$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa File: 2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa (raw, json) Hash identifier: 5s9vA2UvBqPpzC5R6vegnXMZrw4NJGuczt7TNKsjH+8= Subject key identifier: 96:93:15:BA:05:70:6A:4A:C9:EA:74:02:1B:74:BA:D4:4A:95:32:B3 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B5B0742B4C0040C3558875440 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 394437 IP address blocks: 72.20.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:42:b4:c0:04:0c:35:58:87:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=aca2deab-f941-4b86-8fbf-a6b07cbd11db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:d3:b9:cd:e5:17:05:77:68:bd:3c:cd:60: 25:c6:0c:fd:ae:c4:b3:32:0d:4d:7d:2a:fc:7d:cb: 2b:a3:b2:99:9f:f7:d8:63:cf:c8:8e:27:e1:bd:e3: 5f:7b:40:06:d5:be:f0:9a:42:3b:64:85:3e:ff:30: 09:71:8e:0c:3d:23:70:8d:04:86:fd:9d:2e:69:1a: f7:b7:81:c5:2d:62:8e:ad:fe:09:7f:f9:e1:9a:73: 08:4f:77:6c:c9:26:26:3a:8a:fe:f9:dd:6e:59:3a: d3:11:2d:81:a4:7e:31:23:03:80:a0:69:a5:73:c2: 80:d4:9c:85:c0:29:69:2e:39:ab:77:25:c9:c0:f2: 2b:64:b6:aa:c6:10:b8:63:4a:7d:13:87:4b:36:b8: b9:cd:f5:22:ca:1e:12:5e:91:e3:d0:4a:8b:f6:72: 21:aa:e3:80:cc:8b:0c:7d:54:c4:38:41:84:df:43: e6:3c:13:1d:cc:d2:33:f4:93:18:8f:71:4c:64:63: 9c:9f:71:f9:ae:48:05:db:65:0d:d2:97:02:5a:32: 4f:b2:e5:cb:7a:a4:e9:ac:14:e1:4e:e4:d7:fc:b9: 31:ee:aa:f2:b5:b3:00:68:16:2b:03:69:11:c2:fb: d7:e8:dc:d1:6c:38:18:24:eb:d3:5b:13:93:1c:34: 0d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:93:15:BA:05:70:6A:4A:C9:EA:74:02:1B:74:BA:D4:4A:95:32:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:81:04:61:42:81:91:f2:aa:72:d4:2b:39:13:b8:fa:94:96: 27:6e:e6:6b:68:a9:01:e4:c0:69:35:3a:32:b5:7b:7d:45:d7: db:e1:37:23:81:4b:d6:21:23:e7:61:e6:72:d3:28:c5:c2:fd: aa:93:7c:9c:28:30:d3:62:f2:0c:17:5b:27:c7:b7:db:1c:bf: ed:52:15:bd:70:7f:1e:27:bd:dc:46:b3:02:c0:f0:60:94:a8: d4:a0:81:d8:ab:4d:08:43:19:bf:62:b9:1e:3b:37:a5:45:8e: 74:a9:6e:61:d4:ee:fd:8d:cb:6e:15:ca:94:ca:5a:44:7f:4a: 19:1e:15:94:53:cf:cf:75:02:60:6e:0c:9c:6f:cb:53:1f:45: 35:ac:82:ac:20:30:f3:11:fd:84:d0:25:81:62:f6:92:ef:8f: 7d:5c:be:d2:cb:52:25:95:89:a2:d5:5f:66:cd:5a:ee:9b:d8: 82:5f:5c:6d:6c:82:08:b0:c8:ba:19:3f:bc:bb:c2:24:94:aa: b4:74:f2:52:8c:d6:d3:99:f8:1c:fc:be:0c:61:66:a1:d6:bc: 54:8d:29:cb:04:4e:57:6b:df:fc:80:89:7b:b1:cd:58:7d:04: 6c:ba:bb:75:8b:3d:21:5b:cc:cb:6a:11:03:03:c7:6c:78:25: a8:d6:f1:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0K0wAQMNViHVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YWNhMmRlYWItZjk0MS00Yjg2LThmYmYtYTZiMDdjYmQxMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3PTuc3lFwV3aL08zWAlxgz9rsSzMg1NfSr8 fcsro7KZn/fYY8/IjifhveNfe0AG1b7wmkI7ZIU+/zAJcY4MPSNwjQSG/Z0uaRr3 t4HFLWKOrf4Jf/nhmnMIT3dsySYmOor++d1uWTrTES2BpH4xIwOAoGmlc8KA1JyF wClpLjmrdyXJwPIrZLaqxhC4Y0p9E4dLNri5zfUiyh4SXpHj0EqL9nIhquOAzIsM fVTEOEGE30PmPBMdzNIz9JMYj3FMZGOcn3H5rkgF22UN0pcCWjJPsuXLeqTprBTh TuTX/Lkx7qrytbMAaBYrA2kRwvvX6NzRbDgYJOvTWxOTHDQNbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaTFboFcGpKyep0Aht0utRKlTKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMmUwMDQwNGMtNmYwZS0z OTZjLWFkM2EtYzAwYWU3OGY3ZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaBBGFCgZHyqnLUKzkTuPqUlidu5mtoqQHkwGk1OjK1e31F19vhNyOB S9YhI+dh5nLTKMXC/aqTfJwoMNNi8gwXWyfHt9scv+1SFb1wfx4nvdxGswLA8GCU qNSggdirTQhDGb9iuR47N6VFjnSpbmHU7v2Ny24VypTKWkR/ShkeFZRTz891AmBu DJxvy1MfRTWsgqwgMPMR/YTQJYFi9pLvj31cvtLLUiWViaLVX2bNWu6b2IJfXG1s ggiwyLoZP7y7wiSUqrR08lKM1tOZ+Bz8vgxhZqHWvFSNKcsETldr3/yAiXuxzVh9 BGy6u3WLPSFbzMtqEQMDx2x4JajW8dU= -----END CERTIFICATE-----Generated at Sat Oct 11 05:03:59 2025 by rpki-client