$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/3d884570-87a9-34e5-b8d7-d777763d0b30.roa File: 3d884570-87a9-34e5-b8d7-d777763d0b30.roa (raw, json) Hash identifier: pFiZ5BCEPBoaL05mVmEIW+CoV0nBhQsuY9NO4kSJ51s= Subject key identifier: 65:C4:51:71:45:98:00:04:80:31:C2:F6:2A:DE:B1:2F:DD:49:61:2A Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B5B074212B08001F10E0DC480 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/3d884570-87a9-34e5-b8d7-d777763d0b30.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 394437 IP address blocks: 72.20.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:42:12:b0:80:01:f1:0e:0d:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=61c35a64-d361-47ca-a350-647d1f04720f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:4a:5a:a8:5a:b9:4a:1f:22:77:1c:76:90: 0a:fa:7d:e7:6f:bc:21:39:71:08:72:d1:6d:8f:c3: 23:23:36:f5:6a:b2:f5:0e:ba:15:48:b1:5b:38:7b: e4:34:0f:69:91:83:80:8c:ec:49:f2:4f:be:f5:a6: a1:fa:ec:b7:06:2c:4c:da:69:65:18:9f:b2:e4:90: a9:68:72:e0:fc:12:df:5e:a0:1a:61:22:d3:9b:6c: 8d:43:c4:7d:ab:4b:61:ab:a3:cd:e6:2b:a0:a6:d0: ec:74:57:9b:27:95:34:63:c2:e8:de:8f:64:60:d9: f6:e8:96:d6:ce:5f:0d:c6:d5:b2:ab:f8:76:a3:42: 73:f6:87:6e:d3:a4:39:8e:e8:41:2f:ff:79:a2:3b: 10:40:3a:4f:4e:67:39:c8:bc:7c:69:37:45:cb:c2: 61:73:b8:57:3b:ba:02:b2:46:4c:a1:d3:0c:7c:46: b2:40:e5:f4:d4:04:e5:87:58:96:db:dd:d2:9e:f3: 44:6c:b3:42:d2:27:89:e7:f7:c6:b7:24:1d:b4:63: 1c:fd:28:55:37:af:90:8f:55:81:f8:32:10:da:92: 3b:bf:04:c2:1d:8e:92:67:f7:3f:35:6c:b1:97:59: 30:9c:4e:a4:c3:db:87:b1:26:73:85:f2:08:92:53: 78:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C4:51:71:45:98:00:04:80:31:C2:F6:2A:DE:B1:2F:DD:49:61:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/3d884570-87a9-34e5-b8d7-d777763d0b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4f:24:90:c7:62:57:02:15:7e:6f:f0:67:d8:e3:78:1f:28: f8:c5:62:67:e3:3a:8d:d2:0d:0a:2c:ef:ce:17:60:2e:90:1e: aa:57:1c:0d:2d:62:7a:64:dc:58:d7:00:9a:b4:3c:73:27:dc: 86:e9:92:70:55:9b:0e:95:e2:c8:80:60:dc:6c:69:ed:1e:23: c8:3c:a9:e2:ee:cf:b5:77:69:01:5e:19:36:e0:0d:ef:a8:7c: bd:5e:3c:f1:bc:66:3f:d1:5f:c4:8c:b0:9c:85:64:57:b8:0b: 56:49:34:9c:f6:f6:50:a2:7b:64:c3:6d:66:59:e2:6f:5d:6b: 14:b7:48:02:5b:4b:c5:6e:6b:d1:bb:e0:6c:15:a5:3a:e5:1c: f4:89:82:61:70:7d:a2:d0:20:9d:a5:42:71:1a:21:97:c8:f1: 8f:bc:4f:82:97:56:a1:bf:3b:e4:ea:8a:eb:8b:d6:9c:9d:23: a3:b7:ff:fd:ba:e5:d4:65:95:77:10:63:ee:08:e6:cf:48:d3: 15:ca:22:c7:50:65:d3:65:d2:19:28:f5:84:85:0a:c8:93:56: 65:eb:3f:84:91:2f:79:c0:6d:3a:72:7a:5d:69:79:1b:bf:31: 10:54:f8:d1:dd:c1:19:d0:45:b6:b6:61:15:9c:b5:1a:01:91: 4a:48:69:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0ISsIAB8Q4NxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NjFjMzVhNjQtZDM2MS00N2NhLWEzNTAtNjQ3ZDFmMDQ3MjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuopKWqhauUofInccdpAK+n3nb7whOXEIctFt j8MjIzb1arL1DroVSLFbOHvkNA9pkYOAjOxJ8k++9aah+uy3BixM2mllGJ+y5JCp aHLg/BLfXqAaYSLTm2yNQ8R9q0thq6PN5iugptDsdFebJ5U0Y8Lo3o9kYNn26JbW zl8NxtWyq/h2o0Jz9odu06Q5juhBL/95ojsQQDpPTmc5yLx8aTdFy8Jhc7hXO7oC skZModMMfEayQOX01ATlh1iW293SnvNEbLNC0ieJ5/fGtyQdtGMc/ShVN6+Qj1WB +DIQ2pI7vwTCHY6SZ/c/NWyxl1kwnE6kw9uHsSZzhfIIklN4ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXEUXFFmAAEgDHC9iresS/dSWEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvM2Q4ODQ1NzAtODdhOS0z NGU1LWI4ZDctZDc3Nzc2M2QwYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9PJJDHYlcCFX5v8GfY43gfKPjFYmfjOo3SDQos784XYC6QHqpXHA0t Ynpk3FjXAJq0PHMn3IbpknBVmw6V4siAYNxsae0eI8g8qeLuz7V3aQFeGTbgDe+o fL1ePPG8Zj/RX8SMsJyFZFe4C1ZJNJz29lCie2TDbWZZ4m9daxS3SAJbS8Vua9G7 4GwVpTrlHPSJgmFwfaLQIJ2lQnEaIZfI8Y+8T4KXVqG/O+TqiuuL1pydI6O3//26 5dRllXcQY+4I5s9I0xXKIsdQZdNl0hko9YSFCsiTVmXrP4SRL3nAbTpyel1peRu/ MRBU+NHdwRnQRba2YRWctRoBkUpIaeg= -----END CERTIFICATE-----Generated at Sat Oct 11 05:03:58 2025 by rpki-client