$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa File: 8954704f-b2e8-300f-ab85-adc7a08bd067.roa (raw, json) Hash identifier: blSx1cQqQ2htK88D6ZguJhGz9LlQbs/v1SyUCjmGpLM= Subject key identifier: A0:6D:05:E9:F2:35:B2:A5:45:C0:6C:99:FB:C8:80:28:CF:36:47:4A Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584D0EA7CC943D26EDC4FCD9ED00 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 396185 IP address blocks: 72.29.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:cc:94:3d:26:ed:c4:fc:d9:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=6d377661-5d0a-49dc-85b4-5750fcebcb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7e:20:3a:b9:ab:f7:28:ad:f7:b2:fb:cb:be: 84:31:aa:c9:b1:95:78:6e:3a:c5:ca:44:e3:e3:b5: 87:5d:8e:a4:ca:b6:78:9c:b7:28:90:ea:32:4b:af: 6d:09:e8:5f:73:9a:89:11:b3:2f:be:cb:0b:9c:bb: a3:f9:8c:0a:a7:a8:cf:76:db:48:65:d5:d5:6c:e5: a2:e8:c9:11:b6:51:f3:df:75:44:a3:83:40:d6:b2: 3f:a3:cd:9e:8b:90:65:87:1c:e8:d0:24:1d:61:23: 41:46:2d:9e:8b:e7:7a:cc:ee:01:8a:83:df:81:10: 24:da:2b:4e:be:a8:f6:ed:4f:cf:c4:6b:0c:9a:f7: 3d:1b:0c:ef:38:b7:04:76:2d:64:74:f2:46:35:c5: 57:36:c5:87:a7:85:03:28:2a:8b:82:97:93:09:e9: f3:cd:d4:bb:1f:a2:7d:b3:12:c8:f1:70:15:81:ed: 84:b4:c4:e3:35:58:c4:4e:53:13:b5:fb:92:ac:99: 46:6c:b6:7d:5c:be:f6:09:84:df:8c:dc:ed:81:8a: 12:39:7c:da:09:e7:2a:47:5a:c2:f4:11:0e:85:02: d7:82:4c:79:89:e7:a5:34:9c:d6:d6:d3:29:a8:8b: 02:79:3e:8a:3f:76:40:df:78:54:59:48:24:46:3b: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6D:05:E9:F2:35:B2:A5:45:C0:6C:99:FB:C8:80:28:CF:36:47:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:6c:35:fa:20:8c:3e:f0:3d:3e:07:86:c2:61:16:db:79:5c: 1f:a0:ec:9a:c3:88:e0:d2:8e:f2:4a:6b:a4:40:ae:c3:4a:b1: 6e:2c:63:01:14:34:85:2d:7c:65:86:e4:51:5c:82:01:3d:56: c7:56:47:34:ad:1e:bf:d8:2a:ca:2d:45:f4:60:74:a1:2d:86: ce:6e:b2:e0:f7:9d:2b:a8:45:a6:5a:98:94:9a:a7:5f:ab:be: bd:da:ba:d6:9e:c2:c6:3e:c3:b7:5f:49:71:80:d7:a0:18:e9: 29:81:0f:6a:6b:55:c1:cd:48:55:75:2e:8c:f9:3c:6e:10:03: ee:e3:d5:27:63:b9:82:47:eb:e6:7e:69:00:06:c7:f2:40:9c: 0e:5c:06:1d:71:87:8b:9f:0c:96:ca:86:0b:31:bd:48:b7:cb: 10:02:2e:45:7e:8e:ec:f8:7c:1b:58:81:c6:2f:7a:a4:5c:69: d1:d2:8c:39:41:a8:94:1c:66:19:0e:40:5b:ca:1f:2b:62:16: 5a:16:31:d1:e8:73:04:40:39:d2:2b:75:a2:8d:be:70:64:bd: 7c:a8:a7:68:a3:d3:4a:5e:f1:1d:30:86:99:50:6d:c4:93:1b: fa:b6:f7:ff:29:f1:b3:d1:b4:c1:f0:3d:68:b4:9e:de:53:63: e0:59:ca:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op8yUPSbtxPzZ7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NmQzNzc2NjEtNWQwYS00OWRjLTg1YjQtNTc1MGZjZWJjYjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX4gOrmr9yit97L7y76EMarJsZV4bjrFykTj 47WHXY6kyrZ4nLcokOoyS69tCehfc5qJEbMvvssLnLuj+YwKp6jPdttIZdXVbOWi 6MkRtlHz33VEo4NA1rI/o82ei5Blhxzo0CQdYSNBRi2ei+d6zO4BioPfgRAk2itO vqj27U/PxGsMmvc9GwzvOLcEdi1kdPJGNcVXNsWHp4UDKCqLgpeTCenzzdS7H6J9 sxLI8XAVge2EtMTjNVjETlMTtfuSrJlGbLZ9XL72CYTfjNztgYoSOXzaCecqR1rC 9BEOhQLXgkx5ieelNJzW1tMpqIsCeT6KP3ZA33hUWUgkRjs+fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBtBenyNbKlRcBsmfvIgCjPNkdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvODk1NDcwNGYtYjJlOC0z MDBmLWFiODUtYWRjN2EwOGJkMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlsNfogjD7wPT4HhsJhFtt5XB+g7JrDiODSjvJKa6RArsNKsW4sYwEU NIUtfGWG5FFcggE9VsdWRzStHr/YKsotRfRgdKEths5usuD3nSuoRaZamJSap1+r vr3autaewsY+w7dfSXGA16AY6SmBD2prVcHNSFV1Loz5PG4QA+7j1SdjuYJH6+Z+ aQAGx/JAnA5cBh1xh4ufDJbKhgsxvUi3yxACLkV+juz4fBtYgcYveqRcadHSjDlB qJQcZhkOQFvKHytiFloWMdHocwRAOdIrdaKNvnBkvXyop2ij00pe8R0whplQbcST G/q29/8p8bPRtMHwPWi0nt5TY+BZyvU= -----END CERTIFICATE-----Generated at Thu Mar 26 21:00:24 2026 by rpki-client