$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa File: 35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa (raw, json) Hash identifier: TNTCZHPAVbnsxPZ0Ki1SilbCv13JQwi2FTdkvM2g3Ps= Subject key identifier: 56:00:7D:1F:06:B8:36:92:E2:93:49:2A:4E:67:7F:A7:75:20:DE:5B Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584F4976193A50DE3C56D2F89080 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394437 IP address blocks: 72.20.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:19:3a:50:de:3c:56:d2:f8:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0559f169-4f4f-4485-97ca-95ea1ca6d4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:04:b0:c9:99:b7:2c:09:5c:b1:42:92:dc:6e: 2c:80:a5:52:af:7e:15:b8:90:7e:96:45:bb:1d:35: 42:38:d6:f5:4a:6f:cd:8d:ba:23:ac:59:50:bc:a2: 5b:b0:dc:9d:14:11:e0:ea:61:fd:67:da:bd:9e:a3: de:60:0d:7b:98:78:6a:49:82:b4:44:74:db:fc:9a: fb:89:f4:8e:cc:de:8a:52:e6:6c:db:20:d2:e3:84: fe:87:6e:c3:0e:3c:5e:f1:57:3d:b7:69:41:7a:bb: 52:4c:5a:0b:39:ff:92:c0:67:26:9b:01:fb:3a:59: 9c:54:17:2e:19:e7:ef:56:49:42:6a:48:32:f3:f7: 32:77:e4:60:42:da:df:e2:80:49:0d:c2:e8:68:2a: 28:46:5f:1b:13:47:bd:c4:e7:70:ca:f1:f3:8c:c9: 63:d8:68:01:17:ad:8b:8a:fb:46:9a:38:21:96:7e: 5f:6e:f2:b2:78:88:6c:ac:71:4d:4f:ea:82:01:59: ac:e1:25:a9:c9:39:e0:9c:87:2e:a3:5a:31:9a:2e: 02:33:33:a3:b6:9d:92:6c:1f:6e:23:1f:3f:7e:c0: 47:4c:ba:13:bf:cc:4d:7a:b5:ab:80:72:bb:7c:34: 22:c3:1a:24:3e:85:c0:84:ff:06:8b:24:75:f6:61: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:00:7D:1F:06:B8:36:92:E2:93:49:2A:4E:67:7F:A7:75:20:DE:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/35396bc4-0ed0-3b26-8fe5-c2883baf0997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3d:79:37:77:19:2c:1d:10:af:77:3c:f8:7d:22:5a:94:ee: 34:b8:a8:d5:63:a2:9b:f4:e7:11:b2:2b:e0:cd:a4:69:37:b9: aa:27:a3:a8:0b:29:d4:31:d1:db:bc:b0:3d:93:12:f6:3d:e1: 1a:4a:ba:33:8b:68:7b:ff:93:24:09:13:3e:89:8c:af:c8:36: 3d:45:84:b1:9d:27:01:a4:40:7a:17:05:a2:7c:94:f5:c0:e9: 71:62:fd:c6:5c:71:d9:f0:ad:39:4a:06:8c:61:b1:ca:b3:3a: 46:f5:3d:00:0c:e2:31:f8:ec:dc:5c:df:72:7e:53:ed:97:8d: ff:bc:22:4e:f4:4b:0c:aa:78:1e:f4:76:ed:b5:73:aa:de:d6: a0:f8:e8:ce:cd:59:a5:6b:c3:b3:a2:2a:91:6d:65:75:9e:f7: a9:19:32:a2:41:17:66:15:56:b3:b8:20:6c:e3:f0:a0:2d:d6: 94:39:a5:77:a1:1e:60:df:9e:03:1c:75:d6:a5:ac:5f:57:67: d8:5b:97:73:e6:ea:36:f5:60:95:92:60:cb:b9:6c:c6:2d:d6: 4a:52:49:27:cd:84:a7:05:0c:3f:2f:17:09:a3:a9:9d:6b:51: 03:5d:46:28:37:59:86:d2:30:42:01:76:9d:b6:e6:00:80:c5: e6:f5:ed:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdhk6UN48VtL4kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDU1OWYxNjktNGY0Zi00NDg1LTk3Y2EtOTVlYTFjYTZkNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gSwyZm3LAlcsUKS3G4sgKVSr34VuJB+lkW7 HTVCONb1Sm/NjbojrFlQvKJbsNydFBHg6mH9Z9q9nqPeYA17mHhqSYK0RHTb/Jr7 ifSOzN6KUuZs2yDS44T+h27DDjxe8Vc9t2lBertSTFoLOf+SwGcmmwH7OlmcVBcu GefvVklCakgy8/cyd+RgQtrf4oBJDcLoaCooRl8bE0e9xOdwyvHzjMlj2GgBF62L ivtGmjghln5fbvKyeIhsrHFNT+qCAVms4SWpyTngnIcuo1oxmi4CMzOjtp2SbB9u Ix8/fsBHTLoTv8xNerWrgHK7fDQiwxokPoXAhP8GiyR19mHvyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYAfR8GuDaS4pNJKk5nf6d1IN5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvMzUzOTZiYzQtMGVkMC0z YjI2LThmZTUtYzI4ODNiYWYwOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs9eTd3GSwdEK93PPh9IlqU7jS4qNVjopv05xGyK+DNpGk3uaono6gL KdQx0du8sD2TEvY94RpKujOLaHv/kyQJEz6JjK/INj1FhLGdJwGkQHoXBaJ8lPXA 6XFi/cZccdnwrTlKBoxhscqzOkb1PQAM4jH47Nxc33J+U+2Xjf+8Ik70SwyqeB70 du21c6re1qD46M7NWaVrw7OiKpFtZXWe96kZMqJBF2YVVrO4IGzj8KAt1pQ5pXeh HmDfngMcddalrF9XZ9hbl3Pm6jb1YJWSYMu5bMYt1kpSSSfNhKcFDD8vFwmjqZ1r UQNdRig3WYbSMEIBdp225gCAxeb17bg= -----END CERTIFICATE-----Generated at Mon Sep 28 19:17:49 2026 by rpki-client