$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa File: b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa (raw, json) Hash identifier: tYmaBU0tghoZF18oZLy/581d/Z9FFUeWF1f9TaQU2ks= Subject key identifier: D4:73:5D:46:2C:0B:AE:0E:6A:74:DC:81:A6:4D:99:D5:FE:BC:3A:05 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584DFBD5E84C14FB29E89FCEAD00 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 394437 IP address blocks: 74.124.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Jun 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:e8:4c:14:fb:29:e8:9f:ce:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=d37b3ffe-a5db-4201-b1f1-f5967b189196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:d4:5c:86:8c:92:df:46:4d:02:f2:d1:5f: eb:8c:d5:2e:e8:da:90:5b:67:ee:e8:97:79:ed:d0: 3b:4a:68:6f:16:ee:4f:58:40:55:ec:de:ce:4f:c8: ca:3a:22:bc:e9:09:c8:64:3b:c0:3c:0d:58:3d:98: 1b:2d:43:28:83:3b:8f:c4:7a:1f:7d:9c:e8:57:1b: 4a:25:7e:4d:6e:9e:9f:68:33:cd:e4:aa:da:89:1f: 95:4d:d2:57:bc:02:9e:48:13:7d:29:91:4b:9b:b4: 7e:a7:a7:e1:c1:50:c2:4c:7f:fb:13:3d:b4:83:29: 24:c2:cc:b1:06:44:48:8b:df:2e:b6:d1:1b:1f:b5: e4:cf:1d:49:fa:e4:c9:8a:d8:8b:21:52:05:0e:99: 60:f8:62:a3:c8:ec:cb:0d:24:2c:fd:70:2a:9c:2a: bc:08:40:c8:91:86:9e:5d:9b:c5:ba:81:e5:7b:41: 10:8b:c9:f7:8d:f0:47:f2:07:6e:2b:a8:44:3f:e8: 58:a1:8f:f0:62:10:c8:36:6f:c0:99:8a:8a:8d:5e: c0:47:36:94:4c:ee:6d:47:60:92:17:3a:7e:f6:68: 08:be:28:6a:e0:5b:09:8c:b3:7c:46:c0:63:d5:77: 7f:35:c1:f8:88:68:bc:0b:50:3a:10:18:51:91:ff: 66:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:73:5D:46:2C:0B:AE:0E:6A:74:DC:81:A6:4D:99:D5:FE:BC:3A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 74.124.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:c2:16:fb:fd:43:cf:2c:aa:60:16:3c:4f:4a:90:56:ad:10: 96:70:b3:9c:cd:3a:cc:ab:f8:6c:5c:33:fa:4b:a7:f2:85:73: 7b:6f:31:8d:cd:7d:44:93:d4:a5:45:1b:16:7c:08:b9:37:a0: 3f:70:93:b2:9d:dd:78:b0:6c:9f:90:eb:a2:1e:4c:b9:21:ec: 25:d8:7a:54:e5:92:da:45:13:62:64:25:d1:db:63:f2:a9:45: 77:a3:b1:53:bb:91:c2:b4:ec:ba:ef:08:0a:50:5e:ca:e5:60: 0e:cd:8c:b4:33:4c:e1:17:94:d9:62:b8:e6:64:18:7e:f3:6d: fc:84:4a:61:47:e9:04:3c:15:32:dd:a1:63:d4:9a:95:62:71: de:55:0e:23:bd:87:15:bc:13:8c:68:f5:13:7b:e4:aa:5f:a2: 25:6d:d0:94:ff:bc:e5:c1:62:31:03:ca:19:d5:40:a1:38:0a: 72:e0:56:c9:bb:e7:67:ce:3a:07:63:f5:d2:bd:4d:91:53:e8: 5e:d1:f8:17:17:40:dc:6a:fd:8b:33:5a:ea:03:52:6b:2e:2f: 7c:54:e8:90:45:d4:90:10:84:1c:26:bd:29:2d:68:51:16:01: 7b:fd:ed:40:0e:49:d3:0d:41:22:4d:5e:3d:ca:a2:f7:4b:64: f5:61:34:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371ehMFPsp6J/OrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk ZDM3YjNmZmUtYTVkYi00MjAxLWIxZjEtZjU5NjdiMTg5MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswPUXIaMkt9GTQLy0V/rjNUu6NqQW2fu6Jd5 7dA7SmhvFu5PWEBV7N7OT8jKOiK86QnIZDvAPA1YPZgbLUMogzuPxHoffZzoVxtK JX5Nbp6faDPN5KraiR+VTdJXvAKeSBN9KZFLm7R+p6fhwVDCTH/7Ez20gykkwsyx BkRIi98uttEbH7Xkzx1J+uTJitiLIVIFDplg+GKjyOzLDSQs/XAqnCq8CEDIkYae XZvFuoHle0EQi8n3jfBH8gduK6hEP+hYoY/wYhDINm/AmYqKjV7ARzaUTO5tR2CS Fzp+9mgIvihq4FsJjLN8RsBj1Xd/NcH4iGi8C1A6EBhRkf9mJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRzXUYsC64OanTcgaZNmdX+vDoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvYjJhMmUxN2MtYzc2OC0z ZDc4LWEzOGEtMGY1NjdjZjEyNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMvCFvv9Q88sqmAWPE9KkFatEJZws5zNOsyr+GxcM/pLp/KFc3tvMY3N fUST1KVFGxZ8CLk3oD9wk7Kd3XiwbJ+Q66IeTLkh7CXYelTlktpFE2JkJdHbY/Kp RXejsVO7kcK07LrvCApQXsrlYA7NjLQzTOEXlNliuOZkGH7zbfyESmFH6QQ8FTLd oWPUmpVicd5VDiO9hxW8E4xo9RN75KpfoiVt0JT/vOXBYjEDyhnVQKE4CnLgVsm7 52fOOgdj9dK9TZFT6F7R+BcXQNxq/YszWuoDUmsuL3xU6JBF1JAQhBwmvSktaFEW AXv97UAOSdMNQSJNXj3KovdLZPVhNH8= -----END CERTIFICATE-----Generated at Sun May 31 02:37:34 2026 by rpki-client