$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa File: 687e6f21-4967-30f7-9256-ae4644c10035.roa (raw, json) Hash identifier: zMRdGfrRyGFFNfN9Ug9itcaSP6UabXEroSRB8dl6gbE= Subject key identifier: C2:8F:92:27:AB:FE:37:B1:3B:3B:F3:35:EC:8A:7E:77:B0:E5:EA:3E Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584F7A4D8412EDD88D52C4093260 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 16970 IP address blocks: 72.20.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:84:12:ed:d8:8d:52:c4:09:32:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=fe580e14-0232-4d8e-8cd4-da0e14a07b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:cf:05:ec:5e:04:51:4b:ad:c0:0f:fb:84: 3d:5f:1b:f4:39:0f:d6:74:e8:59:2c:c3:be:d4:84: 5f:1e:0f:9b:d0:b5:bd:39:2d:f2:b2:75:ed:25:a3: b7:78:9f:69:9c:3a:3e:cc:53:1e:6c:6f:f2:34:50: e6:39:9a:d7:38:f6:6a:7c:09:cc:4c:be:25:d7:04: c5:82:50:00:e8:18:52:c0:71:c6:c8:2e:77:0f:97: f8:86:70:fc:7f:48:08:bf:4b:f2:b7:e2:66:5f:07: 15:4d:64:0b:02:2b:fb:61:6b:76:66:5b:f5:b5:de: f9:49:c2:64:31:1e:73:a9:45:41:76:c6:02:09:2a: f9:52:0d:e6:ab:de:91:3e:18:e9:5e:a0:ea:77:06: 9f:d2:f0:04:49:33:72:9b:59:d7:28:99:35:41:78: 41:8b:be:23:41:6a:82:dc:5b:82:eb:8a:47:c8:de: 8a:f0:f6:bb:9e:22:e8:99:01:e0:b8:25:a2:ea:46: 1e:38:68:92:25:f9:36:ea:fc:7e:3c:4e:c7:dd:d4: d8:be:ce:a3:3a:c8:13:e8:2c:1e:e3:11:cc:50:7a: 8e:4d:78:4e:25:b0:b4:49:9f:1f:d4:d2:91:af:3e: bb:a8:10:47:d2:4f:81:a2:5d:4c:b9:23:6e:c5:34: 1d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8F:92:27:AB:FE:37:B1:3B:3B:F3:35:EC:8A:7E:77:B0:E5:EA:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/687e6f21-4967-30f7-9256-ae4644c10035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2f:d1:1f:51:92:38:d6:54:a8:da:56:fa:ca:25:00:01:a5: e9:a3:1a:0c:67:e9:43:b9:4d:30:1b:0f:8f:48:d2:68:cc:2e: 72:f4:46:96:76:0e:6e:0c:8d:5b:74:f1:6e:49:4b:0f:a9:de: cc:17:e8:f2:33:5f:cf:9f:1e:88:9b:c7:bb:d7:8e:c3:58:48: cf:85:a2:50:72:84:d9:23:cc:1f:00:29:01:01:51:dd:12:6e: e4:3f:9d:4e:c9:35:43:37:7f:79:f8:f5:8e:b6:d3:d3:e9:74: e8:56:94:07:3b:bd:9c:9c:ba:8b:39:5c:1f:b5:e1:b4:f4:0c: f2:9e:82:62:59:0c:51:19:7d:b0:1c:b0:e3:20:98:65:3a:bb: b2:e0:e4:72:fb:3f:d2:ca:43:2d:7e:2d:3c:76:da:aa:74:49: b4:7c:88:90:b0:5a:61:34:0b:85:64:a4:bd:d7:1f:b0:c5:f7: 9d:4f:d6:ca:a9:ca:96:91:9f:c7:ef:7e:66:e7:39:bf:be:27: 1d:0b:8f:91:6e:e0:af:57:50:c5:9e:3e:50:f9:fe:97:19:8f: d6:b0:17:4b:89:73:02:65:1a:f9:37:87:42:7c:62:22:a4:07: 4f:82:0b:21:f9:27:7e:90:09:7e:a9:f9:61:6a:e9:a2:c3:85: 56:f1:9e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TYQS7diNUsQJMmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmU1ODBlMTQtMDIzMi00ZDhlLThjZDQtZGEwZTE0YTA3YjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2zPBexeBFFLrcAP+4Q9Xxv0OQ/WdOhZLMO+ 1IRfHg+b0LW9OS3ysnXtJaO3eJ9pnDo+zFMebG/yNFDmOZrXOPZqfAnMTL4l1wTF glAA6BhSwHHGyC53D5f4hnD8f0gIv0vyt+JmXwcVTWQLAiv7YWt2Zlv1td75ScJk MR5zqUVBdsYCCSr5Ug3mq96RPhjpXqDqdwaf0vAESTNym1nXKJk1QXhBi74jQWqC 3FuC64pHyN6K8Pa7niLomQHguCWi6kYeOGiSJfk26vx+PE7H3dTYvs6jOsgT6Cwe 4xHMUHqOTXhOJbC0SZ8f1NKRrz67qBBH0k+Bol1MuSNuxTQdCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKPkier/jexOzvzNeyKfnew5eo+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNjg3ZTZmMjEtNDk2Ny0z MGY3LTkyNTYtYWU0NjQ0YzEwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgv0R9RkjjWVKjaVvrKJQABpemjGgxn6UO5TTAbD49I0mjMLnL0RpZ2 Dm4MjVt08W5JSw+p3swX6PIzX8+fHoibx7vXjsNYSM+FolByhNkjzB8AKQEBUd0S buQ/nU7JNUM3f3n49Y6209PpdOhWlAc7vZycuos5XB+14bT0DPKegmJZDFEZfbAc sOMgmGU6u7Lg5HL7P9LKQy1+LTx22qp0SbR8iJCwWmE0C4VkpL3XH7DF951P1sqp ypaRn8fvfmbnOb++Jx0Lj5Fu4K9XUMWePlD5/pcZj9awF0uJcwJlGvk3h0J8YiKk B0+CCyH5J36QCX6p+WFq6aLDhVbxngQ= -----END CERTIFICATE-----Generated at Wed Oct 28 10:30:18 2026 by rpki-client