$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa File: 67ed9f3f-8163-30ed-adda-fa473db6d09a.roa (raw, json) Hash identifier: LaR1k8ODgInsyNv4+/8QDvqM0OEmZgYVKYthXp2Bjtk= Subject key identifier: E5:3D:3E:DB:75:63:D4:9B:7C:04:5C:37:91:FE:22:49:54:7E:CE:64 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B5B0742A0B916CBF0FC4C1100 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 394437 IP address blocks: 72.20.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:42:a0:b9:16:cb:f0:fc:4c:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=9fd639d0-2b90-414e-90c2-92c4bb4d68cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:29:4c:12:41:a3:0b:fa:47:66:f8:b0:88: 66:56:8e:3f:95:97:32:b0:f7:0a:ed:7e:bc:c4:2d: a7:c0:30:e7:b3:ba:b4:fb:96:ea:48:f9:86:67:57: 3c:4c:ce:ab:82:b2:54:83:8a:cf:dd:a9:1c:0d:15: 01:bd:a1:43:23:bf:a6:6a:b9:0a:e6:d3:14:73:28: 59:c9:0c:7c:6e:24:ed:59:b0:35:fd:1d:9f:f6:01: 9d:64:1e:9e:ed:a9:2a:b4:d0:93:88:d9:02:b0:c6: 0d:0d:98:71:aa:9e:59:26:1d:c9:e3:b3:0b:1c:64: 31:55:9d:23:a2:ae:91:0a:c0:77:73:9a:f2:7f:9e: f6:00:82:9c:01:be:06:57:2a:7a:08:4c:02:8a:50: 61:0f:81:8f:02:65:b6:26:74:e0:53:98:7a:df:28: e5:85:cd:d1:72:66:89:79:ed:3e:f9:84:86:4c:71: 26:3e:c1:ae:0a:1c:d5:ff:61:6c:43:c3:e2:ec:7f: 6d:3d:d4:c8:68:b5:53:96:80:77:c6:a0:5a:a1:ee: 04:5b:5f:3f:66:52:d9:71:dc:8e:2f:7e:e1:6e:61: 57:0c:c7:e4:ff:3b:c1:2c:d3:82:b4:a1:1f:83:0c: db:07:29:22:7c:d2:7e:73:6e:bc:7a:50:0a:c0:f5: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3D:3E:DB:75:63:D4:9B:7C:04:5C:37:91:FE:22:49:54:7E:CE:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/67ed9f3f-8163-30ed-adda-fa473db6d09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:36:81:8d:45:df:cd:6a:94:c4:e3:e6:ac:8c:9b:11:ea:1e: 18:28:ef:2f:27:7d:8c:15:27:57:a2:2c:7b:4a:0a:49:5e:99: 58:3a:e4:9d:e3:e6:6e:92:74:a2:03:5a:fa:6f:e0:23:9f:96: 04:a6:d4:14:3a:f2:bd:7a:c1:36:2a:57:8e:7b:c1:5d:14:05: ef:67:2c:11:03:b8:77:78:22:ea:ce:a3:0e:7e:a0:8e:df:d0: 60:68:65:c1:27:36:b2:2f:13:12:bd:d0:e0:7f:6f:79:0c:02: 97:81:0e:a1:d4:9b:bd:47:44:d8:4e:31:0d:ba:bb:0e:2c:c7: 2d:f7:89:b2:b0:d1:47:9b:c8:26:60:fd:ed:57:c4:32:8b:5a: bc:30:2c:ef:a8:95:5c:dc:40:c8:da:0a:21:aa:32:31:81:f0: 25:a4:e1:20:c2:51:e4:5e:a9:df:86:31:89:cc:88:8e:ed:51: ed:63:42:a3:05:e4:b6:64:54:f7:e7:51:95:2b:ea:71:aa:0e: 24:45:37:e4:71:9a:ce:00:a5:84:cd:cf:bc:a0:dd:81:cc:34: dc:bc:86:c2:8c:64:70:42:50:52:cf:77:31:dd:ce:06:c3:88: 4f:78:95:c1:87:cf:24:40:54:d3:4c:18:6f:1e:01:80:d1:05: 60:55:67:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0KguRbL8PxMEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OWZkNjM5ZDAtMmI5MC00MTRlLTkwYzItOTJjNGJiNGQ2OGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlQpTBJBowv6R2b4sIhmVo4/lZcysPcK7X68 xC2nwDDns7q0+5bqSPmGZ1c8TM6rgrJUg4rP3akcDRUBvaFDI7+markK5tMUcyhZ yQx8biTtWbA1/R2f9gGdZB6e7akqtNCTiNkCsMYNDZhxqp5ZJh3J47MLHGQxVZ0j oq6RCsB3c5ryf572AIKcAb4GVyp6CEwCilBhD4GPAmW2JnTgU5h63yjlhc3RcmaJ ee0++YSGTHEmPsGuChzV/2FsQ8Pi7H9tPdTIaLVTloB3xqBaoe4EW18/ZlLZcdyO L37hbmFXDMfk/zvBLNOCtKEfgwzbBykifNJ+c268elAKwPWSYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOU9Ptt1Y9SbfARcN5H+IklUfs5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNjdlZDlmM2YtODE2My0z MGVkLWFkZGEtZmE0NzNkYjZkMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU2gY1F381qlMTj5qyMmxHqHhgo7y8nfYwVJ1eiLHtKCklemVg65J3j 5m6SdKIDWvpv4COflgSm1BQ68r16wTYqV457wV0UBe9nLBEDuHd4IurOow5+oI7f 0GBoZcEnNrIvExK90OB/b3kMApeBDqHUm71HRNhOMQ26uw4sxy33ibKw0UebyCZg /e1XxDKLWrwwLO+olVzcQMjaCiGqMjGB8CWk4SDCUeReqd+GMYnMiI7tUe1jQqMF 5LZkVPfnUZUr6nGqDiRFN+Rxms4ApYTNz7yg3YHMNNy8hsKMZHBCUFLPdzHdzgbD iE94lcGHzyRAVNNMGG8eAYDRBWBVZ40= -----END CERTIFICATE-----Generated at Sat Oct 11 05:13:57 2025 by rpki-client