$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa File: 17c74446-4499-391f-a432-a9ff02dba5ca.roa (raw, json) Hash identifier: ZzFod8yX0LKyLTJpSlvAn77MxxJQFI4gniIS5ZJWA+w= Subject key identifier: DB:73:34:FB:AB:CD:CA:5C:B6:25:7C:E8:B2:B0:CC:19:B4:39:AF:87 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584B4E7724E07DA4E26A1339CB00 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 396185 IP address blocks: 72.29.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:24:e0:7d:a4:e2:6a:13:39:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=fe957383-5a03-4263-84a9-79b333e8fd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:28:a3:a0:1b:ab:27:ec:47:c6:09:82:98: 59:3e:75:07:7f:eb:e7:1e:70:3e:d9:b7:a5:45:4a: 35:62:5d:9f:a6:2b:9e:af:62:11:1e:be:32:8c:5e: f1:d3:8f:b7:76:00:8b:3e:df:8c:f0:6e:f1:ba:ab: 4e:28:06:2c:a7:1f:0e:f3:38:86:e5:5a:24:6a:64: c0:49:1e:78:d1:38:f8:10:1a:52:85:12:73:07:72: d2:46:3b:a6:51:47:25:12:a9:50:2e:41:36:45:76: 68:91:9d:ac:39:c4:3f:a5:bb:01:a5:47:1e:7e:56: fd:92:0d:a5:63:90:74:8c:e9:72:ba:db:45:ee:9c: 50:85:13:06:21:fb:7e:ee:05:15:ab:61:0d:21:cf: d2:86:b2:ee:f8:c1:d4:97:7c:7f:1a:42:e6:74:86: f7:de:cd:bf:8f:8b:6d:1b:56:52:74:69:83:d0:9f: 0b:9a:65:84:9e:1d:dd:ef:ee:25:fa:5f:80:2d:b6: 85:d3:15:b8:26:17:2c:b2:2f:1a:d6:25:da:d6:92: 0b:8e:8d:63:6e:f3:e9:e1:70:28:32:47:65:64:ea: 29:05:65:ad:76:f5:d4:85:a9:ce:18:90:6c:55:2f: ab:2f:cb:d8:fc:9c:ef:8d:cc:b5:64:19:56:9e:6c: dc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:73:34:FB:AB:CD:CA:5C:B6:25:7C:E8:B2:B0:CC:19:B4:39:AF:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/17c74446-4499-391f-a432-a9ff02dba5ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:8a:7b:e1:71:34:35:1f:42:d6:df:90:4b:73:1b:27:a1:e1: ab:9a:6a:24:88:cb:18:1d:e1:de:22:2b:5c:dd:f3:be:e1:a5: c9:e5:46:26:73:e7:cf:bd:33:93:29:c8:0b:f2:8a:73:8c:c9: d7:a8:5a:3c:d0:bf:02:e8:5e:05:4d:b6:c1:02:07:4a:a2:d4: 29:33:eb:e9:cc:bb:f1:00:d6:4e:90:c9:7a:e6:52:87:46:21: ab:f9:f8:6b:4b:02:25:4e:79:6e:3c:63:69:40:ee:49:46:58: f3:ff:7a:62:41:4d:75:14:de:26:14:72:7d:b0:ff:1d:36:5b: fb:67:65:90:3b:42:ff:d7:0d:66:1a:46:c3:f4:92:98:16:20: 6d:73:9a:66:44:01:d2:bc:07:c7:e8:06:dd:92:f6:34:0c:6e: 74:11:a2:b5:41:34:51:e9:0a:d7:df:dc:4d:76:0d:38:38:3c: 00:33:fe:a4:52:21:e3:d9:97:70:1b:1b:b2:d5:c9:44:cc:58: 8b:f0:62:2e:d6:b9:8a:89:2c:f5:5e:1d:fa:8b:05:ce:86:cd: 0e:38:15:ef:f3:3c:78:db:1b:61:3f:d7:b0:3d:10:71:96:1d: 48:90:cb:e1:dc:89:72:68:26:1c:3d:32:7a:b4:ab:d0:5e:23: f0:be:c5:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyTgfaTiahM5ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmU5NTczODMtNWEwMy00MjYzLTg0YTktNzliMzMzZThmZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrIoo6AbqyfsR8YJgphZPnUHf+vnHnA+2bel RUo1Yl2fpiuer2IRHr4yjF7x04+3dgCLPt+M8G7xuqtOKAYspx8O8ziG5VokamTA SR540Tj4EBpShRJzB3LSRjumUUclEqlQLkE2RXZokZ2sOcQ/pbsBpUceflb9kg2l Y5B0jOlyuttF7pxQhRMGIft+7gUVq2ENIc/ShrLu+MHUl3x/GkLmdIb33s2/j4tt G1ZSdGmD0J8LmmWEnh3d7+4l+l+ALbaF0xW4Jhcssi8a1iXa1pILjo1jbvPp4XAo MkdlZOopBWWtdvXUhanOGJBsVS+rL8vY/Jzvjcy1ZBlWnmzcwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtzNPurzcpctiV86LKwzBm0Oa+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMTdjNzQ0NDYtNDQ5OS0z OTFmLWE0MzItYTlmZjAyZGJhNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiKe+FxNDUfQtbfkEtzGyeh4auaaiSIyxgd4d4iK1zd877hpcnlRiZz 58+9M5MpyAvyinOMydeoWjzQvwLoXgVNtsECB0qi1Ckz6+nMu/EA1k6QyXrmUodG Iav5+GtLAiVOeW48Y2lA7klGWPP/emJBTXUU3iYUcn2w/x02W/tnZZA7Qv/XDWYa RsP0kpgWIG1zmmZEAdK8B8foBt2S9jQMbnQRorVBNFHpCtff3E12DTg4PAAz/qRS IePZl3AbG7LVyUTMWIvwYi7WuYqJLPVeHfqLBc6GzQ44Fe/zPHjbG2E/17A9EHGW HUiQy+HciXJoJhw9Mnq0q9BeI/C+xag= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:44 2025 by rpki-client