$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa File: 687e6f21-4967-30f7-9256-ae4644c10035.roa (raw, json) Hash identifier: iPl5TmzFbgt/YglZD/d0AEcBHbRyfVGLTe6B71JDhUk= Subject key identifier: BB:9C:03:8C:60:D9:98:CC:0A:95:C1:0A:38:E5:57:20:76:E1:C6:98 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584ED861D55A1F0681469C8B8840 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 16970 IP address blocks: 72.20.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:d5:5a:1f:06:81:46:9c:8b:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=bcc813f8-8029-4b65-be8f-ea949a65537f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:fd:9c:ee:8d:b2:2b:94:94:34:bd:e0:4e: 4e:f4:99:6c:54:9c:44:d6:a3:93:51:8b:18:90:6b: d0:33:d7:65:0e:f4:fe:a5:a2:3e:f1:f5:8d:37:7d: 69:c1:e1:9c:55:08:13:4d:c0:48:0b:96:4e:84:b4: c4:62:5e:b3:c2:3a:e5:d4:cb:8e:3f:bd:4b:91:36: 86:81:da:80:da:97:96:c8:69:f2:c4:f5:be:26:d0: fc:01:af:62:41:dd:b5:11:85:2a:cb:b2:dd:c3:fa: 67:b7:f9:b2:b6:6e:cc:c4:dc:b0:94:04:74:5d:aa: 73:1a:ef:07:1c:9f:9f:73:53:82:91:21:b0:ac:52: 4b:49:12:23:db:c1:52:db:d9:85:9f:bd:23:f8:32: c6:61:57:39:46:c2:75:0f:ee:94:a3:2a:6a:dc:63: 34:65:27:17:d8:54:43:a5:f2:9c:fd:11:43:13:55: bb:26:2c:a1:47:39:90:2f:2e:3d:18:2b:6c:23:c0: 3e:5b:df:fb:e5:1d:67:d1:98:02:30:b7:b7:2b:e9: 82:df:ad:5d:fe:f5:2a:37:2d:1a:3c:ad:f5:7a:d0: b7:8d:11:f6:c9:ac:02:98:e9:10:2a:c8:e8:6e:74: 9c:3c:0d:cc:e5:c1:5e:5d:2c:71:f3:ca:74:2b:dc: 20:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9C:03:8C:60:D9:98:CC:0A:95:C1:0A:38:E5:57:20:76:E1:C6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6a:b0:d4:c5:a6:fb:89:52:4b:b2:d7:85:57:a8:27:db:62: f9:71:2a:d0:8a:36:20:47:0b:fe:4f:0f:22:c1:89:2a:08:a1: 7f:09:6d:d4:5e:ee:ac:c0:68:de:db:09:40:24:99:50:ec:6c: 29:9c:48:b7:e4:8c:b8:40:b5:0d:90:50:30:ea:61:d5:ff:27: de:71:43:d9:3a:7e:c8:a8:12:e7:c6:9f:06:cb:62:37:c3:14: 6e:58:c5:b8:13:61:ee:78:67:25:c4:1a:d4:2d:a1:fe:25:49: b5:4d:6f:9b:85:59:e6:4c:c6:f7:2d:4e:e8:04:62:14:6f:b4: 26:cb:58:13:0f:3c:07:41:06:ce:ca:d1:cd:bf:91:84:c2:3c: 8a:cb:a4:1f:77:ef:8a:5d:22:b9:71:b4:38:b6:1d:55:c3:f6: 53:ad:14:c1:2f:df:88:21:09:34:96:9a:84:02:9a:aa:2f:e2: 68:dd:11:12:6c:ae:3c:ee:84:9e:04:25:71:33:75:d6:f6:cb: 1e:35:b3:19:c8:d4:fa:7a:89:3d:33:44:fd:7b:89:f3:2e:48: 26:08:d9:73:ee:e3:3e:e4:f3:fa:f2:58:d3:e3:12:05:2f:5e: 8c:ea:a8:2d:d1:47:b2:5f:13:09:17:eb:11:0f:11:88:69:87: d5:6c:3d:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYdVaHwaBRpyLiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YmNjODEzZjgtODAyOS00YjY1LWJlOGYtZWE5NDlhNjU1MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCn9nO6NsiuUlDS94E5O9JlsVJxE1qOTUYsY kGvQM9dlDvT+paI+8fWNN31pweGcVQgTTcBIC5ZOhLTEYl6zwjrl1MuOP71LkTaG gdqA2peWyGnyxPW+JtD8Aa9iQd21EYUqy7Ldw/pnt/mytm7MxNywlAR0XapzGu8H HJ+fc1OCkSGwrFJLSRIj28FS29mFn70j+DLGYVc5RsJ1D+6Uoypq3GM0ZScX2FRD pfKc/RFDE1W7JiyhRzmQLy49GCtsI8A+W9/75R1n0ZgCMLe3K+mC361d/vUqNy0a PK31etC3jRH2yawCmOkQKsjobnScPA3M5cFeXSxx88p0K9wggwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLucA4xg2ZjMCpXBCjjlVyB24caYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNjg3ZTZmMjEtNDk2Ny0z MGY3LTkyNTYtYWU0NjQ0YzEwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1qsNTFpvuJUkuy14VXqCfbYvlxKtCKNiBHC/5PDyLBiSoIoX8JbdRe 7qzAaN7bCUAkmVDsbCmcSLfkjLhAtQ2QUDDqYdX/J95xQ9k6fsioEufGnwbLYjfD FG5YxbgTYe54ZyXEGtQtof4lSbVNb5uFWeZMxvctTugEYhRvtCbLWBMPPAdBBs7K 0c2/kYTCPIrLpB9374pdIrlxtDi2HVXD9lOtFMEv34ghCTSWmoQCmqov4mjdERJs rjzuhJ4EJXEzddb2yx41sxnI1Pp6iT0zRP17ifMuSCYI2XPu4z7k8/ryWNPjEgUv XozqqC3RR7JfEwkX6xEPEYhph9VsPdQ= -----END CERTIFICATE-----Generated at Fri Sep 4 01:42:28 2026 by rpki-client