$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa File: 687e6f21-4967-30f7-9256-ae4644c10035.roa (raw, json) Hash identifier: heDw46iPMVEAirYLGOpFFfezUgQsn3rP00jRjVB3zX0= Subject key identifier: D0:A9:99:23:4D:29:54:9F:2E:9E:A4:56:D1:9E:4E:16:2C:80:D2:68 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584E35FF0ADA2F2D64A01DC45600 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 16970 IP address blocks: 72.20.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:0a:da:2f:2d:64:a0:1d:c4:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=e9ddebc3-2255-4f36-913c-988d7fbec449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:87:04:0e:f5:98:ec:c6:75:0e:79:ed:56:00: c6:8e:f1:2b:f8:b5:2e:32:51:0c:f9:0f:ef:09:5f: 58:13:a8:7b:20:3b:0e:47:d3:f5:25:b4:33:53:4c: 55:4e:03:c0:b6:70:e6:7d:9a:42:f1:0a:4e:50:37: 38:e4:fc:25:e4:d7:cc:58:f1:33:82:59:e7:54:a3: 85:bc:13:53:f0:02:a7:02:14:86:c8:fb:1f:09:b6: 29:4e:ca:13:49:41:7c:44:de:63:00:62:d5:d8:eb: 29:17:3f:0a:90:2c:8c:8a:8e:ad:a9:4d:9f:70:ae: e1:9e:ef:d4:f5:3a:54:1b:33:b7:c1:5a:34:40:2e: f7:99:9a:cf:7b:6b:c7:cf:de:88:27:71:ea:62:b7: cb:b7:bd:9f:80:4d:8f:66:9d:04:b1:0e:c7:13:28: b8:a6:90:c5:97:ef:fb:86:ab:2c:c8:33:5a:6b:79: 6b:fe:13:62:c9:97:4c:e7:3e:07:3c:5d:0e:d4:7e: 38:80:2e:55:d7:4f:a6:78:5f:d1:dd:c9:45:f5:a6: 4a:1e:81:6c:7a:5e:c3:49:c1:a8:75:35:ca:67:6f: 48:8b:4d:b5:b8:ac:43:9e:77:8b:1b:50:80:32:eb: dc:e6:1a:11:e3:78:f2:8e:c1:99:99:81:d9:c0:23: 7c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A9:99:23:4D:29:54:9F:2E:9E:A4:56:D1:9E:4E:16:2C:80:D2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a3:91:35:f7:08:4a:72:b7:52:41:aa:13:53:51:13:7b:97: 0d:ac:42:76:a8:4c:a2:c7:0b:b4:cd:21:43:8e:56:bb:b6:fe: 14:69:8d:a9:b4:89:53:3b:1d:55:fd:02:b0:60:98:f4:37:31: 47:83:a5:51:7d:f1:4b:28:75:89:6c:36:4b:2d:35:53:d8:1b: f9:42:1d:79:ee:26:22:dc:41:5e:18:74:47:22:98:7a:11:ff: 2d:a0:69:0e:4a:a0:38:c9:9c:81:c2:0a:6f:b3:eb:9b:a3:ec: 4b:25:3f:96:32:b5:3f:9b:90:02:c4:3e:99:37:04:26:23:4a: 3c:1e:8f:5b:ce:d5:1f:50:c7:30:5f:cc:73:d4:11:24:b9:a3: 28:97:6e:fc:25:9a:4d:11:a2:2a:f5:3a:ce:1e:b4:83:88:e0: 3c:e0:8f:ba:f0:45:91:c3:ba:bd:df:2f:88:35:2b:bd:8f:19: 05:f7:30:0b:78:72:4d:da:1c:4b:5d:e7:b2:23:28:02:c2:4e: bc:89:8e:fc:89:14:2c:e5:49:47:21:2a:02:cb:19:ea:b2:e5: e1:d2:94:bc:fb:60:f0:71:de:33:e1:a3:62:39:60:be:06:5f: 23:d0:63:ed:ca:0f:26:e4:01:3e:60:36:00:bf:0d:c0:62:72: 04:8d:f4:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/wraLy1koB3EVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk ZTlkZGViYzMtMjI1NS00ZjM2LTkxM2MtOTg4ZDdmYmVjNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04cEDvWY7MZ1DnntVgDGjvEr+LUuMlEM+Q/v CV9YE6h7IDsOR9P1JbQzU0xVTgPAtnDmfZpC8QpOUDc45Pwl5NfMWPEzglnnVKOF vBNT8AKnAhSGyPsfCbYpTsoTSUF8RN5jAGLV2OspFz8KkCyMio6tqU2fcK7hnu/U 9TpUGzO3wVo0QC73mZrPe2vHz96IJ3HqYrfLt72fgE2PZp0EsQ7HEyi4ppDFl+/7 hqssyDNaa3lr/hNiyZdM5z4HPF0O1H44gC5V10+meF/R3clF9aZKHoFsel7DScGo dTXKZ29Ii021uKxDnneLG1CAMuvc5hoR43jyjsGZmYHZwCN8uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCpmSNNKVSfLp6kVtGeThYsgNJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNjg3ZTZmMjEtNDk2Ny0z MGY3LTkyNTYtYWU0NjQ0YzEwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGijkTX3CEpyt1JBqhNTURN7lw2sQnaoTKLHC7TNIUOOVru2/hRpjam0 iVM7HVX9ArBgmPQ3MUeDpVF98UsodYlsNkstNVPYG/lCHXnuJiLcQV4YdEcimHoR /y2gaQ5KoDjJnIHCCm+z65uj7EslP5YytT+bkALEPpk3BCYjSjwej1vO1R9QxzBf zHPUESS5oyiXbvwlmk0Roir1Os4etIOI4Dzgj7rwRZHDur3fL4g1K72PGQX3MAt4 ck3aHEtd57IjKALCTryJjvyJFCzlSUchKgLLGeqy5eHSlLz7YPBx3jPho2I5YL4G XyPQY+3KDybkAT5gNgC/DcBicgSN9KM= -----END CERTIFICATE-----Generated at Wed Jul 15 09:21:41 2026 by rpki-client