$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa File: 59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa (raw, json) Hash identifier: FlIt1fJPus7CGIET92t1wOfR/43pPOmFeI1AD8WBhRw= Subject key identifier: 3D:9A:98:AF:97:A6:8C:3F:C6:A0:54:65:86:A9:4C:CB:85:AC:43:D3 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584F498BF5305C83CC3FAEBC3C60 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53959 IP address blocks: 72.29.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:f5:30:5c:83:cc:3f:ae:bc:3c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=37f84ea6-c0ad-49fb-abfc-23a0aaf5d8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:44:55:18:bf:4c:1e:ae:6f:ce:cc:86:f9: 94:25:5f:bd:5f:da:34:29:45:ff:25:b0:b1:b0:56: ee:c4:22:c1:0f:aa:a1:57:47:9a:66:bc:a1:28:d6: 73:89:c5:d7:71:b0:a4:40:e8:d7:32:d2:d8:1d:7f: 28:e4:2e:22:b4:13:72:5d:6f:b9:03:a0:4e:bb:d0: ef:7e:31:52:ef:db:1e:de:ca:c9:6d:a7:dc:09:7d: f1:6f:70:65:4f:0e:82:b7:2f:9e:fd:87:78:31:fc: e3:a0:69:22:82:3a:1f:05:f3:77:84:8b:b8:3a:54: cc:67:0a:f8:db:19:a4:97:94:e2:33:56:a8:fa:fd: 3e:c8:25:52:cf:5f:91:ac:40:ca:69:f2:fc:b5:5d: 60:b4:f5:ed:5d:ef:49:a4:e8:ee:ed:24:04:f6:a6: b6:b8:dc:8f:8a:f3:15:a6:ab:6c:61:90:39:94:e8: 34:b9:5e:ed:71:ad:a7:c8:ad:86:bb:2d:46:95:46: 1d:02:a9:2a:72:50:b6:19:fe:57:72:f7:af:07:2e: 5d:92:b8:ce:43:a9:02:93:ed:26:d1:e9:27:27:4a: 8a:0f:87:75:29:44:cb:c4:9e:b4:eb:41:96:92:7c: c5:57:ba:e1:ff:17:54:1a:55:5f:51:b6:02:1c:f0: d5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9A:98:AF:97:A6:8C:3F:C6:A0:54:65:86:A9:4C:CB:85:AC:43:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:63:9f:03:ed:96:80:6e:2d:09:e7:9a:51:b8:01:91:f2:b8: 6c:c3:61:cd:78:8a:af:7b:ef:a5:f4:78:3e:58:07:57:cf:b9: f7:59:a2:bd:fc:ce:91:e3:b8:a3:cd:67:e1:51:79:4c:85:e1: 1e:60:0d:5a:ee:ae:f4:5f:0c:e5:48:f5:e8:95:d2:63:ac:72: ed:89:fb:0e:79:0e:25:f8:54:c4:c2:7e:ec:06:2d:95:9b:8f: 08:a4:1e:a6:e1:df:78:46:df:e9:13:70:c0:ef:5e:91:29:dc: 1d:45:b8:5e:09:7f:b6:9d:7f:dd:4d:7b:19:dd:87:e3:dd:3a: 68:fc:fd:74:bc:8e:81:e2:38:b3:24:25:a9:da:a8:09:05:e4: ec:f5:7f:81:58:14:d0:79:f2:aa:24:32:9b:26:c5:51:8e:4a: 47:ee:2a:c4:9d:65:91:c4:be:48:38:9e:bd:fd:da:31:e6:a6: 78:c2:5f:e6:31:ed:07:c2:8a:98:18:e5:41:90:1f:dc:65:08: 8a:a3:31:f7:69:45:79:38:42:15:05:a5:d0:ce:a0:f8:c6:e9: 20:74:8f:c0:0a:ca:fd:3c:8d:04:b1:b5:c3:8d:92:3e:d4:6d: 95:cb:62:0a:9b:91:91:53:f4:23:00:6a:76:bb:ac:e6:5b:37: ec:8d:b0:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji/UwXIPMP668PGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzdmODRlYTYtYzBhZC00OWZiLWFiZmMtMjNhMGFhZjVkOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsREVRi/TB6ub87MhvmUJV+9X9o0KUX/JbCx sFbuxCLBD6qhV0eaZryhKNZzicXXcbCkQOjXMtLYHX8o5C4itBNyXW+5A6BOu9Dv fjFS79se3srJbafcCX3xb3BlTw6Cty+e/Yd4MfzjoGkigjofBfN3hIu4OlTMZwr4 2xmkl5TiM1ao+v0+yCVSz1+RrEDKafL8tV1gtPXtXe9JpOju7SQE9qa2uNyPivMV pqtsYZA5lOg0uV7tca2nyK2Guy1GlUYdAqkqclC2Gf5XcvevBy5dkrjOQ6kCk+0m 0eknJ0qKD4d1KUTLxJ6060GWknzFV7rh/xdUGlVfUbYCHPDVJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2amK+Xpow/xqBUZYapTMuFrEPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvNTliOTI2YTctOGNiOC0z ODBkLWI4ZWEtYTAxZTVjMDkwYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFljnwPtloBuLQnnmlG4AZHyuGzDYc14iq9776X0eD5YB1fPufdZor38 zpHjuKPNZ+FReUyF4R5gDVrurvRfDOVI9eiV0mOscu2J+w55DiX4VMTCfuwGLZWb jwikHqbh33hG3+kTcMDvXpEp3B1FuF4Jf7adf91Nexndh+PdOmj8/XS8joHiOLMk JanaqAkF5Oz1f4FYFNB58qokMpsmxVGOSkfuKsSdZZHEvkg4nr392jHmpnjCX+Yx 7QfCipgY5UGQH9xlCIqjMfdpRXk4QhUFpdDOoPjG6SB0j8AKyv08jQSxtcONkj7U bZXLYgqbkZFT9CMAana7rOZbN+yNsBU= -----END CERTIFICATE-----Generated at Sun Sep 27 18:27:14 2026 by rpki-client