$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa File: 9b381475-2f37-3a66-a109-346ba5355fa0.roa (raw, json) Hash identifier: 2NxGfrYGwLaqau334lrkEBPkSqTjVllhOU+faO10Rsg= Subject key identifier: 7A:95:1D:DB:A5:6D:3E:A5:42:22:10:F9:1F:03:B8:54:E9:2C:B2:15 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584DADAAE36D8BAD31A72EA536A0 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 394437 IP address blocks: 72.20.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e3:6d:8b:ad:31:a7:2e:a5:36:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=275eacfb-931c-4ea4-beca-24c6494fe94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b1:6f:02:f0:52:47:ed:ec:5d:31:f3:9e:e8: 57:5a:21:48:d2:82:54:01:1c:70:71:6e:b5:73:92: 4f:e9:39:2c:e3:e4:57:cd:41:b1:39:ed:25:4e:fd: 57:1e:c9:2f:30:f7:c5:8b:8e:5a:35:27:ce:8a:c3: d5:09:5e:99:cd:c3:27:2a:fe:6b:09:a7:2b:33:31: f5:2d:97:2c:41:ea:af:ab:8f:71:fd:a7:32:f7:fd: d1:99:3b:b2:43:8c:1a:63:62:9a:3b:91:a0:d4:08: e9:64:d9:06:ec:63:b2:10:54:ed:27:32:54:e7:3a: 7d:68:22:89:d8:b9:9c:f5:8f:62:c2:e9:e1:4c:d5: f9:60:8e:02:3b:f7:1a:2b:7a:3f:7b:89:49:92:d7: 81:67:f3:fe:6c:e0:d4:d8:76:0b:df:b3:e8:38:55: 04:fb:8c:a2:48:06:02:ca:73:1a:f2:6f:f2:3d:71: 24:df:27:2b:fb:d9:f8:eb:2d:59:b2:f0:f3:93:57: 23:26:6a:24:50:ec:e0:c7:41:7c:bd:ff:7c:4e:2a: 20:1f:8f:74:0d:28:be:55:15:6f:34:62:11:06:7c: dd:8a:32:64:ff:67:d9:1c:29:2e:99:16:82:af:ca: c4:85:28:5d:a6:25:d6:a8:9b:6d:9e:6b:5d:b4:04: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:95:1D:DB:A5:6D:3E:A5:42:22:10:F9:1F:03:B8:54:E9:2C:B2:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9b381475-2f37-3a66-a109-346ba5355fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5c:a5:99:0e:d6:9d:b4:a8:35:dc:a5:d0:c8:a9:80:34:73: db:57:e8:08:b3:67:24:f7:82:6d:b6:66:af:f2:20:a3:ca:ee: bb:4f:39:8a:7e:9c:5a:68:7a:39:b3:38:b3:da:e3:f7:5e:41: 7e:b7:85:37:86:1d:b2:2f:fa:30:f4:d8:8c:d6:d6:ad:8d:5c: a9:b6:5e:e9:ef:4d:6a:d6:b1:f4:7b:67:e1:ed:28:91:4f:52: a5:f4:c9:8c:6c:13:87:f1:13:5a:a9:51:74:21:92:ed:f1:13: c1:38:7e:13:7e:8c:79:cf:c0:8a:88:a6:54:35:2c:f3:40:00: ef:be:5c:57:bc:e7:6f:90:8f:87:73:92:3f:03:f0:c7:39:b2: a2:1d:5a:38:ae:a4:4a:f4:1a:05:a3:5b:a1:42:ac:ee:3f:b7: 19:4d:39:96:ff:63:79:81:e1:36:9b:b6:be:ec:7c:15:37:b9: 78:f6:04:72:ce:74:bb:39:9b:75:1e:1f:96:6d:d9:74:bb:0e: 9e:85:14:23:db:a1:32:75:b5:79:92:96:8c:ea:39:03:80:c3: e5:6e:74:46:21:94:7e:41:9d:49:3e:cb:6a:64:82:35:11:52: fc:34:15:0e:e5:a8:8b:e4:f8:65:a4:f8:17:86:02:0f:99:82: b1:e1:4a:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tquNti60xpy6lNqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk Mjc1ZWFjZmItOTMxYy00ZWE0LWJlY2EtMjRjNjQ5NGZlOTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLFvAvBSR+3sXTHznuhXWiFI0oJUARxwcW61 c5JP6Tks4+RXzUGxOe0lTv1XHskvMPfFi45aNSfOisPVCV6ZzcMnKv5rCacrMzH1 LZcsQeqvq49x/acy9/3RmTuyQ4waY2KaO5Gg1AjpZNkG7GOyEFTtJzJU5zp9aCKJ 2Lmc9Y9iwunhTNX5YI4CO/caK3o/e4lJkteBZ/P+bODU2HYL37PoOFUE+4yiSAYC ynMa8m/yPXEk3ycr+9n46y1ZsvDzk1cjJmokUOzgx0F8vf98TiogH490DSi+VRVv NGIRBnzdijJk/2fZHCkumRaCr8rEhShdpiXWqJttnmtdtAThRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqVHdulbT6lQiIQ+R8DuFTpLLIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvOWIzODE0NzUtMmYzNy0z YTY2LWExMDktMzQ2YmE1MzU1ZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1cpZkO1p20qDXcpdDIqYA0c9tX6AizZyT3gm22Zq/yIKPK7rtPOYp+ nFpoejmzOLPa4/deQX63hTeGHbIv+jD02IzW1q2NXKm2XunvTWrWsfR7Z+HtKJFP UqX0yYxsE4fxE1qpUXQhku3xE8E4fhN+jHnPwIqIplQ1LPNAAO++XFe852+Qj4dz kj8D8Mc5sqIdWjiupEr0GgWjW6FCrO4/txlNOZb/Y3mB4Tabtr7sfBU3uXj2BHLO dLs5m3UeH5Zt2XS7Dp6FFCPboTJ1tXmSlozqOQOAw+VudEYhlH5BnUk+y2pkgjUR Uvw0FQ7lqIvk+GWk+BeGAg+ZgrHhSjo= -----END CERTIFICATE-----Generated at Wed May 13 12:53:22 2026 by rpki-client