$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa File: 2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa (raw, json) Hash identifier: mfspL1WKDIT1zlLCyqD6nEkcFzQkIbPEBuSqbVdr+w4= Subject key identifier: 4F:AF:DE:7E:E3:B2:90:4F:07:1F:1F:3E:59:4C:00:C1:04:02:49:27 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B5B0742003E90234A0AF82340 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 394437 IP address blocks: 72.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:42:00:3e:90:23:4a:0a:f8:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=4921daed-d417-4b2d-aa4f-aaf85006ffea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:41:23:9b:87:32:25:8e:fc:77:c7:e7:f1: cd:4c:fd:02:17:66:6e:7a:07:52:e8:c3:35:a7:13: 5e:0a:b1:de:29:68:e1:e7:c2:90:02:ec:1b:d0:0f: 61:92:a6:46:bf:fe:64:fb:05:37:23:37:44:83:dd: ee:b2:48:25:51:82:7d:8b:ea:bf:db:30:16:e4:3b: db:9a:8d:07:23:56:46:8d:d7:45:91:f6:70:bc:cd: 64:e9:61:04:91:ed:6a:65:39:4e:92:a2:91:b0:ca: 51:85:77:a4:e3:e9:1b:d5:be:82:ba:95:89:21:81: 71:b7:e0:39:84:11:10:c4:5e:f8:df:0b:91:4c:8f: 6c:88:36:a7:1d:0a:5b:84:30:73:25:9b:11:87:6d: 36:36:a2:15:a3:70:63:de:cd:8f:ef:84:bb:0c:7b: c8:8d:55:60:53:2b:03:96:22:b7:a8:53:7b:16:1f: 37:b9:b2:19:a8:54:f1:91:2f:b0:72:56:30:64:87: 66:9c:43:e6:c7:68:a1:20:78:2c:0c:5a:d6:f3:84: 56:df:ad:2c:96:e9:92:77:79:45:55:83:97:88:3b: 4a:b7:cd:95:15:91:80:0e:8b:75:8a:25:0e:53:e9: 8c:24:59:29:d1:3b:c2:52:75:d0:7f:96:c8:92:fa: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AF:DE:7E:E3:B2:90:4F:07:1F:1F:3E:59:4C:00:C1:04:02:49:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:60:f1:6c:18:37:89:6c:38:c8:de:3b:8c:a1:74:65:9a:91: 24:c6:2f:80:be:4f:38:f9:e4:32:cc:d1:76:2f:a8:45:5e:d1: f5:9f:8f:a4:93:fd:61:cf:e6:c2:43:75:31:f8:be:8d:01:7f: 49:17:fc:b5:a5:09:85:4a:bf:80:f5:e0:d8:83:58:d8:5e:08: 38:6b:38:38:af:f0:23:7c:65:4c:8d:f6:3e:24:07:0b:29:72: de:04:f7:57:b0:9c:3f:00:f1:1e:7c:66:52:69:dc:8d:9a:49: ec:c5:59:48:ad:b4:a8:38:34:61:ee:59:8e:ad:91:73:56:eb: d6:fb:7b:95:b1:3c:27:ff:08:e5:d1:d2:24:11:bf:93:a8:44: ff:85:e4:1e:3c:2c:3d:1a:a6:42:96:19:82:61:96:f1:93:e2: 22:af:fa:e9:a2:b3:7d:9b:3f:42:fd:1f:3f:d1:c6:2d:48:34: d3:ec:56:38:8e:8d:98:d7:f2:4f:45:03:84:67:ed:c2:ab:51: 12:3a:dc:53:25:44:ef:85:bc:53:a6:62:37:ce:df:50:52:8e: b1:89:93:c8:83:8c:fd:df:da:0b:b6:b9:43:f3:6f:93:74:b4: 05:fa:36:89:de:33:92:45:cf:b1:6d:04:78:d5:f3:1b:31:de: 6b:08:a9:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0IAPpAjSgr4I0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NDkyMWRhZWQtZDQxNy00YjJkLWFhNGYtYWFmODUwMDZmZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLFBI5uHMiWO/HfH5/HNTP0CF2ZuegdS6MM1 pxNeCrHeKWjh58KQAuwb0A9hkqZGv/5k+wU3IzdEg93uskglUYJ9i+q/2zAW5Dvb mo0HI1ZGjddFkfZwvM1k6WEEke1qZTlOkqKRsMpRhXek4+kb1b6CupWJIYFxt+A5 hBEQxF743wuRTI9siDanHQpbhDBzJZsRh202NqIVo3Bj3s2P74S7DHvIjVVgUysD liK3qFN7Fh83ubIZqFTxkS+wclYwZIdmnEPmx2ihIHgsDFrW84RW360slumSd3lF VYOXiDtKt82VFZGADot1iiUOU+mMJFkp0TvCUnXQf5bIkvpOgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+v3n7jspBPBx8fPllMAMEEAkknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMjMyMGRmMGEtYmExYS0z ODBjLWJlMGYtZDhlM2M3Zjk3M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtg8WwYN4lsOMjeO4yhdGWakSTGL4C+Tzj55DLM0XYvqEVe0fWfj6ST /WHP5sJDdTH4vo0Bf0kX/LWlCYVKv4D14NiDWNheCDhrODiv8CN8ZUyN9j4kBwsp ct4E91ewnD8A8R58ZlJp3I2aSezFWUittKg4NGHuWY6tkXNW69b7e5WxPCf/COXR 0iQRv5OoRP+F5B48LD0apkKWGYJhlvGT4iKv+umis32bP0L9Hz/Rxi1INNPsVjiO jZjX8k9FA4Rn7cKrURI63FMlRO+FvFOmYjfO31BSjrGJk8iDjP3f2gu2uUPzb5N0 tAX6NoneM5JFz7FtBHjV8xsx3msIqbg= -----END CERTIFICATE-----Generated at Sat Oct 11 05:09:28 2025 by rpki-client