$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa File: 1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa (raw, json) Hash identifier: +CdESP7zGBF7bQ9PzBqd1/jko0ew7h9U44wpukRCRFs= Subject key identifier: 7C:2B:11:F5:42:66:BC:9A:5B:66:23:21:84:05:39:A9:92:89:0D:77 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B5B074C36D3B0CB189044F380 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 394437 IP address blocks: 72.20.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:4c:36:d3:b0:cb:18:90:44:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=b51cf40f-53bf-4b4e-ac53-e733fcd7e1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:15:d3:c2:c3:84:27:26:40:48:25:31:de:34: b7:69:fd:56:f2:5e:87:a7:bb:fb:ef:db:07:11:d7: ab:f0:91:ca:ae:f2:39:57:25:d8:7e:f1:e8:04:4d: 2a:c3:c0:b5:79:6d:de:a5:8f:3c:fc:bf:ee:65:6e: 49:d3:d2:cc:fb:ea:bd:bc:d8:a7:1c:0b:38:ce:80: ef:ed:65:12:dc:64:f2:da:2e:4c:14:bc:cd:31:44: 4c:42:7a:b0:75:4c:d9:26:32:0d:9c:c1:7a:ee:03: 7d:41:cb:d9:71:d4:7d:12:73:76:7b:1d:fe:03:95: a8:f8:35:28:51:9f:a5:24:92:a5:01:40:57:3c:87: 30:07:61:7e:10:a3:01:27:e6:0e:cd:0b:a8:51:57: 4a:ea:88:ae:6b:5e:78:a9:0e:35:e8:22:d8:01:36: f9:a3:6b:32:c5:fa:04:30:38:37:bf:c3:13:51:63: 98:69:6e:9e:d9:7d:eb:10:68:d7:a9:f4:0c:c1:3e: bd:fd:2a:1d:be:50:83:36:b3:cd:ca:d8:e6:7f:f0: b5:6a:54:e2:2b:26:8f:85:21:67:b2:fd:02:aa:48: d7:fd:79:c6:ad:07:5e:0d:dd:9b:b8:41:13:d0:c2: 2c:69:77:36:a6:e7:ab:c5:8b:36:5c:5e:41:a3:6e: 6b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2B:11:F5:42:66:BC:9A:5B:66:23:21:84:05:39:A9:92:89:0D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1728381e-dbb1-3796-870d-8a3cdc93d9ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:19:dd:35:c0:f3:43:72:56:e1:5d:c8:10:f3:0b:e9:9c:4f: d2:dc:59:45:11:c5:1c:ec:99:da:58:f4:01:4f:c6:c1:e0:84: 8d:42:cc:3b:c5:b9:21:bb:2b:ee:e7:f1:80:fb:99:30:74:5d: c1:8a:32:86:10:5c:85:c8:b2:bf:10:78:7b:f4:17:a5:1b:72: e5:b6:88:c5:8b:bb:75:1f:12:6b:37:4c:88:da:80:4b:5a:04: 8c:db:d4:0b:d8:1b:48:0e:f3:df:89:17:f0:4b:1d:47:d5:84: b3:b3:e5:42:dc:d7:b8:b6:ce:76:26:ef:b6:e7:e6:1e:a3:88: a9:87:d4:1b:de:e1:9b:00:50:b4:7c:d7:d1:31:1b:be:59:2f: 36:98:14:61:e0:66:a7:ba:a1:4a:6e:72:54:6c:3d:61:89:bf: 15:bb:c8:86:e4:ff:c0:c1:b4:dc:37:f4:8c:41:a4:12:d0:2c: 95:d4:ea:18:6b:40:28:bc:e7:9b:9a:76:dc:9d:c6:c1:5a:2f: e8:b2:39:95:ee:46:ef:68:83:b0:41:e9:85:ef:85:c4:3f:86: 80:10:07:b3:d8:c2:f5:be:d7:9f:d1:9f:75:a7:8a:6c:5b:d2: 04:3a:92:f2:59:d8:9d:34:61:31:6e:8d:d5:70:91:0b:3c:9e: 6f:24:69:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0w207DLGJBE84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YjUxY2Y0MGYtNTNiZi00YjRlLWFjNTMtZTczM2ZjZDdlMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RXTwsOEJyZASCUx3jS3af1W8l6Hp7v779sH Eder8JHKrvI5VyXYfvHoBE0qw8C1eW3epY88/L/uZW5J09LM++q9vNinHAs4zoDv 7WUS3GTy2i5MFLzNMURMQnqwdUzZJjINnMF67gN9QcvZcdR9EnN2ex3+A5Wo+DUo UZ+lJJKlAUBXPIcwB2F+EKMBJ+YOzQuoUVdK6oiua154qQ416CLYATb5o2syxfoE MDg3v8MTUWOYaW6e2X3rEGjXqfQMwT69/SodvlCDNrPNytjmf/C1alTiKyaPhSFn sv0CqkjX/XnGrQdeDd2buEET0MIsaXc2puerxYs2XF5Bo25rQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwrEfVCZryaW2YjIYQFOamSiQ13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMTcyODM4MWUtZGJiMS0z Nzk2LTg3MGQtOGEzY2RjOTNkOWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEZ3TXA80NyVuFdyBDzC+mcT9LcWUURxRzsmdpY9AFPxsHghI1CzDvF uSG7K+7n8YD7mTB0XcGKMoYQXIXIsr8QeHv0F6UbcuW2iMWLu3UfEms3TIjagEta BIzb1AvYG0gO89+JF/BLHUfVhLOz5ULc17i2znYm77bn5h6jiKmH1Bve4ZsAULR8 19ExG75ZLzaYFGHgZqe6oUpuclRsPWGJvxW7yIbk/8DBtNw39IxBpBLQLJXU6hhr QCi855uadtydxsFaL+iyOZXuRu9og7BB6YXvhcQ/hoAQB7PYwvW+15/Rn3Wnimxb 0gQ6kvJZ2J00YTFujdVwkQs8nm8kaR0= -----END CERTIFICATE-----Generated at Sat Oct 11 05:09:29 2025 by rpki-client