$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa File: 5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa (raw, json) Hash identifier: BijHwq93IMsutfW7elhT/HLh2O7/z880mMFOzn+RXls= Subject key identifier: D9:42:2C:D7:67:7D:6E:21:4E:D9:39:50:87:96:02:46:A7:76:EC:42 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584D1B1A11070D0C73AD5D939000 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 394437 IP address blocks: 72.20.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:11:07:0d:0c:73:ad:5d:93:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=46f476e6-7be7-472e-99df-fc92c8230d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:14:2b:a2:38:58:3b:eb:7e:b9:c6:e5:de: 45:d9:a3:d3:ee:51:b1:08:57:eb:bf:98:7e:cd:c2: 46:bc:ff:ef:ed:6b:d6:0f:b2:48:df:fb:5e:96:97: 84:bc:7e:bf:69:dc:df:02:04:fe:55:fc:76:4c:11: bc:db:e2:3d:b3:f0:53:ec:ac:58:00:66:38:32:de: 1c:f1:58:27:f2:c5:c3:b4:c4:72:31:1f:2b:97:db: 91:8f:ed:8e:cf:8b:de:82:94:26:ac:3a:7d:98:9b: c9:22:bf:5a:60:76:26:0b:45:de:e0:b1:bf:46:b8: ce:67:f4:40:8c:4d:7e:54:c1:7d:f0:b1:36:34:1c: 91:39:03:18:9a:f8:67:f0:14:2f:34:06:40:36:e4: 64:5f:42:04:a9:bc:f8:0c:5e:76:d0:b6:9a:b9:ea: 32:36:45:5a:f9:5e:64:1a:a6:74:d7:b3:bb:f4:60: 12:9c:c0:9a:0b:c4:51:53:f3:13:4b:ef:66:24:8d: af:c5:0f:47:82:f9:c3:78:51:ff:7e:4f:dc:cc:33: a6:a9:55:e4:5f:1b:99:bc:71:5b:4e:d7:1e:3c:ac: ff:88:cd:91:95:2a:98:79:b9:36:ce:29:a1:1e:92: b7:6b:ed:45:6d:6b:73:71:1c:f0:59:39:95:cd:43: 80:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:42:2C:D7:67:7D:6E:21:4E:D9:39:50:87:96:02:46:A7:76:EC:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/5fccf5ea-f5ef-304c-8808-dade90d7b4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0d:9a:45:21:51:45:89:7e:0c:cc:f3:a7:89:69:bd:03:74: fc:db:08:e9:9e:5d:66:20:8e:82:1d:cb:c2:71:bb:a6:08:a5: 3d:87:e1:ea:53:f5:7e:a5:92:70:61:80:31:69:68:c6:a8:7c: 44:5a:33:83:a0:d9:be:28:38:af:91:44:76:da:4d:f6:9e:2f: 3f:b2:8e:99:3a:c1:df:eb:4d:cb:92:12:8e:15:0d:44:aa:59: af:f9:03:07:b2:fe:43:de:1f:98:36:a6:4e:4d:fe:52:3f:3b: cf:71:35:3a:a5:9e:83:b0:b5:d8:97:3f:8a:a4:31:a2:b8:06: ec:2a:98:78:a6:72:94:e8:2f:44:d9:6d:bc:d2:8c:5e:27:99: 1b:06:24:b1:4a:8e:52:78:b4:e4:c7:53:93:c3:21:66:fe:bc: a6:11:1c:7e:f4:94:c8:54:5a:4d:c0:fd:4a:01:c3:3a:61:75: c6:56:ce:20:6a:16:68:c1:a5:c8:0b:dc:77:0f:5f:82:79:99: a5:ac:d6:53:fe:60:4d:6f:63:19:84:b0:d6:f1:dd:61:4a:5f: 78:c1:2a:ce:32:9f:db:4b:a9:a6:3e:11:38:8a:45:0e:a7:cc: 60:ec:98:69:f7:04:22:40:66:f7:04:8c:d0:c0:63:e6:52:0f: 51:af:bb:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhEHDQxzrV2TkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NDZmNDc2ZTYtN2JlNy00NzJlLTk5ZGYtZmM5MmM4MjMwZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPQUK6I4WDvrfrnG5d5F2aPT7lGxCFfrv5h+ zcJGvP/v7WvWD7JI3/telpeEvH6/adzfAgT+Vfx2TBG82+I9s/BT7KxYAGY4Mt4c 8Vgn8sXDtMRyMR8rl9uRj+2Oz4vegpQmrDp9mJvJIr9aYHYmC0Xe4LG/RrjOZ/RA jE1+VMF98LE2NByROQMYmvhn8BQvNAZANuRkX0IEqbz4DF520LaaueoyNkVa+V5k GqZ017O79GASnMCaC8RRU/MTS+9mJI2vxQ9HgvnDeFH/fk/czDOmqVXkXxuZvHFb TtcePKz/iM2RlSqYebk2zimhHpK3a+1FbWtzcRzwWTmVzUOAQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlCLNdnfW4hTtk5UIeWAkanduxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNWZjY2Y1ZWEtZjVlZi0z MDRjLTg4MDgtZGFkZTkwZDdiNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEINmkUhUUWJfgzM86eJab0DdPzbCOmeXWYgjoIdy8Jxu6YIpT2H4epT 9X6lknBhgDFpaMaofERaM4Og2b4oOK+RRHbaTfaeLz+yjpk6wd/rTcuSEo4VDUSq Wa/5Awey/kPeH5g2pk5N/lI/O89xNTqlnoOwtdiXP4qkMaK4BuwqmHimcpToL0TZ bbzSjF4nmRsGJLFKjlJ4tOTHU5PDIWb+vKYRHH70lMhUWk3A/UoBwzphdcZWziBq FmjBpcgL3HcPX4J5maWs1lP+YE1vYxmEsNbx3WFKX3jBKs4yn9tLqaY+ETiKRQ6n zGDsmGn3BCJAZvcEjNDAY+ZSD1GvuwA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:39:31 2026 by rpki-client