$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa File: 561680dd-d76f-3173-b887-f57d9e178ec2.roa (raw, json) Hash identifier: tb/x2HjtBufntLrOkk5g0UYzDKq5BFTZyAeLDO/w2gQ= Subject key identifier: DD:0A:2B:33:BA:80:8C:9B:73:CF:64:FC:CC:69:F1:42:0F:C2:93:0E Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584D1B1A113A8DCBD315B5D96900 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 394437 IP address blocks: 72.20.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:11:3a:8d:cb:d3:15:b5:d9:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=2ba67d68-2f02-4e11-9202-9180691e9a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:61:60:58:e7:dd:cf:63:80:85:63:db:43: ee:03:6a:ab:47:3e:7e:53:bc:c2:74:3a:01:75:5e: 89:54:b7:97:09:35:fe:11:64:05:ca:d1:fa:fe:9e: a6:a3:ef:96:71:86:d2:9b:ee:2c:7b:2d:c3:00:fb: 1e:d4:58:b7:33:c9:6d:b4:94:44:5e:19:77:fd:e9: 69:88:d9:5c:c8:f0:40:4b:be:02:38:92:79:a7:f3: 66:bf:36:e4:8f:83:0e:1f:54:bb:15:a4:17:ed:f3: 9c:e0:9d:df:58:cf:56:8c:11:ba:84:d2:e1:c0:b7: 31:f4:2b:20:fa:bc:dc:a8:db:4b:e4:2f:c3:b8:78: 4a:77:b3:66:10:58:1f:fb:7f:9c:74:fa:9f:c9:98: 6b:e4:fd:1f:ae:e8:8a:60:be:1f:3a:bd:f9:63:74: a0:1c:d9:0f:c8:a6:f4:7c:6c:4b:58:fe:9c:d1:6b: fb:77:e5:c7:8c:25:7e:35:6c:d3:a1:ef:ff:0f:25: 99:21:bd:55:78:96:8c:6d:5a:61:71:16:6d:38:06: d9:9e:bb:3f:0c:6a:2b:f0:2b:d8:ce:88:f8:cf:56: 04:39:5f:45:8a:3a:28:ba:64:b9:04:bf:e0:be:47: f2:d9:a7:df:6e:ce:b6:3e:4b:b9:a8:11:9a:07:d0: d4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0A:2B:33:BA:80:8C:9B:73:CF:64:FC:CC:69:F1:42:0F:C2:93:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/561680dd-d76f-3173-b887-f57d9e178ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:bd:f6:58:49:c1:8a:07:db:c5:a5:fd:28:d4:bc:98:06:cb: a1:52:f7:b8:9d:b6:4d:10:e0:52:7e:66:a2:c5:01:93:9b:c4: ca:51:0d:26:d2:21:78:62:ca:a3:e4:e1:a2:76:df:40:df:b8: d7:21:bd:8d:83:c7:a0:b7:f1:20:7e:8c:cd:d7:c1:2a:3f:4c: 00:cd:df:51:34:b4:20:82:32:78:f6:98:a3:f4:a4:bf:ae:9d: 95:b7:eb:57:8b:fe:b1:44:38:a2:f6:56:82:6b:b9:cc:45:14: 2f:e2:d3:11:39:43:bc:01:8b:3b:2d:68:95:94:57:ac:94:77: c9:bf:71:2c:68:08:c4:76:7e:48:04:42:46:0d:3c:9e:06:dc: 5b:22:8f:85:f5:50:b4:54:8e:85:ab:72:5f:a3:54:bf:41:c6: be:2b:fd:69:1a:c3:27:32:72:72:93:85:fe:a3:72:fd:17:f3: 38:b0:21:c7:da:90:f5:c4:12:72:6d:e3:9a:c4:c3:da:aa:ff: d7:d4:c3:f7:f8:33:2f:0f:5f:f8:fc:95:05:ea:c9:bd:f4:17: af:1e:e6:5f:2a:81:e0:c7:88:4d:02:33:d3:6c:39:6b:40:d6: 0f:ca:82:08:02:92:9d:cb:79:96:8b:e4:7b:aa:c8:70:d6:ea: 61:9a:5f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhE6jcvTFbXZaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MmJhNjdkNjgtMmYwMi00ZTExLTkyMDItOTE4MDY5MWU5YTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQlhYFjn3c9jgIVj20PuA2qrRz5+U7zCdDoB dV6JVLeXCTX+EWQFytH6/p6mo++WcYbSm+4sey3DAPse1Fi3M8lttJREXhl3/elp iNlcyPBAS74COJJ5p/Nmvzbkj4MOH1S7FaQX7fOc4J3fWM9WjBG6hNLhwLcx9Csg +rzcqNtL5C/DuHhKd7NmEFgf+3+cdPqfyZhr5P0fruiKYL4fOr35Y3SgHNkPyKb0 fGxLWP6c0Wv7d+XHjCV+NWzToe//DyWZIb1VeJaMbVphcRZtOAbZnrs/DGor8CvY zoj4z1YEOV9FijooumS5BL/gvkfy2affbs62Pku5qBGaB9DUZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0KKzO6gIybc89k/Mxp8UIPwpMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNTYxNjgwZGQtZDc2Zi0z MTczLWI4ODctZjU3ZDllMTc4ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW99lhJwYoH28Wl/SjUvJgGy6FS97idtk0Q4FJ+ZqLFAZObxMpRDSbS IXhiyqPk4aJ230DfuNchvY2Dx6C38SB+jM3XwSo/TADN31E0tCCCMnj2mKP0pL+u nZW361eL/rFEOKL2VoJrucxFFC/i0xE5Q7wBizstaJWUV6yUd8m/cSxoCMR2fkgE QkYNPJ4G3Fsij4X1ULRUjoWrcl+jVL9Bxr4r/WkawycycnKThf6jcv0X8ziwIcfa kPXEEnJt45rEw9qq/9fUw/f4My8PX/j8lQXqyb30F68e5l8qgeDHiE0CM9NsOWtA 1g/KgggCkp3LeZaL5HuqyHDW6mGaXyc= -----END CERTIFICATE-----Generated at Thu Mar 26 21:55:13 2026 by rpki-client