$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa File: 0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa (raw, json) Hash identifier: lvZjI0mu+KWJP/RGy6UQepk2ufwoQresDbjOFtLDlBU= Subject key identifier: FE:5B:D3:67:AC:0B:1E:41:B1:CC:94:EB:71:08:01:F2:7E:15:03:1D Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584D1B1A1117537A9DB6860E9B00 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 394437 IP address blocks: 72.20.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:11:17:53:7a:9d:b6:86:0e:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=1936cb30-874b-49d0-9fc9-23e97fbb694b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:df:ba:ab:7e:b2:f2:3d:77:33:41:9f:55:54: 7b:08:5c:ce:b0:9e:4f:7c:9e:c0:c7:d0:bc:38:8e: 7e:53:5c:9a:48:96:cf:11:26:a5:69:17:2a:b6:51: 0b:1e:b2:9a:7a:af:15:42:ab:93:fe:b3:b2:27:0a: ff:70:b4:4b:b5:79:f4:82:3b:9b:74:9e:bd:5c:c4: d1:71:a3:19:98:c8:ca:f2:38:76:b8:fb:ec:99:93: 04:30:d9:86:44:b2:b6:f4:81:11:ad:05:3a:94:13: d0:48:b3:66:18:47:94:61:fb:ac:f9:cf:8c:bf:db: 81:25:fe:9f:5e:fb:97:fb:48:74:ff:84:3f:f4:7d: 47:c1:a3:cc:e7:84:80:c3:ae:71:8b:c4:a9:0b:25: 5e:62:2e:ed:9a:77:55:c7:94:43:8a:8d:89:38:dd: 81:0e:77:3f:ea:f1:bd:bf:77:b6:e4:9b:97:23:b1: ac:81:1f:e1:cf:e7:1d:eb:bd:fe:53:b8:44:26:9e: 7d:b8:04:ff:3b:c2:f7:26:93:33:7b:0f:01:0c:11: 0c:bc:3a:d2:34:da:10:bd:ac:52:f1:d2:ac:13:65: d7:ca:c7:20:3b:7e:b0:e3:06:31:74:37:b7:3b:06: a9:b9:89:25:4e:9c:ab:53:62:cc:25:ec:73:d2:8c: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5B:D3:67:AC:0B:1E:41:B1:CC:94:EB:71:08:01:F2:7E:15:03:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0ac56998-ab21-3f4b-adf7-85d516c1ae0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:90:1f:ae:dc:a5:b3:d7:02:96:bf:fc:a3:c4:d2:0b:3d:67: 83:07:30:28:0c:24:ca:13:73:5c:8d:8c:ea:7b:0e:61:41:ca: ca:91:89:e8:7f:93:2c:ce:2b:c5:9c:1d:8b:79:ac:94:85:b3: 11:b6:a2:4d:34:c4:58:85:ae:23:09:60:b7:c1:11:80:e4:6b: ae:02:f7:6e:f0:ac:8e:cc:c1:84:ee:c0:74:61:96:0e:6a:8f: f9:b3:d7:29:f5:92:e0:a8:92:c6:08:cc:f6:f0:2f:48:82:4e: 36:a6:3d:2e:e7:e1:9a:aa:73:4f:e2:47:e3:78:88:28:5b:2b: a0:48:43:e6:fc:1d:8e:2f:c2:f9:e4:ca:63:1c:45:a6:0e:b4: 48:88:31:4f:09:46:3b:57:2e:64:36:68:9a:f4:bb:8d:07:2b: 68:d7:b3:1a:b4:0d:69:67:2c:fa:7f:9d:9a:8a:14:e2:4f:b7: 84:94:91:ce:6d:58:11:21:71:88:c4:20:4b:3f:3a:6c:5f:04: cd:db:42:51:37:95:f9:b6:95:b0:d7:42:4f:7f:87:36:8f:b2: 61:96:eb:5e:cc:55:f9:cc:f0:a9:f3:39:48:8d:b0:c8:e9:73: ed:21:03:97:9c:c7:40:ac:3e:45:4f:84:58:76:e0:34:c6:91: 06:b1:0c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhEXU3qdtoYOmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MTkzNmNiMzAtODc0Yi00OWQwLTlmYzktMjNlOTdmYmI2OTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN+6q36y8j13M0GfVVR7CFzOsJ5PfJ7Ax9C8 OI5+U1yaSJbPESalaRcqtlELHrKaeq8VQquT/rOyJwr/cLRLtXn0gjubdJ69XMTR caMZmMjK8jh2uPvsmZMEMNmGRLK29IERrQU6lBPQSLNmGEeUYfus+c+Mv9uBJf6f XvuX+0h0/4Q/9H1HwaPM54SAw65xi8SpCyVeYi7tmndVx5RDio2JON2BDnc/6vG9 v3e25JuXI7GsgR/hz+cd673+U7hEJp59uAT/O8L3JpMzew8BDBEMvDrSNNoQvaxS 8dKsE2XXyscgO36w4wYxdDe3OwapuYklTpyrU2LMJexz0owOWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5b02esCx5BscyU63EIAfJ+FQMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMGFjNTY5OTgtYWIyMS0z ZjRiLWFkZjctODVkNTE2YzFhZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6QH67cpbPXApa//KPE0gs9Z4MHMCgMJMoTc1yNjOp7DmFBysqRieh/ kyzOK8WcHYt5rJSFsxG2ok00xFiFriMJYLfBEYDka64C927wrI7MwYTuwHRhlg5q j/mz1yn1kuCoksYIzPbwL0iCTjamPS7n4Zqqc0/iR+N4iChbK6BIQ+b8HY4vwvnk ymMcRaYOtEiIMU8JRjtXLmQ2aJr0u40HK2jXsxq0DWlnLPp/nZqKFOJPt4SUkc5t WBEhcYjEIEs/OmxfBM3bQlE3lfm2lbDXQk9/hzaPsmGW617MVfnM8KnzOUiNsMjp c+0hA5ecx0CsPkVPhFh24DTGkQaxDNY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:38:45 2026 by rpki-client