$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa File: 9b381475-2f37-3a66-a109-346ba5355fa0.roa (raw, json) Hash identifier: QM3MUWpath+UnOxy/wKj3gD9ih8E4iZ/pT6+H6WQsGk= Subject key identifier: ED:73:73:11:06:02:DF:DF:8E:16:C8:FE:12:80:70:0B:23:76:2A:40 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584B0CDC1C985A835D86F7A2A690 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 394437 IP address blocks: 72.20.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:1c:98:5a:83:5d:86:f7:a2:a6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=2ab33162-7a9d-468a-b727-fe7c282e16d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d3:eb:41:07:f6:ed:04:87:da:bc:41:b8:30: 94:4d:64:92:5b:a4:eb:e9:62:13:89:20:bf:b8:b5: 91:5a:c4:33:ab:41:92:ee:de:90:6f:44:71:3d:46: 03:6e:ea:49:31:cc:8f:ad:4a:fd:ae:38:6a:5a:7e: 61:b5:32:b8:bc:14:60:03:75:c5:13:75:a1:a6:9d: 93:cf:f7:94:0c:21:68:3e:f4:fc:83:f0:d1:24:c9: 4f:3e:63:75:90:80:d6:df:24:38:ea:f7:84:ab:ab: e7:6f:58:6f:3d:c6:72:37:0e:7e:b0:c6:b5:7c:56: 97:df:54:b5:3f:9e:7e:bf:d7:ef:e7:2f:bb:fd:18: 1f:67:8c:cb:eb:3d:d0:9d:58:dc:8d:d6:cc:77:92: 42:9d:6a:a4:7b:af:d9:ea:e7:1b:6f:5b:38:05:38: e1:f4:d7:1c:e2:0a:72:58:ec:be:0f:8f:9d:f6:c1: d2:e7:3f:47:33:9a:2f:48:5a:e0:e5:7c:07:00:ca: 5b:a2:ac:aa:b4:22:9d:a5:f3:78:12:0d:06:aa:eb: a6:72:08:19:3f:e8:3b:15:ca:7d:ad:25:f4:8f:e5: 40:ce:26:f9:f0:ca:6f:be:05:c2:34:63:b4:bc:a7: 77:8e:a9:29:fc:5e:97:6d:eb:a3:73:2b:89:03:ac: 83:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:73:73:11:06:02:DF:DF:8E:16:C8:FE:12:80:70:0B:23:76:2A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a6:dd:b5:e0:d9:b8:46:f3:11:d6:ba:39:68:4f:55:ad:de: 91:97:50:1f:bd:19:6c:2d:56:4b:dc:09:98:8d:ab:fb:dd:e3: 64:a1:d4:1c:97:79:a1:55:7f:65:66:78:ea:e1:1b:38:93:0c: 57:06:bb:b0:05:fc:6c:ab:0b:59:c8:75:a4:ac:78:94:69:ee: 44:2d:51:9e:31:13:5b:64:55:4b:04:a5:f0:05:ed:10:cd:0e: 10:55:4f:9c:df:70:0e:ec:d3:a0:bc:21:10:1c:de:52:65:bc: 06:4e:2f:41:b2:d5:d6:88:d0:01:3e:d4:5a:d6:60:81:19:8c: 6f:33:fc:36:f5:e4:05:6b:51:96:6b:e0:79:cc:b7:4e:47:b8: 1b:df:7a:b5:29:6f:25:2d:3e:5a:58:96:6f:51:f4:73:15:ac: d0:20:d9:d5:f0:d9:dd:40:2d:3b:db:46:a1:b5:db:8a:80:e1: b1:4a:0e:76:ab:0e:1d:9c:68:93:1a:74:09:3a:94:69:a6:a3: 34:7a:f0:6d:37:60:7f:55:9e:17:77:e2:e4:cf:1b:a3:07:24: 10:4e:73:c3:95:ca:a4:b5:0b:a6:24:35:a1:e8:97:39:e4:c6: 23:66:ce:e4:3e:72:e7:94:8f:81:1e:8d:83:08:87:1d:82:39: 56:be:7d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3ByYWoNdhveippAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MmFiMzMxNjItN2E5ZC00NjhhLWI3MjctZmU3YzI4MmUxNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNPrQQf27QSH2rxBuDCUTWSSW6Tr6WITiSC/ uLWRWsQzq0GS7t6Qb0RxPUYDbupJMcyPrUr9rjhqWn5htTK4vBRgA3XFE3Whpp2T z/eUDCFoPvT8g/DRJMlPPmN1kIDW3yQ46veEq6vnb1hvPcZyNw5+sMa1fFaX31S1 P55+v9fv5y+7/RgfZ4zL6z3QnVjcjdbMd5JCnWqke6/Z6ucbb1s4BTjh9Ncc4gpy WOy+D4+d9sHS5z9HM5ovSFrg5XwHAMpboqyqtCKdpfN4Eg0GquumcggZP+g7Fcp9 rSX0j+VAzib58MpvvgXCNGO0vKd3jqkp/F6XbeujcyuJA6yDzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1zcxEGAt/fjhbI/hKAcAsjdipAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOWIzODE0NzUtMmYzNy0z YTY2LWExMDktMzQ2YmE1MzU1ZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWm3bXg2bhG8xHWujloT1Wt3pGXUB+9GWwtVkvcCZiNq/vd42Sh1ByX eaFVf2VmeOrhGziTDFcGu7AF/GyrC1nIdaSseJRp7kQtUZ4xE1tkVUsEpfAF7RDN DhBVT5zfcA7s06C8IRAc3lJlvAZOL0Gy1daI0AE+1FrWYIEZjG8z/Db15AVrUZZr 4HnMt05HuBvferUpbyUtPlpYlm9R9HMVrNAg2dXw2d1ALTvbRqG124qA4bFKDnar Dh2caJMadAk6lGmmozR68G03YH9Vnhd34uTPG6MHJBBOc8OVyqS1C6YkNaHolznk xiNmzuQ+cueUj4EejYMIhx2COVa+ffI= -----END CERTIFICATE-----Generated at Sat Oct 11 05:09:30 2025 by rpki-client