$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa File: 17c74446-4499-391f-a432-a9ff02dba5ca.roa (raw, json) Hash identifier: 9hlmUhRki3BXAaLMyhGisngG9/WbjFtWMkUBoObTXhU= Subject key identifier: D2:84:67:55:E9:39:57:97:08:96:A3:93:04:CD:3B:84:54:C8:B0:EB Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584D0EA7CCA73E03DE1FD2EA8900 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 396185 IP address blocks: 72.29.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:cc:a7:3e:03:de:1f:d2:ea:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=75c275df-4f17-47c4-926a-e69987d9f877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:52:59:e1:d0:68:dc:e4:87:2b:f9:1f:4c: 37:f5:b1:80:40:f8:48:f7:2b:01:03:b5:28:99:ac: 10:41:3f:cb:5c:f4:8f:20:58:1e:b0:5e:34:28:0b: a7:99:5a:94:b6:07:c7:5f:d4:dd:47:5f:10:33:12: b9:dc:15:5c:9e:96:5d:a3:98:11:2c:a2:6d:0b:01: 50:cc:79:01:b3:a9:93:8c:1c:24:43:f0:1b:69:8e: c3:be:17:da:7f:44:36:e9:57:00:c9:4f:4c:8e:97: d4:dc:81:69:4c:a0:5d:da:29:b2:da:ec:aa:8b:ac: d2:6c:87:8e:65:96:39:8c:31:89:05:65:29:02:8a: e4:42:fa:1e:04:9f:b4:3e:4f:e7:2a:de:29:08:67: ed:10:eb:c7:c2:76:3d:f1:df:52:86:45:b2:1b:73: 93:63:48:a8:64:3c:ba:bf:5f:6f:66:1b:64:c9:c5: c0:50:b0:70:4d:bf:81:b0:c0:ef:9d:ab:74:5c:1c: 6a:68:bb:99:8e:6f:61:c0:03:19:80:be:4e:ba:9f: 02:42:0a:ae:de:d7:0b:ff:a7:58:ee:a6:54:0d:ba: 1e:34:0b:ed:3d:0a:05:cf:a6:1b:c0:45:8b:78:fa: 77:59:0e:0c:e4:21:1e:46:4b:52:36:ac:1c:c3:c4: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:84:67:55:E9:39:57:97:08:96:A3:93:04:CD:3B:84:54:C8:B0:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fa:cf:3c:91:a3:98:eb:b0:54:fe:41:ad:1d:f4:de:30:1d: fb:6d:a8:a2:71:d8:d3:a2:f6:70:e9:d2:44:0a:4a:3e:2b:a3: 40:4c:2b:1c:03:bc:b9:48:56:99:d6:1c:16:b0:f8:73:aa:57: 1d:49:11:5b:3e:9f:93:66:8f:3a:63:94:f4:4e:88:09:87:70: b8:d7:a6:bb:7b:d8:da:3c:02:52:ac:7c:23:2a:80:0e:98:41: d9:74:1e:75:88:2d:3f:62:f0:e3:e7:0d:0a:bd:17:c9:4c:63: 0b:7b:08:57:67:9b:c7:b9:c2:d9:30:27:87:d4:da:e0:c7:4b: 65:69:f9:80:db:a7:51:aa:15:48:a6:bb:e0:e7:07:ad:d1:b4: d2:bd:a5:f3:3b:b6:f0:2e:d7:95:65:9f:20:c8:50:fa:77:da: bd:d2:7f:1b:57:35:fb:70:91:97:21:56:87:63:e1:a0:a8:a6: 18:bb:3b:b6:76:1f:3e:ec:c9:f2:61:56:74:27:4e:96:58:2f: 7f:5f:9e:47:ca:3b:6e:f1:4b:06:1d:0d:e4:af:be:15:09:fd: a3:ae:d3:9f:da:57:e4:8a:32:82:9f:b8:ca:b6:5c:8a:96:15: 31:8e:45:6d:8d:2c:79:55:a0:5d:05:21:a5:22:8e:af:ed:a6: e5:72:de:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op8ynPgPeH9LqiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NzVjMjc1ZGYtNGYxNy00N2M0LTkyNmEtZTY5OTg3ZDlmODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFNSWeHQaNzkhyv5H0w39bGAQPhI9ysBA7Uo mawQQT/LXPSPIFgesF40KAunmVqUtgfHX9TdR18QMxK53BVcnpZdo5gRLKJtCwFQ zHkBs6mTjBwkQ/AbaY7Dvhfaf0Q26VcAyU9MjpfU3IFpTKBd2imy2uyqi6zSbIeO ZZY5jDGJBWUpAorkQvoeBJ+0Pk/nKt4pCGftEOvHwnY98d9ShkWyG3OTY0ioZDy6 v19vZhtkycXAULBwTb+BsMDvnat0XBxqaLuZjm9hwAMZgL5Oup8CQgqu3tcL/6dY 7qZUDboeNAvtPQoFz6YbwEWLePp3WQ4M5CEeRktSNqwcw8S2OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKEZ1XpOVeXCJajkwTNO4RUyLDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMTdjNzQ0NDYtNDQ5OS0z OTFmLWE0MzItYTlmZjAyZGJhNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL6zzyRo5jrsFT+Qa0d9N4wHfttqKJx2NOi9nDp0kQKSj4ro0BMKxwD vLlIVpnWHBaw+HOqVx1JEVs+n5NmjzpjlPROiAmHcLjXprt72No8AlKsfCMqgA6Y Qdl0HnWILT9i8OPnDQq9F8lMYwt7CFdnm8e5wtkwJ4fU2uDHS2Vp+YDbp1GqFUim u+DnB63RtNK9pfM7tvAu15VlnyDIUPp32r3SfxtXNftwkZchVodj4aCophi7O7Z2 Hz7syfJhVnQnTpZYL39fnkfKO27xSwYdDeSvvhUJ/aOu05/aV+SKMoKfuMq2XIqW FTGORW2NLHlVoF0FIaUijq/tpuVy3kE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:19 2026 by rpki-client