$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8de79c85-303c-3f1c-bc94-1b1504bb1df9.roa File: 8de79c85-303c-3f1c-bc94-1b1504bb1df9.roa (raw, json) Hash identifier: lN0WMBEjnvbLwg8cOMAOEQx1cMK+ILUjWCwGRSOqtxA= Subject key identifier: E4:71:6D:02:90:AD:47:37:76:5A:D5:3F:44:AB:E9:EA:A2:32:6D:40 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584F8F3DC5FBA89E53866A3D22A0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8de79c85-303c-3f1c-bc94-1b1504bb1df9.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 394437 IP address blocks: 72.46.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c5:fb:a8:9e:53:86:6a:3d:22:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=7cc4a4b4-eb81-43f2-8604-afe36c97a654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:71:52:f0:5b:08:97:3b:6d:66:e1:cd:9c: 5e:54:ff:a9:88:44:f7:38:5c:bd:68:be:c9:41:51: 65:09:a2:89:18:65:6e:8c:07:7f:7b:11:9e:0f:72: 86:47:cd:e9:f8:1d:49:37:9d:d3:8e:35:55:58:b9: 19:96:d9:8c:99:6d:24:7e:1e:a4:62:ff:49:95:5f: 20:f6:ee:74:e1:ea:4b:b0:f0:fa:f3:a6:f5:bd:d0: f1:7e:87:86:bf:eb:99:65:99:48:b4:66:19:d7:d5: 41:1f:29:fc:2c:dd:e7:9e:2e:d4:10:d2:8a:a5:1b: 83:4c:c6:d3:e5:b4:68:ca:84:ff:7a:35:1b:77:99: 80:8b:10:f2:0d:1c:b5:e6:62:c5:ad:5a:4c:2a:cb: 16:6d:f4:08:7a:7a:57:dc:75:48:54:79:fe:ac:1c: cc:67:06:8e:49:73:4f:4e:79:03:c8:aa:89:28:86: fd:3c:c8:cf:1f:1d:fe:0a:e6:89:8c:8f:7f:e9:73: 4d:cc:5e:a8:1c:56:75:94:58:65:9f:78:71:23:20: 03:a8:a8:20:9b:1f:50:11:3e:b5:08:19:86:44:f9: 7e:f5:0e:d5:a1:73:7b:b3:87:98:39:b2:d5:d8:a9: 53:7f:86:fe:5b:5d:5b:0a:3b:86:0c:7d:57:38:c5: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:71:6D:02:90:AD:47:37:76:5A:D5:3F:44:AB:E9:EA:A2:32:6D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8de79c85-303c-3f1c-bc94-1b1504bb1df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.46.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f7:5a:e4:94:d8:f8:40:32:62:96:11:42:d2:32:0c:14:af: 8f:73:05:88:19:7c:de:56:23:2f:0b:9b:47:08:ff:c7:01:c1: cc:d3:f9:f0:04:b6:cb:de:c5:19:e8:9c:bc:d5:c4:6e:12:39: f8:6b:53:a0:1b:ef:00:96:57:64:15:cf:49:b9:e3:02:d8:46: 0a:d1:12:71:ea:40:de:04:42:b9:93:5c:f3:00:97:7e:89:12: f7:72:db:f7:b6:9a:a2:12:2a:69:b1:fb:44:93:22:5d:90:d6: 2e:bd:96:01:8f:c1:01:1a:80:da:f8:d0:90:88:f0:7b:71:95: 1d:17:6d:9b:f9:79:25:f4:01:8f:b9:ff:1c:0f:5a:97:cf:b4: eb:8e:2f:2f:8b:3c:ea:30:5e:81:2a:ea:3e:fd:6c:e1:61:5f: 01:5d:7c:7d:91:a8:8c:fa:7b:fb:33:dd:fb:fc:4d:72:1e:f7: f4:28:7b:81:63:0b:b5:c7:cb:f3:a0:d1:4a:21:d7:24:55:57: 03:ba:dc:9e:50:bf:4f:c0:23:71:1e:b3:15:85:34:0e:f7:28: c5:e5:e9:6a:4b:cf:ab:2a:ee:93:e0:74:28:d5:e2:a3:29:0d: f7:33:2c:1c:cf:da:19:b7:28:9b:5d:05:98:63:3a:c3:ec:76: 93:74:2f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPcX7qJ5Thmo9IqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk N2NjNGE0YjQtZWI4MS00M2YyLTg2MDQtYWZlMzZjOTdhNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ntxUvBbCJc7bWbhzZxeVP+piET3OFy9aL7J QVFlCaKJGGVujAd/exGeD3KGR83p+B1JN53TjjVVWLkZltmMmW0kfh6kYv9JlV8g 9u504epLsPD686b1vdDxfoeGv+uZZZlItGYZ19VBHyn8LN3nni7UENKKpRuDTMbT 5bRoyoT/ejUbd5mAixDyDRy15mLFrVpMKssWbfQIenpX3HVIVHn+rBzMZwaOSXNP TnkDyKqJKIb9PMjPHx3+CuaJjI9/6XNNzF6oHFZ1lFhln3hxIyADqKggmx9QET61 CBmGRPl+9Q7VoXN7s4eYObLV2KlTf4b+W11bCjuGDH1XOMX9swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORxbQKQrUc3dlrVP0Sr6eqiMm1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOGRlNzljODUtMzAzYy0z ZjFjLWJjOTQtMWIxNTA0YmIxZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSC5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJb3WuSU2PhAMmKWEULSMgwUr49zBYgZfN5WIy8Lm0cI/8cBwczT+fAE tsvexRnonLzVxG4SOfhrU6Ab7wCWV2QVz0m54wLYRgrREnHqQN4EQrmTXPMAl36J Evdy2/e2mqISKmmx+0STIl2Q1i69lgGPwQEagNr40JCI8HtxlR0XbZv5eSX0AY+5 /xwPWpfPtOuOLy+LPOowXoEq6j79bOFhXwFdfH2RqIz6e/sz3fv8TXIe9/Qoe4Fj C7XHy/Og0Uoh1yRVVwO63J5Qv0/AI3EesxWFNA73KMXl6WpLz6sq7pPgdCjV4qMp DfczLBzP2hm3KJtdBZhjOsPsdpN0L1I= -----END CERTIFICATE-----Generated at Tue Oct 27 15:17:55 2026 by rpki-client