37 2026 by rpki-client