$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa File: 00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa (raw, json) Hash identifier: dJZVDyoK42jX0Ht6yIAxroSNUx6yOLHAMqD5hqf36gs= Subject key identifier: 3E:80:4E:F4:9C:43:04:33:75:28:0E:69:62:EB:72:AC:75:9E:5E:48 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584D1B1A118AC2B74F1CF9DD46C0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 394437 IP address blocks: 72.20.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:11:8a:c2:b7:4f:1c:f9:dd:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=c0313c7d-d2b2-46af-98b6-6647e28f523b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:db:4b:44:e8:4b:9a:ef:8d:03:73:8a:ac:f2: 7c:5a:56:58:7f:f7:5e:a2:d5:17:ef:6e:eb:33:9e: a1:0e:30:28:26:9e:3e:c8:8c:da:40:6e:47:00:65: 74:0f:40:0f:aa:e1:7f:fb:71:f7:1a:24:75:3f:03: 1a:89:cd:5c:4a:df:e1:af:16:c4:58:14:67:e3:6e: e7:b5:a7:e2:7f:d7:ad:1e:19:6d:98:ee:c6:67:0c: 58:dd:20:10:25:d3:d8:77:3a:d1:82:82:0b:2b:d5: 45:e7:c0:e8:59:21:e3:be:db:10:53:73:e0:9a:16: 96:ab:00:75:37:9c:bc:ab:1f:37:e5:6d:3d:95:1a: d7:ca:84:e8:b2:7b:fd:5e:34:ba:32:b3:32:16:96: 7c:d8:e2:da:1e:17:eb:27:a5:3e:b2:56:c1:99:1a: 07:f8:66:e0:25:3e:ca:c4:fa:38:76:15:75:79:a1: 79:87:ad:cc:84:88:15:ca:e2:a4:67:41:ad:c7:94: bd:29:60:65:fb:3e:b1:f5:4e:86:dd:10:29:d6:97: 12:3f:b5:44:02:56:8c:58:81:d5:b2:a2:1e:90:03: 97:f1:64:62:3b:e3:e4:e0:6d:54:1d:ce:90:96:97: 4e:28:a0:02:e2:20:95:e1:66:f0:e9:39:56:20:51: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:80:4E:F4:9C:43:04:33:75:28:0E:69:62:EB:72:AC:75:9E:5E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/00d84049-ce3d-38fd-8f7b-6b2c2b896787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:75:22:02:fb:fa:59:58:fd:4b:2f:f3:ab:03:85:63:8f:b1: a4:b2:0c:9d:29:ce:99:3d:44:7f:ed:75:e8:a6:1b:84:d0:84: fa:56:62:3f:43:53:6d:02:b3:03:43:fb:e6:1d:84:11:ea:cb: cc:a6:c4:b2:c7:4e:58:33:55:0f:78:5f:fd:f4:b5:52:41:a9: dc:5d:f9:69:bc:22:e8:d8:98:5e:7e:c9:83:77:9d:3c:6e:34: 65:6b:ea:aa:31:78:5c:40:f0:a9:a0:87:e0:2e:f7:de:41:a0: 24:3d:af:c4:b6:57:29:1e:8b:23:82:28:50:95:c8:5d:23:fe: 26:a1:44:d8:38:24:bd:31:e7:89:37:a1:37:ca:b8:2c:3e:43: c0:7b:68:97:5a:14:81:35:8a:5d:03:d7:62:2c:5b:f7:32:e5: b5:68:1f:c7:da:b4:66:68:a1:67:b9:38:62:9f:ad:83:90:1b: 0a:fd:48:10:27:80:f6:e6:19:08:bc:b6:38:b0:d2:05:78:9f: 54:06:4f:6d:83:15:1e:16:17:07:3a:4f:88:65:87:46:e7:19: 0b:09:e2:7e:e3:15:34:ac:c4:e7:d9:34:ec:1d:f3:0f:3b:3c: 96:73:0f:c3:d1:e7:5c:d1:70:f9:9d:7c:63:49:ae:44:02:ce: 8d:6f:20:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhGKwrdPHPndRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YzAzMTNjN2QtZDJiMi00NmFmLTk4YjYtNjY0N2UyOGY1MjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9tLROhLmu+NA3OKrPJ8WlZYf/deotUX727r M56hDjAoJp4+yIzaQG5HAGV0D0APquF/+3H3GiR1PwMaic1cSt/hrxbEWBRn427n tafif9etHhltmO7GZwxY3SAQJdPYdzrRgoILK9VF58DoWSHjvtsQU3PgmhaWqwB1 N5y8qx835W09lRrXyoTosnv9XjS6MrMyFpZ82OLaHhfrJ6U+slbBmRoH+GbgJT7K xPo4dhV1eaF5h63MhIgVyuKkZ0Gtx5S9KWBl+z6x9U6G3RAp1pcSP7VEAlaMWIHV sqIekAOX8WRiO+Pk4G1UHc6QlpdOKKAC4iCV4Wbw6TlWIFEmTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6ATvScQwQzdSgOaWLrcqx1nl5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMDBkODQwNDktY2UzZC0z OGZkLThmN2ItNmIyYzJiODk2Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZ1IgL7+llY/Usv86sDhWOPsaSyDJ0pzpk9RH/tdeimG4TQhPpWYj9D U20CswND++YdhBHqy8ymxLLHTlgzVQ94X/30tVJBqdxd+Wm8IujYmF5+yYN3nTxu NGVr6qoxeFxA8Kmgh+Au995BoCQ9r8S2VykeiyOCKFCVyF0j/iahRNg4JL0x54k3 oTfKuCw+Q8B7aJdaFIE1il0D12IsW/cy5bVoH8fatGZooWe5OGKfrYOQGwr9SBAn gPbmGQi8tjiw0gV4n1QGT22DFR4WFwc6T4hlh0bnGQsJ4n7jFTSsxOfZNOwd8w87 PJZzD8PR51zRcPmdfGNJrkQCzo1vIPI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:39:45 2026 by rpki-client