$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa File: 2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa (raw, json) Hash identifier: 0TFkJXqn1hOAz95JzPfrsyl3Tvt6+InnLu5YaYUce1Y= Subject key identifier: 02:3C:11:54:A3:AF:A2:8B:E2:FF:D7:CF:29:1A:68:8D:5C:39:44:CC Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584DFBD5E79222992857F951D680 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 394437 IP address blocks: 72.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Jun 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:e7:92:22:99:28:57:f9:51:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=b6d6c920-b539-45ff-b976-756866d0c5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:96:ad:c3:ff:f0:04:85:35:2a:ed:a7:13: 11:f4:ae:39:81:91:02:4f:bf:98:59:d8:66:52:fd: 50:b9:c6:8b:af:30:45:67:64:fa:05:87:15:ab:fd: 4d:37:76:dd:56:79:dd:2c:ee:99:72:24:d0:af:ba: 7c:2d:a0:a0:64:ca:b5:57:4d:a7:4a:05:77:f2:22: 69:d4:26:59:fe:f3:d0:a2:01:92:ba:8f:03:c9:05: 23:47:00:17:33:e6:ae:34:85:74:fb:0f:80:9e:40: fb:f3:f1:18:3e:e2:5d:5e:83:18:59:3e:13:ab:7e: 24:84:0c:e1:7f:f4:90:5c:b5:2f:41:5e:b9:54:0e: a8:9d:d5:d8:67:e5:e4:ce:38:ae:04:06:2f:37:1f: 5f:d7:a7:80:13:71:16:2c:59:fb:7a:5c:52:5e:57: 94:4e:b6:74:38:64:90:d6:bb:6d:9e:32:01:43:9b: 7d:3d:0a:06:8d:ce:b8:fd:42:28:29:71:c7:7f:08: b6:3a:b8:af:c0:17:a6:4b:4a:a5:ed:6f:c2:5d:91: fb:e8:c8:d5:ac:9d:6a:6a:a5:cb:17:90:7e:ed:cc: 2c:66:91:ab:d4:a1:0e:d7:aa:09:09:ef:8e:fb:7d: 1f:35:8b:9d:15:74:2b:0c:37:d2:af:c5:a7:92:c8: 0d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3C:11:54:A3:AF:A2:8B:E2:FF:D7:CF:29:1A:68:8D:5C:39:44:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2320df0a-ba1a-380c-be0f-d8e3c7f973a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:84:2c:bc:8c:41:c4:79:76:08:50:6d:68:6a:b7:f5:f0:a8: 71:65:03:63:c2:67:41:1f:58:80:3a:74:40:bd:b1:da:13:30: 02:8c:4c:d7:63:9f:d6:7e:f9:80:a6:46:32:5f:d1:b5:ad:cc: 15:e0:84:af:ad:0a:52:0b:71:b2:78:a9:7b:cd:1c:f9:fc:1e: a5:59:47:7b:d5:a1:db:73:f4:72:4c:bb:d1:7e:9d:39:9d:36: ed:47:97:11:ab:85:d5:1f:38:62:c3:83:6c:9a:47:8c:0f:56: ff:ad:d4:00:17:9a:c5:a4:83:ac:17:ea:0b:6d:65:1c:8a:f9: df:64:19:22:fa:a3:ae:54:bc:20:36:0a:a5:10:79:4e:23:3a: 8b:13:ba:37:e8:8e:a6:80:17:36:a8:fe:95:88:c5:8e:69:47: c4:79:7b:94:64:9a:fb:dc:cf:86:c3:bd:a5:30:ce:08:98:b4: 62:36:37:2f:49:e3:83:6e:e7:b9:ae:95:6a:9a:ac:7a:17:8c: fb:57:9a:7b:78:69:e0:ce:13:b3:0c:3d:66:f7:27:37:e7:87: e1:2a:21:dc:ac:2f:42:cb:a7:44:f8:29:3e:54:0d:76:81:f1: 80:e9:e1:62:9d:43:78:f2:3b:e5:43:d9:89:a4:9d:b1:1f:c1: b0:4e:54:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371eeSIpkoV/lR1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk YjZkNmM5MjAtYjUzOS00NWZmLWI5NzYtNzU2ODY2ZDBjNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4KWrcP/8ASFNSrtpxMR9K45gZECT7+YWdhm Uv1QucaLrzBFZ2T6BYcVq/1NN3bdVnndLO6ZciTQr7p8LaCgZMq1V02nSgV38iJp 1CZZ/vPQogGSuo8DyQUjRwAXM+auNIV0+w+AnkD78/EYPuJdXoMYWT4Tq34khAzh f/SQXLUvQV65VA6ondXYZ+XkzjiuBAYvNx9f16eAE3EWLFn7elxSXleUTrZ0OGSQ 1rttnjIBQ5t9PQoGjc64/UIoKXHHfwi2OrivwBemS0ql7W/CXZH76MjVrJ1qaqXL F5B+7cwsZpGr1KEO16oJCe+O+30fNYudFXQrDDfSr8WnksgN2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI8EVSjr6KL4v/XzykaaI1cOUTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMjMyMGRmMGEtYmExYS0z ODBjLWJlMGYtZDhlM2M3Zjk3M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiELLyMQcR5dghQbWhqt/XwqHFlA2PCZ0EfWIA6dEC9sdoTMAKMTNdj n9Z++YCmRjJf0bWtzBXghK+tClILcbJ4qXvNHPn8HqVZR3vVodtz9HJMu9F+nTmd Nu1HlxGrhdUfOGLDg2yaR4wPVv+t1AAXmsWkg6wX6gttZRyK+d9kGSL6o65UvCA2 CqUQeU4jOosTujfojqaAFzao/pWIxY5pR8R5e5Rkmvvcz4bDvaUwzgiYtGI2Ny9J 44Nu57mulWqarHoXjPtXmnt4aeDOE7MMPWb3Jzfnh+EqIdysL0LLp0T4KT5UDXaB 8YDp4WKdQ3jyO+VD2YmknbEfwbBOVM0= -----END CERTIFICATE-----Generated at Sun May 31 02:37:33 2026 by rpki-client