$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7e547e5f-5a35-3036-848d-29252fa30232.roa File: 7e547e5f-5a35-3036-848d-29252fa30232.roa (raw, json) Hash identifier: 6sBve34OfzWSy/ufCoEHAuw5dWi0ezb/gM6LaOPmKMs= Subject key identifier: 67:61:4C:4C:B3:B6:8F:5B:18:59:FC:C6:5C:D1:DA:BB:02:22:A1:8D Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584EFA516736568F2BB771772400 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7e547e5f-5a35-3036-848d-29252fa30232.roa Signing time: Thu 27 Aug 2026 16:44:37 +0000 ROA not before: Thu 27 Aug 2026 16:44:37 +0000 ROA not after: Wed 25 Nov 2026 17:44:37 +0000 asID: 402523 IP address blocks: 72.20.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:51:67:36:56:8f:2b:b7:71:77:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Aug 27 16:44:37 2026 GMT Not After : Nov 25 17:44:37 2026 GMT Subject: CN=c243bf05-dfaf-4a36-9823-84b7a4b6476b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:8f:b0:b9:58:4e:af:3d:cf:0a:60:92:7d: 44:44:ea:2a:19:7b:89:0a:b9:42:91:16:ef:a0:08: df:53:38:9a:a1:ca:f9:3e:68:db:a5:b8:72:05:81: 92:98:0d:9f:66:d4:4c:8c:82:52:22:8b:b6:fa:c1: 73:bf:cf:f0:68:ed:53:91:d9:bf:8f:cb:2d:fb:64: 44:f8:6f:6a:a3:fd:90:4f:d8:58:d5:fb:3f:46:dc: 77:c3:74:34:9d:c7:66:c7:42:58:75:ff:d0:7a:ba: 90:4f:64:e7:16:6c:99:36:a2:9e:86:eb:05:50:57: 6b:b6:c8:0a:c3:dd:d7:4c:a3:43:49:78:77:32:af: a0:12:9b:8f:91:4f:4b:42:eb:72:50:97:27:57:66: 96:9a:3c:29:5e:3f:38:3e:dd:59:48:c2:0d:83:1e: 3c:33:c6:dc:65:47:33:22:77:a5:26:8f:01:f6:f8: c3:9f:b3:46:bd:f7:3d:05:f4:ce:9a:6c:74:fe:29: 64:02:84:51:82:47:3e:a7:b7:d9:f8:3b:78:f5:93: cb:d6:e5:3b:19:33:8f:21:13:e9:5d:3c:45:08:c1: 5d:4d:5a:5a:b9:62:94:52:c5:62:61:04:66:1e:b7: 9b:3a:27:3c:d4:f1:0b:e3:0f:7b:a9:33:54:db:9e: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:61:4C:4C:B3:B6:8F:5B:18:59:FC:C6:5C:D1:DA:BB:02:22:A1:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7e547e5f-5a35-3036-848d-29252fa30232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:12:27:a3:37:8e:9b:7c:35:e7:60:1a:d3:c9:2c:11:c0:b9: df:b4:f7:c4:9e:97:75:e6:fb:6a:85:56:eb:7b:73:e6:6e:1d: 00:00:00:eb:66:16:42:93:66:9f:de:0d:8a:a3:25:51:19:b5: 49:45:18:94:a8:0f:76:4a:9d:81:d0:c8:92:7a:73:46:b5:a3: 52:a8:78:3c:0d:06:dd:d8:9c:18:f1:63:43:e1:9d:a8:f4:2c: bb:0b:9a:a1:75:39:f1:96:66:09:1b:96:92:2b:87:7f:2c:59: e3:4c:3f:d1:11:cb:b9:52:a7:77:a1:04:7f:22:b1:45:00:76: 1b:79:f8:8e:27:8b:48:65:b3:1e:c5:14:f8:30:f3:f8:1e:cf: 43:7b:de:8c:9c:a9:7b:20:06:99:e1:ed:a6:93:71:90:4d:2c: 31:89:b5:6a:7e:87:0b:a8:3c:a0:9d:be:b4:43:b1:f0:9c:d8: 3e:d2:ed:03:4c:c5:b0:73:d3:0f:09:ca:07:b5:13:23:6b:df: 99:66:66:70:61:34:c6:bf:ec:60:92:2f:d1:36:dc:6a:d5:14: d1:5b:b5:5a:f9:58:78:dc:3a:ff:95:b9:10:9f:b3:fc:0a:2d: 73:78:4b:c6:e3:79:14:88:fa:43:90:5d:7a:cd:b7:21:54:03: 59:22:4e:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE76UWc2Vo8rt3F3JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDgyNzE2NDQzN1oXDTI2MTEyNTE3NDQzN1owLzEtMCsGA1UEAxMk YzI0M2JmMDUtZGZhZi00YTM2LTk4MjMtODRiN2E0YjY0NzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRuPsLlYTq89zwpgkn1EROoqGXuJCrlCkRbv oAjfUziaocr5PmjbpbhyBYGSmA2fZtRMjIJSIou2+sFzv8/waO1Tkdm/j8st+2RE +G9qo/2QT9hY1fs/Rtx3w3Q0ncdmx0JYdf/QerqQT2TnFmyZNqKehusFUFdrtsgK w93XTKNDSXh3Mq+gEpuPkU9LQutyUJcnV2aWmjwpXj84Pt1ZSMINgx48M8bcZUcz InelJo8B9vjDn7NGvfc9BfTOmmx0/ilkAoRRgkc+p7fZ+Dt49ZPL1uU7GTOPIRPp XTxFCMFdTVpauWKUUsViYQRmHrebOic81PEL4w97qTNU256RcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdhTEyzto9bGFn8xlzR2rsCIqGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvN2U1NDdlNWYtNWEzNS0z MDM2LTg0OGQtMjkyNTJmYTMwMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsSJ6M3jpt8NedgGtPJLBHAud+098Sel3Xm+2qFVut7c+ZuHQAAAOtm FkKTZp/eDYqjJVEZtUlFGJSoD3ZKnYHQyJJ6c0a1o1KoeDwNBt3YnBjxY0Phnaj0 LLsLmqF1OfGWZgkblpIrh38sWeNMP9ERy7lSp3ehBH8isUUAdht5+I4ni0hlsx7F FPgw8/gez0N73oycqXsgBpnh7aaTcZBNLDGJtWp+hwuoPKCdvrRDsfCc2D7S7QNM xbBz0w8Jyge1EyNr35lmZnBhNMa/7GCSL9E23GrVFNFbtVr5WHjcOv+VuRCfs/wK LXN4S8bjeRSI+kOQXXrNtyFUA1kiTsE= -----END CERTIFICATE-----Generated at Fri Sep 4 03:13:34 2026 by rpki-client