$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa File: 687e6f21-4967-30f7-9256-ae4644c10035.roa (raw, json) Hash identifier: fERsQVvzVdn8iCFMRkELw64RbD6s2i0WHIsp+7AekEw= Subject key identifier: A5:45:46:51:63:C2:3D:9E:46:22:17:24:25:76:24:A8:7D:FD:E2:7F Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584D55BA3074E5B4FF3AF4C4B180 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 16970 IP address blocks: 72.20.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:30:74:e5:b4:ff:3a:f4:c4:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=ece89291-f911-451e-bed8-972a9df58eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f9:95:c4:27:4f:7c:fb:b3:08:dd:01:48:dd: d5:22:b2:fa:36:99:51:b1:03:7e:26:e1:14:65:19: 56:a0:0e:92:16:94:93:31:01:a5:1b:5a:df:ba:2f: 06:48:ad:08:8e:f2:9d:10:82:b2:23:13:9b:3e:6d: 6b:bd:24:0d:24:4f:c3:5f:4f:a6:34:01:ea:32:84: 4d:dc:0f:68:af:a4:06:d4:76:df:d0:77:f7:71:ad: 9f:9b:0c:30:c6:7c:7f:8b:6e:30:ed:31:23:d8:ac: db:fe:74:14:3b:78:2b:a3:62:8f:66:86:8f:93:23: ae:d3:9e:3d:f9:a8:99:22:1f:91:e2:b6:33:a2:fa: 78:a6:74:e5:4e:15:2a:e2:45:7c:4a:2a:45:c8:86: 07:a5:d3:c4:b0:ad:ff:cc:4d:a4:57:d2:36:ae:c5: e7:2f:b8:22:b8:5d:0e:1c:d4:22:d1:da:cb:5a:6f: b9:c8:80:03:d8:0d:77:3d:4d:b7:a8:1b:e4:af:e0: 0b:31:b7:6c:46:f9:fb:d5:93:2b:d2:bf:04:9c:29: 53:84:4e:f6:a0:f0:75:0a:12:c1:aa:04:c4:76:db: 23:82:b3:23:7f:81:bf:e9:a6:2b:74:b9:d5:74:e1: a2:d6:56:08:80:1f:26:31:13:2d:85:75:55:67:7f: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:45:46:51:63:C2:3D:9E:46:22:17:24:25:76:24:A8:7D:FD:E2:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:81:50:25:d8:18:0c:4d:59:2b:4e:f1:f0:ff:44:fa:cf:b6: ed:17:74:d0:3b:9d:ad:c7:cc:80:89:37:76:e6:e6:3c:82:fc: b2:35:b6:cf:7d:ee:cc:09:8b:0c:50:5f:5c:66:1e:b9:a4:c0: 70:b1:b5:8b:d7:8e:f0:44:2c:f5:cd:9e:27:bb:ed:2a:c0:f0: eb:b9:76:31:e7:10:b0:26:55:42:03:ae:3b:82:18:93:40:89: 07:23:c8:d2:eb:2c:f8:a5:04:3d:46:85:ea:a2:aa:d8:f3:78: 56:51:52:3b:81:63:e0:5f:f5:3c:32:97:f7:63:7d:7f:7f:e5: d5:24:9e:45:d5:a7:d2:77:b9:f9:fe:0f:ba:c5:f2:16:7a:b9: 95:bf:66:1e:0b:1f:75:bf:5b:f1:94:99:51:6b:05:16:c7:3d: 5b:21:f2:ba:22:df:90:7e:01:47:e1:2f:52:f8:89:df:93:bf: 84:c9:3e:9c:b0:d0:86:f8:03:ac:53:fc:ad:3f:a8:2b:54:29: 23:05:3e:9a:b6:84:7a:77:01:63:33:5c:95:25:6e:e9:8f:fe: 47:b8:eb:82:0d:94:a2:14:cf:3d:28:f4:cb:6c:f9:4e:d6:3d: 83:ca:90:60:09:81:8c:35:67:70:85:8a:49:3b:b7:4e:65:ae: 50:a2:cf:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujB05bT/OvTEsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZWNlODkyOTEtZjkxMS00NTFlLWJlZDgtOTcyYTlkZjU4ZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fmVxCdPfPuzCN0BSN3VIrL6NplRsQN+JuEU ZRlWoA6SFpSTMQGlG1rfui8GSK0IjvKdEIKyIxObPm1rvSQNJE/DX0+mNAHqMoRN 3A9or6QG1Hbf0Hf3ca2fmwwwxnx/i24w7TEj2Kzb/nQUO3gro2KPZoaPkyOu0549 +aiZIh+R4rYzovp4pnTlThUq4kV8SipFyIYHpdPEsK3/zE2kV9I2rsXnL7giuF0O HNQi0drLWm+5yIAD2A13PU23qBvkr+ALMbdsRvn71ZMr0r8EnClThE72oPB1ChLB qgTEdtsjgrMjf4G/6aYrdLnVdOGi1lYIgB8mMRMthXVVZ39sYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVFRlFjwj2eRiIXJCV2JKh9/eJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNjg3ZTZmMjEtNDk2Ny0z MGY3LTkyNTYtYWU0NjQ0YzEwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6BUCXYGAxNWStO8fD/RPrPtu0XdNA7na3HzICJN3bm5jyC/LI1ts99 7swJiwxQX1xmHrmkwHCxtYvXjvBELPXNnie77SrA8Ou5djHnELAmVUIDrjuCGJNA iQcjyNLrLPilBD1GheqiqtjzeFZRUjuBY+Bf9Twyl/djfX9/5dUknkXVp9J3ufn+ D7rF8hZ6uZW/Zh4LH3W/W/GUmVFrBRbHPVsh8roi35B+AUfhL1L4id+Tv4TJPpyw 0Ib4A6xT/K0/qCtUKSMFPpq2hHp3AWMzXJUlbumP/ke464INlKIUzz0o9Mts+U7W PYPKkGAJgYw1Z3CFikk7t05lrlCiz5I= -----END CERTIFICATE-----Generated at Wed Apr 15 11:39:14 2026 by rpki-client