$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/24f1c8ff-1818-30be-99fe-9c8f30228477.roa File: 24f1c8ff-1818-30be-99fe-9c8f30228477.roa (raw, json) Hash identifier: No0MRHMXAYhd+ZF4Bo4itOQTiTxuISHVpKuB35DmnW4= Subject key identifier: E8:56:AA:99:B3:48:9E:07:1F:31:6F:CA:D0:17:B4:FE:B6:7B:9E:2D Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584DD625A9140D01BD559C2B4180 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/24f1c8ff-1818-30be-99fe-9c8f30228477.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 1403 IP address blocks: 72.12.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:a9:14:0d:01:bd:55:9c:2b:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=02961a84-49dc-4cfb-b9b6-7dcd1142a082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8a:ef:f9:f6:d0:02:ee:5c:31:45:6f:4e:67: e7:92:df:b4:e4:d5:44:37:d1:84:02:7c:08:10:e1: 36:6e:9d:21:a4:e2:8c:2d:37:db:54:10:09:6b:87: fe:c3:eb:02:59:6e:1d:c7:57:b9:6d:c4:61:35:db: f9:f8:4d:cf:c4:d0:38:92:49:63:22:94:3c:13:6d: 79:26:0a:9d:04:0e:02:56:bb:f4:e3:4b:61:0f:b2: 56:62:12:3b:5f:d9:48:dc:b0:a0:c8:15:52:ec:df: 66:83:47:7c:fd:52:dd:49:d5:aa:bb:4a:27:68:03: d6:c8:8a:a9:d4:7a:84:d3:6d:f9:68:c0:c2:b6:5b: 65:2c:e1:5d:e5:b4:15:95:53:56:f2:1a:84:54:87: 1c:c3:fc:c7:ee:5c:95:ab:e4:6b:1e:02:72:88:36: 48:09:9f:e2:12:d5:65:b6:27:d2:7c:84:3e:b1:99: a1:ec:25:eb:71:f6:9d:21:9d:83:bc:21:8a:4d:d1: 97:c0:36:62:c9:93:0c:a4:d5:4a:dd:7a:fd:ea:b1: 0d:47:45:b1:2e:2d:30:ed:2e:e6:d5:7f:1f:9e:e2: 93:91:02:cd:78:42:c4:b3:2b:69:4e:bd:96:d0:d6: 36:15:30:3d:dc:1f:3d:9b:e0:d9:5f:f3:e0:c8:61: a1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:56:AA:99:B3:48:9E:07:1F:31:6F:CA:D0:17:B4:FE:B6:7B:9E:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/24f1c8ff-1818-30be-99fe-9c8f30228477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 72.12.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8f:3f:c8:52:6d:2e:93:e1:64:c3:82:f3:ef:98:27:15:e4: 4b:20:30:d2:96:da:07:f3:8c:6f:69:2f:59:89:f7:12:e5:0d: e4:42:23:31:fd:6e:ff:bf:32:d2:0d:e1:d3:63:f8:c7:2c:2d: 7e:9d:59:79:55:68:14:fd:dc:83:f7:0b:6f:0f:2d:1b:02:f8: 4e:b6:72:e4:9c:4d:66:dd:ce:81:c6:97:c4:37:cf:96:c6:19: 37:84:71:db:f4:80:d4:d3:b4:a0:fa:eb:53:d8:24:9e:f6:b7: 9d:07:3d:3a:99:19:82:fb:90:12:ec:21:b4:09:4c:d1:cd:de: c2:63:79:1e:74:10:30:93:8f:77:53:ff:9d:b9:ab:41:a7:79: c3:f4:05:6d:09:02:13:89:88:77:33:10:6c:07:76:7f:65:7b: a7:af:28:57:a3:89:32:b8:f2:dc:fc:f3:0f:87:1a:c1:03:e5: e0:c6:be:d7:bc:50:2e:7b:33:00:64:5c:76:16:f7:05:c3:f1: d0:52:25:61:2c:87:15:ee:89:9b:b9:89:23:9f:15:c9:50:4e: f3:fe:2f:1e:43:af:ec:bd:0b:e9:bd:22:9b:50:68:ee:6c:6b: 49:82:96:4f:55:6d:ae:a0:b4:04:46:05:7d:26:78:32:ec:d6: da:f6:25:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJakUDQG9VZwrQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk MDI5NjFhODQtNDlkYy00Y2ZiLWI5YjYtN2RjZDExNDJhMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmorv+fbQAu5cMUVvTmfnkt+05NVEN9GEAnwI EOE2bp0hpOKMLTfbVBAJa4f+w+sCWW4dx1e5bcRhNdv5+E3PxNA4kkljIpQ8E215 JgqdBA4CVrv040thD7JWYhI7X9lI3LCgyBVS7N9mg0d8/VLdSdWqu0onaAPWyIqp 1HqE0235aMDCtltlLOFd5bQVlVNW8hqEVIccw/zH7lyVq+RrHgJyiDZICZ/iEtVl tifSfIQ+sZmh7CXrcfadIZ2DvCGKTdGXwDZiyZMMpNVK3Xr96rENR0WxLi0w7S7m 1X8fnuKTkQLNeELEsytpTr2W0NY2FTA93B89m+DZX/PgyGGhYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhWqpmzSJ4HHzFvytAXtP62e54tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvMjRmMWM4ZmYtMTgxOC0z MGJlLTk5ZmUtOWM4ZjMwMjI4NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKPP8hSbS6T4WTDgvPvmCcV5EsgMNKW2gfzjG9pL1mJ9xLlDeRCIzH9 bv+/MtIN4dNj+McsLX6dWXlVaBT93IP3C28PLRsC+E62cuScTWbdzoHGl8Q3z5bG GTeEcdv0gNTTtKD661PYJJ72t50HPTqZGYL7kBLsIbQJTNHN3sJjeR50EDCTj3dT /525q0GnecP0BW0JAhOJiHczEGwHdn9le6evKFejiTK48tz88w+HGsED5eDGvte8 UC57MwBkXHYW9wXD8dBSJWEshxXuiZu5iSOfFclQTvP+Lx5Dr+y9C+m9IptQaO5s a0mClk9Vba6gtARGBX0meDLs1tr2JQY= -----END CERTIFICATE-----Generated at Sat Jun 13 19:39:14 2026 by rpki-client