$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa File: 9b381475-2f37-3a66-a109-346ba5355fa0.roa (raw, json) Hash identifier: ibE7gAHM/5qtGs+3Hm5lDG3GfIGx/ztbQiO6gsOAtOM= Subject key identifier: 46:DE:2C:5B:85:04:CF:1A:97:78:2E:FF:F7:8F:CD:84:5B:6C:FF:23 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584E8DEFAAA95D7773E2208860C0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 394437 IP address blocks: 72.20.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:aa:a9:5d:77:73:e2:20:88:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=67a3014b-a7c6-4086-9c07-330f2b70ba7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d5:46:50:e2:64:ad:34:a6:65:43:00:62:4b: f7:92:5c:01:fb:47:8e:35:bf:6b:25:c9:31:47:21: 79:dd:b4:7f:f2:5c:2e:db:aa:c5:3a:d6:af:01:2c: f8:13:3a:d5:d6:3b:ca:7c:85:16:cd:bd:73:18:95: c7:de:09:d0:ae:51:6a:92:92:75:4e:4c:4a:8f:a0: fa:54:83:61:d8:42:08:bb:e5:f0:f1:bb:91:d2:d5: bb:14:0e:2e:a6:a5:64:9c:ca:39:16:01:ab:7c:98: 50:b3:c6:8a:16:c2:f9:0c:ee:3a:9e:8b:07:2c:c5: fe:86:86:b5:00:84:ee:cb:9e:d6:71:13:ea:5e:b5: e3:c3:c5:29:35:ab:4b:c3:ba:ca:2c:33:a6:c5:88: 05:0b:fa:66:d5:19:8e:c3:4d:ee:2d:1c:03:b3:a5: f9:bb:d2:02:e8:f0:ba:b9:f3:a4:5a:d1:c1:61:68: c6:fa:21:7c:76:5a:22:4b:e2:68:3f:e5:ec:0c:da: a1:9e:38:75:9c:b8:45:6f:8f:85:7f:81:81:26:05: 73:ea:ac:d4:5c:6a:fb:54:d5:00:01:f8:17:8a:49: a1:7d:69:78:25:b2:a2:08:b0:d2:95:7c:6e:20:6d: 9a:ea:02:73:80:94:52:fa:4b:0c:4b:74:ad:1d:98: 5d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DE:2C:5B:85:04:CF:1A:97:78:2E:FF:F7:8F:CD:84:5B:6C:FF:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:90:84:d7:f4:f6:60:57:25:0d:14:39:e0:4d:ff:17:bc:ec: 0e:18:79:ff:37:cf:e2:0a:3b:9c:53:c6:6c:3b:40:4f:b8:2b: 9f:f9:33:2f:22:29:e2:28:2f:60:0a:0d:93:8d:d0:ec:98:b3: 4c:25:90:3d:34:f8:97:34:20:f7:a8:47:14:04:71:ac:3f:aa: 25:d1:77:2f:24:cb:98:9a:5b:88:ed:70:34:49:a6:67:80:56: 0e:d8:83:4a:28:e8:02:dc:77:35:6c:62:4a:05:20:40:7f:63: c6:2e:87:3b:17:f4:f5:a6:34:c1:57:8e:92:73:8d:cb:c8:cf: 3b:b4:23:19:22:fb:56:bf:e7:dc:bd:8b:92:19:1e:2c:a7:bb: da:f0:26:0c:4e:41:53:57:76:f6:51:8f:e6:e3:b5:c5:b3:93: 52:68:0b:9a:37:03:4f:2b:d0:63:cb:14:6b:38:31:4e:fc:53: ef:13:c3:00:71:49:81:84:06:62:a7:b9:36:8a:22:e4:11:e9: cc:4b:3b:c2:73:47:76:43:5b:24:66:22:52:09:df:ae:6c:ea: 30:e9:79:f7:dc:6b:cd:86:04:74:5d:89:46:c7:03:3a:ee:f2: 9d:b8:4f:cd:be:6f:7d:8f:b6:f2:9a:d4:bf:ff:58:26:48:f3: e3:75:5d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N76qpXXdz4iCIYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk NjdhMzAxNGItYTdjNi00MDg2LTljMDctMzMwZjJiNzBiYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtVGUOJkrTSmZUMAYkv3klwB+0eONb9rJckx RyF53bR/8lwu26rFOtavASz4EzrV1jvKfIUWzb1zGJXH3gnQrlFqkpJ1TkxKj6D6 VINh2EIIu+Xw8buR0tW7FA4upqVknMo5FgGrfJhQs8aKFsL5DO46nosHLMX+hoa1 AITuy57WcRPqXrXjw8UpNatLw7rKLDOmxYgFC/pm1RmOw03uLRwDs6X5u9IC6PC6 ufOkWtHBYWjG+iF8dloiS+JoP+XsDNqhnjh1nLhFb4+Ff4GBJgVz6qzUXGr7VNUA AfgXikmhfWl4JbKiCLDSlXxuIG2a6gJzgJRS+ksMS3StHZhd2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbeLFuFBM8al3gu//ePzYRbbP8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOWIzODE0NzUtMmYzNy0z YTY2LWExMDktMzQ2YmE1MzU1ZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqQhNf09mBXJQ0UOeBN/xe87A4Yef83z+IKO5xTxmw7QE+4K5/5My8i KeIoL2AKDZON0OyYs0wlkD00+Jc0IPeoRxQEcaw/qiXRdy8ky5iaW4jtcDRJpmeA Vg7Yg0oo6ALcdzVsYkoFIEB/Y8YuhzsX9PWmNMFXjpJzjcvIzzu0Ixki+1a/59y9 i5IZHiynu9rwJgxOQVNXdvZRj+bjtcWzk1JoC5o3A08r0GPLFGs4MU78U+8TwwBx SYGEBmKnuTaKIuQR6cxLO8JzR3ZDWyRmIlIJ365s6jDpeffca82GBHRdiUbHAzru 8p24T82+b32PtvKa1L//WCZI8+N1Xck= -----END CERTIFICATE-----Generated at Thu Jul 23 21:58:01 2026 by rpki-client