$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa File: a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa (raw, json) Hash identifier: 4MIPbO8PS4grQkBSD0nt9HV+RdREVy3tTZ3cJ274p6E= Subject key identifier: 8F:D3:07:14:DC:5D:41:E5:E3:54:1F:5E:90:B5:8E:87:6D:4A:46:50 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584BAA97A33A120DD542B9C92CC0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 394437 IP address blocks: 72.20.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a3:3a:12:0d:d5:42:b9:c9:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=979169aa-1924-4541-affc-fef92ac0f773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d3:6f:7d:c1:de:90:f7:41:22:11:99:e4:56: da:d0:05:94:12:9a:95:5b:1b:1b:ac:e0:29:dc:59: 17:a4:a7:13:51:19:f2:dc:b9:25:8a:8f:46:77:dd: 5f:73:5f:7c:0c:9e:a2:71:12:95:02:ce:f8:ac:47: a2:41:af:db:74:24:01:bf:82:29:f8:5e:b3:f3:cf: 65:a6:26:28:df:5c:22:9e:de:63:c4:ae:52:fe:8b: 81:35:c7:fa:65:07:c6:73:76:e9:df:86:7e:91:79: 0f:cf:35:be:9d:0f:08:04:c1:6b:1b:53:03:c6:5b: c8:f8:77:e8:03:69:97:88:e5:80:c3:3a:7c:5e:4c: d2:a7:1d:0b:49:b5:72:17:bb:91:7a:f8:8f:88:bc: 71:27:35:11:9a:dd:21:77:c1:42:ca:53:6c:57:b5: 1e:a3:56:61:ee:bb:1b:95:cf:12:72:d9:59:ee:a1: 47:1f:b4:de:1b:14:54:cb:90:3e:b6:b0:3f:a4:9d: f1:54:40:a9:7f:bf:7c:5c:62:b8:da:98:97:b7:70: 40:5d:56:78:36:15:65:0b:be:b4:10:84:f6:0d:dd: 18:b7:cc:f7:d2:8a:f1:64:02:be:d2:dc:07:0d:56: 9e:f6:33:5b:93:be:4c:82:93:a3:85:19:12:97:b1: 4e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D3:07:14:DC:5D:41:E5:E3:54:1F:5E:90:B5:8E:87:6D:4A:46:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:f9:96:d6:2b:b7:5f:76:9f:fb:44:82:56:d0:0f:bb:8e:d1: f3:db:e7:6f:15:64:e9:0c:c6:2a:58:e6:98:7c:62:1e:5f:d6: 51:e6:fd:58:de:a3:92:a4:26:c1:ae:93:37:b7:8d:3d:02:61: 7c:f4:19:6b:e8:a9:db:d3:86:91:2a:9d:a0:61:86:2a:16:c4: a8:ef:83:db:70:c5:c4:5e:0b:6d:17:cf:9a:7e:e2:f0:35:51: a6:2a:b7:f0:7b:d4:00:2b:50:d2:61:31:60:31:54:a6:b9:67: 24:cd:2d:44:8f:c0:ee:d9:91:b3:b1:53:e8:69:c5:9d:93:77: 1f:e3:46:84:8e:db:46:9c:1c:51:0d:c2:b1:f7:06:91:01:cc: 06:18:92:5b:42:25:f6:80:04:6a:0e:48:e5:f6:fe:d9:cb:f2: 6c:28:c6:6e:4d:ce:68:79:3c:d3:df:2a:8a:1a:cb:0f:e0:b2: 55:b8:c1:1f:d2:6a:c2:87:10:db:2d:52:bf:a7:49:68:e0:23: 06:48:1a:f6:fd:1b:cc:30:73:72:0a:d4:dc:0c:57:94:21:d2: dc:63:0f:88:54:1e:85:69:c3:0c:d5:ee:4e:82:ab:6c:f7:ac: 89:67:99:43:a2:5a:7e:f0:1f:e1:ae:4e:81:02:24:95:c3:8b: b0:86:4d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6M6Eg3VQrnJLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk OTc5MTY5YWEtMTkyNC00NTQxLWFmZmMtZmVmOTJhYzBmNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NNvfcHekPdBIhGZ5Fba0AWUEpqVWxsbrOAp 3FkXpKcTURny3Lklio9Gd91fc198DJ6icRKVAs74rEeiQa/bdCQBv4Ip+F6z889l piYo31wint5jxK5S/ouBNcf6ZQfGc3bp34Z+kXkPzzW+nQ8IBMFrG1MDxlvI+Hfo A2mXiOWAwzp8XkzSpx0LSbVyF7uReviPiLxxJzURmt0hd8FCylNsV7Ueo1Zh7rsb lc8SctlZ7qFHH7TeGxRUy5A+trA/pJ3xVECpf798XGK42piXt3BAXVZ4NhVlC760 EIT2Dd0Yt8z30orxZAK+0twHDVae9jNbk75MgpOjhRkSl7FO5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/TBxTcXUHl41QfXpC1jodtSkZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvYTg3N2EwYzktODRhNC0z MThhLTk2NjMtYmE0MjNiNmE1ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANL5ltYrt192n/tEglbQD7uO0fPb528VZOkMxipY5ph8Yh5f1lHm/Vje o5KkJsGukze3jT0CYXz0GWvoqdvThpEqnaBhhioWxKjvg9twxcReC20Xz5p+4vA1 UaYqt/B71AArUNJhMWAxVKa5ZyTNLUSPwO7ZkbOxU+hpxZ2Tdx/jRoSO20acHFEN wrH3BpEBzAYYkltCJfaABGoOSOX2/tnL8mwoxm5Nzmh5PNPfKooayw/gslW4wR/S asKHENstUr+nSWjgIwZIGvb9G8wwc3IK1NwMV5Qh0txjD4hUHoVpwwzV7k6Cq2z3 rIlnmUOiWn7wH+GuToECJJXDi7CGTdY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:47 2025 by rpki-client