$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa File: 8954704f-b2e8-300f-ab85-adc7a08bd067.roa (raw, json) Hash identifier: aCLjZXrMPr4jh8mjWM3NbL3tBOXgA669Ouj09TiWMJc= Subject key identifier: 2B:C9:CD:7A:E3:17:01:48:39:3F:A7:67:CE:91:0D:BE:B2:2B:43:49 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584B4E7724CBE9E61E6C1DD18300 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 396185 IP address blocks: 72.29.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:24:cb:e9:e6:1e:6c:1d:d1:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=61e3d214-fa71-4d67-a6c0-4e5de50b957c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fc:2f:ad:8c:13:b6:6d:8d:2c:14:51:ed:f9: c7:60:61:d0:78:ed:d9:aa:85:18:b7:75:b2:6f:be: 9a:81:44:2d:c7:68:df:b2:4c:84:6c:10:17:1e:a6: ec:a8:aa:86:6f:ca:4e:80:96:5f:f4:9d:5d:db:95: 47:67:7f:70:a8:b7:e7:3f:3a:4b:b9:a1:60:99:24: 21:16:2b:d2:b3:27:97:d2:95:9b:a0:c9:48:a2:35: 6d:41:b5:b1:0d:f4:47:23:22:79:a0:2a:ca:f8:28: 0a:93:4f:6d:ac:ad:00:17:6e:02:19:c7:f0:98:e3: 6b:6a:a3:31:7a:5f:f1:45:48:64:32:22:3b:28:b9: d7:06:26:f6:fa:37:f9:66:e8:87:02:f1:c2:1a:23: 21:24:e6:ff:fc:22:ad:29:d3:87:7e:60:c8:fa:4a: 5a:fc:93:ed:77:29:fa:0d:88:a3:5c:07:b5:c1:11: e3:a8:de:b0:3c:25:d6:0e:13:2e:28:40:ee:47:26: 9d:50:da:81:75:db:51:d4:94:30:8c:ec:c0:77:c2: 97:9f:e8:0a:24:91:85:59:c7:af:f9:2a:ae:66:08: 48:02:04:67:f2:9e:88:8c:26:a9:cb:94:de:fc:5a: 5c:e1:cd:b0:a4:35:3b:bc:bc:25:82:a7:8d:b9:25: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C9:CD:7A:E3:17:01:48:39:3F:A7:67:CE:91:0D:BE:B2:2B:43:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:03:70:e2:a8:27:82:9f:f0:70:de:1d:1a:65:32:42:75:a1: bf:91:be:2c:4f:6a:ef:59:05:d0:a2:ae:07:20:0c:e0:a7:7c: d1:dd:09:a7:4e:9a:31:e7:43:25:1c:84:6c:58:23:60:e6:9c: 08:70:82:a6:53:78:23:86:9c:ee:e1:49:8d:8d:70:cd:6b:34: d6:fe:83:df:db:27:e7:ad:a5:d8:f7:53:aa:22:b0:fa:1e:56: f2:12:66:c7:90:ad:07:57:12:e7:b7:da:dd:3d:1d:02:f6:00: c8:a5:33:07:2d:27:50:3e:e0:66:03:88:25:5c:a7:8a:39:e9: 1e:ff:55:7a:15:bd:c1:1f:0e:87:8b:c3:e4:65:bf:66:ff:07: 0e:d5:23:75:59:5c:91:16:38:07:af:7c:67:5f:8a:1b:77:5c: 28:bf:08:58:a8:3b:7b:b0:6c:73:8f:3f:6a:82:b2:24:ca:ad: f9:70:b6:2f:7d:8b:e4:ae:a9:bc:db:22:e9:32:f5:66:a2:6d: e7:93:c9:83:b4:e0:5a:9f:20:e0:ed:16:84:dc:dd:d8:98:3e: 37:53:53:39:cb:0e:5d:d8:dc:eb:39:ec:44:a4:bb:b3:9b:75: f6:04:e8:51:c9:57:63:30:02:e8:3a:3d:e1:95:40:17:cf:f4: 9d:ee:7b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyTL6eYebB3RgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NjFlM2QyMTQtZmE3MS00ZDY3LWE2YzAtNGU1ZGU1MGI5NTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vwvrYwTtm2NLBRR7fnHYGHQeO3ZqoUYt3Wy b76agUQtx2jfskyEbBAXHqbsqKqGb8pOgJZf9J1d25VHZ39wqLfnPzpLuaFgmSQh FivSsyeX0pWboMlIojVtQbWxDfRHIyJ5oCrK+CgKk09trK0AF24CGcfwmONraqMx el/xRUhkMiI7KLnXBib2+jf5ZuiHAvHCGiMhJOb//CKtKdOHfmDI+kpa/JPtdyn6 DYijXAe1wRHjqN6wPCXWDhMuKEDuRyadUNqBddtR1JQwjOzAd8KXn+gKJJGFWcev +SquZghIAgRn8p6IjCapy5Te/Fpc4c2wpDU7vLwlgqeNuSVfXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvJzXrjFwFIOT+nZ86RDb6yK0NJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvODk1NDcwNGYtYjJlOC0z MDBmLWFiODUtYWRjN2EwOGJkMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgDcOKoJ4Kf8HDeHRplMkJ1ob+RvixPau9ZBdCirgcgDOCnfNHdCadO mjHnQyUchGxYI2DmnAhwgqZTeCOGnO7hSY2NcM1rNNb+g9/bJ+etpdj3U6oisPoe VvISZseQrQdXEue32t09HQL2AMilMwctJ1A+4GYDiCVcp4o56R7/VXoVvcEfDoeL w+Rlv2b/Bw7VI3VZXJEWOAevfGdfiht3XCi/CFioO3uwbHOPP2qCsiTKrflwti99 i+SuqbzbIuky9WaibeeTyYO04FqfIODtFoTc3diYPjdTUznLDl3Y3Os57ESku7Ob dfYE6FHJV2MwAug6PeGVQBfP9J3ue7I= -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:17 2025 by rpki-client