$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa File: 4776edfc-bc46-3221-b5cc-4294fec1d431.roa (raw, json) Hash identifier: dOZUD8thwF1qvyH+uSts/lgJyzCPjuCYVoeUr6o73Ww= Subject key identifier: D1:91:6E:98:AE:0F:3D:B2:AA:7C:C9:F9:8A:82:37:17:DA:93:ED:97 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584D1B1A10F7DA7406A02288B300 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 394437 IP address blocks: 72.20.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:10:f7:da:74:06:a0:22:88:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=668406cd-2682-433d-b707-1b9e9debf042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:55:6d:b8:18:f1:c5:3b:41:1d:b4:ee:4a: 0b:e8:09:9d:14:6d:7c:f8:3f:0a:15:eb:e6:ec:59: 5b:f6:60:47:9e:04:af:11:d9:29:33:29:5b:6f:46: 51:22:a1:31:6c:45:99:66:cf:a0:b1:01:bd:30:9f: 5e:9d:07:cd:d6:0a:d8:9a:8b:4c:0a:bc:46:39:df: 23:e9:38:5e:f5:49:54:e5:36:35:e6:83:34:0b:eb: 77:77:87:72:b5:7c:5e:9b:fe:32:b6:d2:cf:4b:0b: 6c:b1:19:f8:e5:cf:af:32:e8:3d:70:6a:41:7f:de: 8e:f0:ad:1d:45:46:cb:fd:82:5d:0e:60:09:40:fc: 20:96:87:6d:f3:74:30:26:6f:62:2e:9f:9a:a1:c9: 6a:36:0e:19:0d:94:2a:63:9a:cb:66:88:66:6b:5d: a8:f9:17:e7:62:ca:7c:36:0a:42:36:cc:11:0d:a9: c5:04:88:53:e3:6c:41:6b:52:8c:34:ba:c3:3f:c4: 5b:79:45:4d:0c:d1:34:4f:cd:b1:6f:2f:b0:b0:32: 8f:4f:19:27:39:0f:19:95:ea:09:20:be:ad:90:ed: 0d:d1:1e:ee:70:97:17:b4:dc:93:0b:08:0d:8c:a6: 4c:af:26:17:06:d9:0a:92:43:d0:19:2e:95:af:75: 8c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:91:6E:98:AE:0F:3D:B2:AA:7C:C9:F9:8A:82:37:17:DA:93:ED:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:49:10:ed:2e:9c:fe:f1:90:72:45:9c:1d:4e:4f:3f:23:9e: 76:00:79:ba:1b:cc:51:80:4c:34:9c:50:52:71:45:34:e9:1f: 31:bf:ed:51:5b:6a:29:48:7c:d6:82:36:a0:ea:29:e4:76:f7: 61:fb:6c:76:ce:03:70:80:ab:d4:0d:3b:c7:20:e3:aa:69:3c: 61:29:3f:4f:9f:f3:3d:41:4c:76:34:5c:72:9e:23:00:a6:8a: 3a:1c:b2:69:6e:89:9d:70:2c:0d:5e:fd:c8:e5:88:e0:de:1b: 01:09:c4:b9:eb:1c:9c:cc:64:28:bf:90:80:64:4c:b3:4b:81: bb:f4:76:6f:3a:c6:21:af:b8:0d:00:cd:4b:76:27:69:2d:35: 14:fa:38:c8:45:ff:74:00:34:47:e8:37:91:4d:34:5a:14:04: 93:86:35:22:a3:c0:3f:41:2d:fe:89:64:3d:30:76:10:27:a4: 06:6e:b1:ee:12:58:2a:88:80:f6:00:44:32:31:7b:d6:36:6b: 00:5e:f8:66:56:98:9e:b0:11:ad:6b:18:6a:15:e5:82:c6:2b: c0:d8:c1:f1:a6:78:93:e5:c6:5f:1c:5b:7f:f2:fd:f6:43:4a: 4e:39:c0:77:7e:fd:d2:26:9e:23:9b:2a:31:cd:21:d6:d1:3b: 4f:99:e4:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhD32nQGoCKIswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NjY4NDA2Y2QtMjY4Mi00MzNkLWI3MDctMWI5ZTlkZWJmMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocRVbbgY8cU7QR207koL6AmdFG18+D8KFevm 7Flb9mBHngSvEdkpMylbb0ZRIqExbEWZZs+gsQG9MJ9enQfN1grYmotMCrxGOd8j 6The9UlU5TY15oM0C+t3d4dytXxem/4yttLPSwtssRn45c+vMug9cGpBf96O8K0d RUbL/YJdDmAJQPwglodt83QwJm9iLp+aoclqNg4ZDZQqY5rLZohma12o+RfnYsp8 NgpCNswRDanFBIhT42xBa1KMNLrDP8RbeUVNDNE0T82xby+wsDKPTxknOQ8ZleoJ IL6tkO0N0R7ucJcXtNyTCwgNjKZMryYXBtkKkkPQGS6Vr3WMcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGRbpiuDz2yqnzJ+YqCNxfak+2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNDc3NmVkZmMtYmM0Ni0z MjIxLWI1Y2MtNDI5NGZlYzFkNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtJEO0unP7xkHJFnB1OTz8jnnYAebobzFGATDScUFJxRTTpHzG/7VFb ailIfNaCNqDqKeR292H7bHbOA3CAq9QNO8cg46ppPGEpP0+f8z1BTHY0XHKeIwCm ijocsmluiZ1wLA1e/cjliODeGwEJxLnrHJzMZCi/kIBkTLNLgbv0dm86xiGvuA0A zUt2J2ktNRT6OMhF/3QANEfoN5FNNFoUBJOGNSKjwD9BLf6JZD0wdhAnpAZuse4S WCqIgPYARDIxe9Y2awBe+GZWmJ6wEa1rGGoV5YLGK8DYwfGmeJPlxl8cW3/y/fZD Sk45wHd+/dImniObKjHNIdbRO0+Z5Fo= -----END CERTIFICATE-----Generated at Thu Mar 26 18:54:56 2026 by rpki-client