$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa File: 35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa (raw, json) Hash identifier: YtdIFRJyixBjQ++ewhg6DhK34j7VOF4TvGwLIGxg5zI= Subject key identifier: 5A:B3:4D:FC:20:2C:12:A3:1C:C1:08:92:44:04:43:77:B4:6E:B7:92 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B5B07426488A5644A7941F9C0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 394437 IP address blocks: 72.20.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:42:64:88:a5:64:4a:79:41:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=1b2291a1-94d4-41da-a9c6-f32252f77f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:73:48:32:16:30:ba:c0:1f:ad:a1:12:63: 66:e5:0c:2c:c8:99:ee:95:4e:98:7f:52:08:a3:8f: ab:2a:b1:2b:a1:04:ea:ee:92:f8:bb:48:54:3b:0a: 9d:be:8d:51:e9:e5:c1:f9:7d:69:3f:df:e9:bc:15: 5b:10:1f:05:97:ea:eb:4d:72:c3:e3:a7:77:22:ae: da:fd:ad:d6:df:e5:9a:00:0a:7d:23:77:2e:e2:fe: 45:d4:79:b2:bd:e7:65:7d:91:50:9b:98:fe:e8:a1: 15:9c:c7:d4:28:2b:bd:14:71:dd:90:be:d6:d6:ae: df:40:f4:b7:e1:a8:8d:c4:d7:04:34:bf:69:89:4c: 66:c2:3f:b6:30:31:11:de:37:e5:06:05:91:be:d1: 9c:12:38:fa:f0:06:e9:20:cd:79:1f:37:38:71:84: 74:2b:cf:e6:9c:b6:0f:20:18:14:cf:07:da:f7:b6: ff:a7:6c:8a:4c:3b:fa:d5:0b:c8:36:10:46:8b:a2: ac:09:37:7c:ec:62:16:f2:52:54:e8:05:dc:97:78: ba:0d:9a:0a:b3:3c:aa:a3:36:91:96:1d:c5:56:31: 4f:9f:c6:7d:dd:41:ab:76:58:ac:81:7c:4e:d4:ec: 35:af:91:da:97:b2:d3:72:eb:03:3d:50:7f:d1:e2: 58:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B3:4D:FC:20:2C:12:A3:1C:C1:08:92:44:04:43:77:B4:6E:B7:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:db:5b:61:0b:ef:7d:89:38:5f:2d:34:af:6f:6f:32:dc:49: 5c:be:31:08:77:b1:dc:ea:06:64:37:76:40:43:bc:55:6f:84: 61:7a:8b:6e:3f:30:93:3e:71:97:c7:f1:87:b0:ea:4d:3c:f9: c7:e2:e8:77:6c:b9:b7:58:fe:3c:c8:9d:7f:ba:20:56:47:91: 73:79:0d:65:d1:94:aa:52:6c:5a:37:05:94:d0:0a:ca:cf:6b: dd:8d:31:98:e5:03:8c:c1:c3:e9:47:87:32:ef:1e:08:e0:f8: c6:88:8b:40:eb:4a:cd:60:fb:ab:06:ee:09:c7:71:f7:7d:b2: ea:bf:f3:72:1b:a0:c2:ea:20:c1:61:d6:bd:e4:d8:bf:1b:28: 94:90:39:e0:83:a9:35:00:95:49:3b:c9:74:a9:79:c6:5a:60: 6a:f4:a9:96:5a:a2:01:8a:ea:92:90:e3:bd:43:37:63:58:93: 00:1f:bc:b6:0f:dc:7f:43:69:6c:86:03:08:d4:95:bd:28:68: da:ab:94:1f:ff:a0:bd:ce:0f:65:a6:04:96:97:0e:d7:a2:2e: 24:30:9b:15:7f:e0:13:43:81:56:1a:d8:44:c7:33:05:c1:c6: 00:f8:16:7a:94:ea:2f:cf:9e:b7:df:2f:f3:7c:0b:c8:64:d0: 47:5e:8c:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0JkiKVkSnlB+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MWIyMjkxYTEtOTRkNC00MWRhLWE5YzYtZjMyMjUyZjc3ZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLFzSDIWMLrAH62hEmNm5QwsyJnulU6Yf1II o4+rKrEroQTq7pL4u0hUOwqdvo1R6eXB+X1pP9/pvBVbEB8Fl+rrTXLD46d3Iq7a /a3W3+WaAAp9I3cu4v5F1HmyvedlfZFQm5j+6KEVnMfUKCu9FHHdkL7W1q7fQPS3 4aiNxNcENL9piUxmwj+2MDER3jflBgWRvtGcEjj68AbpIM15Hzc4cYR0K8/mnLYP IBgUzwfa97b/p2yKTDv61QvINhBGi6KsCTd87GIW8lJU6AXcl3i6DZoKszyqozaR lh3FVjFPn8Z93UGrdlisgXxO1Ow1r5Hal7LTcusDPVB/0eJYWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqzTfwgLBKjHMEIkkQEQ3e0breSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMzUzOTZiYzQtMGVkMC0z YjI2LThmZTUtYzI4ODNiYWYwOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXbW2EL732JOF8tNK9vbzLcSVy+MQh3sdzqBmQ3dkBDvFVvhGF6i24/ MJM+cZfH8Yew6k08+cfi6HdsubdY/jzInX+6IFZHkXN5DWXRlKpSbFo3BZTQCsrP a92NMZjlA4zBw+lHhzLvHgjg+MaIi0DrSs1g+6sG7gnHcfd9suq/83IboMLqIMFh 1r3k2L8bKJSQOeCDqTUAlUk7yXSpecZaYGr0qZZaogGK6pKQ471DN2NYkwAfvLYP 3H9DaWyGAwjUlb0oaNqrlB//oL3OD2WmBJaXDteiLiQwmxV/4BNDgVYa2ETHMwXB xgD4FnqU6i/PnrffL/N8C8hk0EdejIw= -----END CERTIFICATE-----Generated at Sat Oct 11 05:09:28 2025 by rpki-client