$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/3d884570-87a9-34e5-b8d7-d777763d0b30.roa File: 3d884570-87a9-34e5-b8d7-d777763d0b30.roa (raw, json) Hash identifier: BLuaM34Joxjn0voBk/48OKHu0XlXowstxOKiNP8cgT0= Subject key identifier: 95:7D:18:C6:9E:13:B9:4A:9F:D8:97:D1:D5:DE:83:63:53:20:F9:D2 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584F497618B00FF380CEF4B9DEC0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/3d884570-87a9-34e5-b8d7-d777763d0b30.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394437 IP address blocks: 72.20.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:18:b0:0f:f3:80:ce:f4:b9:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ee368503-e318-43dd-8758-1b9e63e1b28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:5c:12:9c:d8:98:89:58:1e:97:ac:3f:c4: 9d:26:72:77:e1:f4:87:57:d1:da:87:32:c9:df:40: 2e:92:b6:28:6c:a2:c5:49:a1:54:74:5e:d6:c8:a2: d8:74:99:20:64:a0:10:d8:27:a0:fc:37:ad:b8:09: be:23:59:a9:1a:f9:bb:14:f3:47:37:51:0b:d2:4d: 2c:d5:29:32:76:9a:8a:a6:1e:95:58:f5:93:0b:29: 7e:ba:b1:e4:84:91:2d:da:27:1d:6a:bc:79:4e:d8: b5:55:b3:7f:ab:5e:2d:ff:ea:87:41:c6:fd:0a:15: 3a:30:50:43:c6:20:56:96:4b:c4:3d:16:f3:6a:24: 2f:49:9f:d9:cb:df:2b:d1:66:b8:73:c4:b8:27:14: 83:3d:cb:ad:cb:ce:97:8e:ea:f6:f1:86:38:16:42: ac:ec:8b:a0:b6:9e:86:3d:e0:5a:eb:ef:9e:dc:25: 35:bf:3a:d8:77:7a:86:c2:1d:d9:1f:33:81:49:2d: c5:a2:b4:87:61:f5:4a:73:ab:f1:5d:5d:7d:35:1c: e4:ad:3f:19:93:25:08:4d:45:3b:5c:20:ce:8d:55: 3f:6a:8e:f8:e2:b9:e0:eb:34:6d:63:d9:4f:36:d9: 50:80:a9:83:48:ac:ef:16:dc:98:65:0a:cf:5c:4f: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7D:18:C6:9E:13:B9:4A:9F:D8:97:D1:D5:DE:83:63:53:20:F9:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/3d884570-87a9-34e5-b8d7-d777763d0b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:4d:7f:ae:e9:22:37:7b:49:72:82:f2:13:06:45:65:a9:48: a3:4a:13:ae:40:f1:a7:14:8f:48:3a:0f:70:9e:6c:97:95:23: 26:55:95:e6:9f:a1:f4:45:ba:8d:50:9c:b0:d6:95:ea:86:6b: d3:a7:86:9f:93:13:a9:f6:cd:7a:9e:ac:46:ab:da:af:30:0d: f5:47:70:ed:a8:09:41:05:85:e1:88:2b:66:6f:df:b1:eb:5a: 9a:3a:e5:bb:90:57:ea:c4:e3:0a:04:e0:6e:1e:e6:56:e5:9b: 1e:ab:94:0f:24:b8:6f:7e:b2:09:a8:dc:03:d1:bb:38:35:a2: 5d:e6:7d:72:2c:64:00:6b:99:03:d4:b9:94:6e:3d:d8:40:d7: 14:f1:e6:3d:77:4b:ef:71:12:81:e8:31:93:06:4d:c3:56:5f: f0:f7:d3:d3:ce:5c:ff:00:a8:21:9f:08:d4:9c:24:60:ae:43: e3:37:af:87:ac:af:d1:fe:f8:89:a7:90:57:5e:30:39:ac:6c: 4f:12:de:db:2b:63:6f:26:93:d3:b9:6c:03:2c:4f:7a:e9:07: 51:27:0f:4a:9a:4f:10:fb:b1:01:50:d0:2c:56:b2:2b:0f:14: 1c:7b:bc:56:46:5c:56:ff:eb:54:d3:a6:28:41:d9:25:8e:01: 3f:9d:9b:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdhiwD/OAzvS53sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWUzNjg1MDMtZTMxOC00M2RkLTg3NTgtMWI5ZTYzZTFiMjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3dcEpzYmIlYHpesP8SdJnJ34fSHV9HahzLJ 30AukrYobKLFSaFUdF7WyKLYdJkgZKAQ2Ceg/DetuAm+I1mpGvm7FPNHN1EL0k0s 1SkydpqKph6VWPWTCyl+urHkhJEt2icdarx5Tti1VbN/q14t/+qHQcb9ChU6MFBD xiBWlkvEPRbzaiQvSZ/Zy98r0Wa4c8S4JxSDPcuty86Xjur28YY4FkKs7Iugtp6G PeBa6++e3CU1vzrYd3qGwh3ZHzOBSS3ForSHYfVKc6vxXV19NRzkrT8ZkyUITUU7 XCDOjVU/ao744rng6zRtY9lPNtlQgKmDSKzvFtyYZQrPXE+5NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV9GMaeE7lKn9iX0dXeg2NTIPnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvM2Q4ODQ1NzAtODdhOS0z NGU1LWI4ZDctZDc3Nzc2M2QwYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlNf67pIjd7SXKC8hMGRWWpSKNKE65A8acUj0g6D3CebJeVIyZVleaf ofRFuo1QnLDWleqGa9Onhp+TE6n2zXqerEar2q8wDfVHcO2oCUEFheGIK2Zv37Hr Wpo65buQV+rE4woE4G4e5lblmx6rlA8kuG9+sgmo3APRuzg1ol3mfXIsZABrmQPU uZRuPdhA1xTx5j13S+9xEoHoMZMGTcNWX/D309POXP8AqCGfCNScJGCuQ+M3r4es r9H++ImnkFdeMDmsbE8S3tsrY28mk9O5bAMsT3rpB1EnD0qaTxD7sQFQ0CxWsisP FBx7vFZGXFb/61TTpihB2SWOAT+dm28= -----END CERTIFICATE-----Generated at Thu Oct 1 23:44:34 2026 by rpki-client