$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa File: 308232c7-7251-38cc-86fe-9125a605bda8.roa (raw, json) Hash identifier: s0iJcCLJp/K368G9G7wCvFKXMEMdvlMB9W9hk7y/iFA= Subject key identifier: 39:05:93:37:45:11:8D:E1:02:3D:57:49:A7:18:45:CA:6F:3C:59:A9 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584F8F3DC5C8B87A4D10BA9D3F40 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 394437 IP address blocks: 72.20.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c5:c8:b8:7a:4d:10:ba:9d:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=245bf14f-9ef8-4382-8d57-22e46a75a4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:80:8f:d4:48:b9:32:62:d9:95:8e:75:40: 79:d6:c5:6f:5b:06:34:7c:f7:05:ea:0d:3b:f1:b6: 10:d1:87:e1:5f:0b:09:16:66:18:42:77:b0:5d:d4: 3f:04:18:40:57:c6:50:60:b3:7a:74:2e:cf:b2:50: 6c:2e:c8:70:25:4e:cf:a6:03:6a:ef:6b:93:22:71: 66:0d:3b:3d:62:df:69:75:f2:a8:38:f9:10:34:21: a8:14:a9:cf:5e:3c:b2:74:96:56:9d:26:5f:a2:2d: f3:77:6a:8b:2b:26:fc:02:1b:8f:96:23:d3:5d:66: 8a:83:40:61:ae:a4:22:46:5a:18:40:dc:45:6a:9a: 78:85:35:8f:c1:50:d4:df:85:42:d7:e1:47:7c:2e: 52:33:f8:b7:98:ad:80:53:fc:f1:7a:1a:8b:22:65: 36:06:b1:c8:27:d8:44:7c:3d:6e:3c:4e:72:e7:b9: 66:5e:c7:b0:7f:fc:bd:0e:84:2f:5f:56:f9:5d:9d: 58:c4:15:c3:59:0e:9a:6c:d5:ff:7e:bf:8c:55:3d: e1:0a:26:e6:83:20:88:41:43:e5:6e:93:b2:44:0d: a2:2e:30:0b:5b:87:79:ee:8c:89:e7:26:f3:38:cb: 22:79:39:a9:1c:30:f2:b5:6f:a9:e3:49:ba:76:76: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:05:93:37:45:11:8D:E1:02:3D:57:49:A7:18:45:CA:6F:3C:59:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/308232c7-7251-38cc-86fe-9125a605bda8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6d:2d:d0:b8:f7:32:b7:87:4f:02:37:9c:89:c4:91:e2:32: ec:eb:f1:1d:87:64:8e:4a:42:72:cc:44:c1:75:d5:85:52:ce: e8:30:36:5f:87:51:69:59:f5:7b:f2:19:64:c1:56:b9:ae:ee: ce:e0:4f:06:15:27:66:9f:ce:0a:cf:20:4c:9f:22:85:76:9e: 37:aa:fe:fd:c9:0c:16:f1:ff:2f:5b:90:7c:a5:3b:f2:1e:14: b9:e9:be:8f:c6:b4:3a:e1:47:da:41:47:2f:a3:b7:94:0d:f5: c8:32:c1:1d:33:2d:c7:d0:ce:1b:05:f3:8d:45:e0:dd:3d:e6: e3:4b:75:eb:e0:8c:2a:10:05:6c:8a:93:af:18:49:d9:f0:4e: 34:3e:02:89:a1:4a:5c:d7:2c:45:3b:8b:23:cb:0e:60:27:66: db:b9:d2:da:af:ad:d1:1b:83:f1:42:b2:5c:07:f5:9f:80:cd: 8e:9a:81:df:51:43:8d:16:29:9c:73:6b:9a:a4:ab:83:c7:b5: 51:38:c4:85:0d:80:b5:4d:ed:9c:32:e8:48:9b:cd:a0:f6:fe: 10:3b:15:45:1a:cc:a7:39:2a:64:8d:88:c0:24:a4:f7:55:62: a2:a5:a2:a4:ed:1b:17:a5:3c:11:c6:fd:97:c3:79:13:b3:87: 67:16:cb:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPcXIuHpNELqdP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk MjQ1YmYxNGYtOWVmOC00MzgyLThkNTctMjJlNDZhNzVhNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWCAj9RIuTJi2ZWOdUB51sVvWwY0fPcF6g07 8bYQ0YfhXwsJFmYYQnewXdQ/BBhAV8ZQYLN6dC7PslBsLshwJU7PpgNq72uTInFm DTs9Yt9pdfKoOPkQNCGoFKnPXjyydJZWnSZfoi3zd2qLKyb8AhuPliPTXWaKg0Bh rqQiRloYQNxFapp4hTWPwVDU34VC1+FHfC5SM/i3mK2AU/zxehqLImU2BrHIJ9hE fD1uPE5y57lmXsewf/y9DoQvX1b5XZ1YxBXDWQ6abNX/fr+MVT3hCibmgyCIQUPl bpOyRA2iLjALW4d57oyJ5ybzOMsieTmpHDDytW+p40m6dnZUoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkFkzdFEY3hAj1XSacYRcpvPFmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMzA4MjMyYzctNzI1MS0z OGNjLTg2ZmUtOTEyNWE2MDViZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdtLdC49zK3h08CN5yJxJHiMuzr8R2HZI5KQnLMRMF11YVSzugwNl+H UWlZ9XvyGWTBVrmu7s7gTwYVJ2afzgrPIEyfIoV2njeq/v3JDBbx/y9bkHylO/Ie FLnpvo/GtDrhR9pBRy+jt5QN9cgywR0zLcfQzhsF841F4N095uNLdevgjCoQBWyK k68YSdnwTjQ+AomhSlzXLEU7iyPLDmAnZtu50tqvrdEbg/FCslwH9Z+AzY6agd9R Q40WKZxza5qkq4PHtVE4xIUNgLVN7Zwy6EibzaD2/hA7FUUazKc5KmSNiMAkpPdV YqKloqTtGxelPBHG/ZfDeROzh2cWy/g= -----END CERTIFICATE-----Generated at Tue Oct 27 08:42:46 2026 by rpki-client