$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa File: 2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa (raw, json) Hash identifier: FGsGV43tLTikcV2/bL2A5JbzRFNr4pqdzdqemWfXR2w= Subject key identifier: 21:99:FC:BD:FC:A4:53:BC:A7:E6:D0:88:D2:38:C4:DE:67:58:F9:D4 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584D1B1A116925C20AD0EBD2AB60 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 394437 IP address blocks: 72.20.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:11:69:25:c2:0a:d0:eb:d2:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=280971e7-d2c1-4d21-aef9-fc26ae448812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c0:e8:bc:b4:86:52:c2:21:df:7b:04:13:b6: 31:44:e9:df:3b:8a:27:f1:cd:ef:1f:fc:10:c2:c8: 78:26:76:d4:13:9e:34:62:7f:00:87:8a:7f:f3:62: 8b:83:a7:e2:c3:b8:06:ba:ed:a5:8e:64:d7:d5:50: 47:3c:ae:80:79:bd:fc:a0:22:d9:a4:46:9b:3b:b5: ca:b2:4e:1d:6c:10:1a:58:b9:cb:ea:1a:3e:5b:e8: f0:85:af:f1:93:42:dd:56:97:1b:9b:ed:9b:fd:0f: 3e:3a:e4:6c:03:1c:4c:81:70:a9:69:80:d7:04:2b: e0:05:35:56:04:e7:ce:7c:4d:31:88:26:64:93:7f: 32:b9:e4:c3:2d:2f:56:83:08:b2:0e:a7:b3:6b:13: a9:58:d0:66:72:49:6d:02:6c:87:09:63:61:f7:6d: 91:03:44:d0:24:67:53:d3:ea:23:56:c1:11:12:46: 4b:f2:a9:a2:e1:b7:d9:40:40:ca:77:6b:15:ff:59: bf:2f:4e:73:ef:37:71:7b:fb:a0:99:86:16:23:7a: e3:a8:c0:35:03:e1:91:f3:89:72:2f:a4:82:d0:4b: 0a:9f:57:24:cf:62:c0:5a:e5:e7:ad:1c:9a:76:7d: fd:de:21:7b:d8:2c:ec:60:42:72:7b:17:a2:16:a2: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:99:FC:BD:FC:A4:53:BC:A7:E6:D0:88:D2:38:C4:DE:67:58:F9:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/2e00404c-6f0e-396c-ad3a-c00ae78f7f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:61:c0:a5:b0:e3:3c:60:da:d6:4b:83:3b:71:62:1d:f1:6b: cc:75:05:fd:a7:1d:97:23:65:f7:81:8c:ff:97:bc:45:64:5f: 04:a8:02:e4:c6:d4:b9:92:7a:fa:2b:90:9f:7f:d4:3f:2b:b8: 80:90:06:6e:46:09:ff:c7:7f:a5:c8:c8:2c:9b:4e:de:50:a7: 33:7a:86:45:24:cd:92:b7:92:d7:9c:ae:f6:95:e3:aa:9c:97: d7:c5:73:cb:b2:c7:84:8e:e6:a7:2d:dc:fe:c8:40:fd:03:0c: 99:63:85:f5:de:29:0c:5d:fb:68:3c:6a:f2:cc:41:7b:ed:9b: 16:4a:d1:19:54:46:7a:9b:6f:d6:c1:5e:e3:5d:67:31:79:5a: 4c:db:74:77:7d:eb:63:e3:24:21:5e:7d:f7:b2:82:8d:a6:bb: e3:cc:8d:87:43:75:14:fc:8e:8a:6c:f5:f0:cf:ed:1a:67:89: df:64:7a:9e:3d:9e:e4:a1:4d:f5:c9:61:f3:d1:2a:05:b2:2b: 7b:d4:3b:c7:65:58:2e:86:dd:5d:6e:5e:51:14:87:d8:cd:54: d1:99:dd:1b:fd:4a:32:38:ce:38:fa:1b:ff:c1:14:d6:23:00: aa:94:15:1d:9f:36:0d:25:dc:f7:f8:60:e1:78:a5:08:fb:66: 01:2d:bf:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhFpJcIK0OvSq2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MjgwOTcxZTctZDJjMS00ZDIxLWFlZjktZmMyNmFlNDQ4ODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksDovLSGUsIh33sEE7YxROnfO4on8c3vH/wQ wsh4JnbUE540Yn8Ah4p/82KLg6fiw7gGuu2ljmTX1VBHPK6Aeb38oCLZpEabO7XK sk4dbBAaWLnL6ho+W+jwha/xk0LdVpcbm+2b/Q8+OuRsAxxMgXCpaYDXBCvgBTVW BOfOfE0xiCZkk38yueTDLS9WgwiyDqezaxOpWNBmckltAmyHCWNh922RA0TQJGdT 0+ojVsEREkZL8qmi4bfZQEDKd2sV/1m/L05z7zdxe/ugmYYWI3rjqMA1A+GR84ly L6SC0EsKn1ckz2LAWuXnrRyadn393iF72CzsYEJyexeiFqLE6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGZ/L38pFO8p+bQiNI4xN5nWPnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMmUwMDQwNGMtNmYwZS0z OTZjLWFkM2EtYzAwYWU3OGY3ZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1hwKWw4zxg2tZLgztxYh3xa8x1Bf2nHZcjZfeBjP+XvEVkXwSoAuTG 1LmSevorkJ9/1D8ruICQBm5GCf/Hf6XIyCybTt5QpzN6hkUkzZK3ktecrvaV46qc l9fFc8uyx4SO5qct3P7IQP0DDJljhfXeKQxd+2g8avLMQXvtmxZK0RlURnqbb9bB XuNdZzF5WkzbdHd962PjJCFeffeygo2mu+PMjYdDdRT8jops9fDP7Rpnid9kep49 nuShTfXJYfPRKgWyK3vUO8dlWC6G3V1uXlEUh9jNVNGZ3Rv9SjI4zjj6G//BFNYj AKqUFR2fNg0l3Pf4YOF4pQj7ZgEtv6M= -----END CERTIFICATE-----Generated at Thu Mar 26 17:39:38 2026 by rpki-client