$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa File: ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa (raw, json) Hash identifier: V5wQZFOtknlut5SK5RXP/wWZ7zO9QeROosaWzYyrTmQ= Subject key identifier: C4:F0:D9:65:14:8F:68:F5:51:07:CC:DC:5C:CE:19:4F:63:2A:A4:BD Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584D0EA7CCC6A492DB2B797CC6C0 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 396185 IP address blocks: 72.29.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:cc:c6:a4:92:db:2b:79:7c:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=753c5b74-5b47-4ecc-9fa4-c68879d4cf51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:62:27:d1:fe:84:6f:46:8b:f6:e2:2e:50:00: d5:70:9c:09:9f:a3:8f:97:36:8f:14:9d:03:7a:dc: a7:da:db:37:df:4c:c6:98:b3:ec:10:c1:d6:ca:48: 67:74:76:4b:5d:eb:37:d3:7c:f0:03:d6:31:71:9e: 55:a0:61:d2:65:02:47:14:15:ca:b8:55:9e:a7:14: 0f:9a:10:31:3e:e7:6c:33:42:2f:1b:d4:83:63:53: ad:47:a1:64:84:41:ba:fe:15:74:e1:b4:53:a1:be: a1:2e:a5:4e:e5:00:a9:9d:91:c8:8e:42:a8:02:ac: 49:4d:04:a5:64:02:87:92:da:b3:6b:9c:f9:26:ba: c1:97:ac:65:94:29:24:91:72:aa:33:98:c3:05:e3: 7a:8b:78:e4:dc:2d:76:9b:a7:79:36:a2:ae:8b:78: 77:4c:52:ad:4e:24:0b:1a:0a:c3:28:34:f8:3c:f1: e7:23:43:d9:8a:b5:f6:7d:23:4f:58:e0:35:0e:63: 2d:8d:b5:20:55:56:35:89:56:25:60:d1:a6:20:cf: 6c:8a:51:25:95:5c:53:5b:b7:8e:c3:08:b3:e0:d4: 73:d5:48:5f:6e:e9:95:8a:66:e1:75:44:a9:36:81: bb:02:9d:0c:77:55:5a:7d:2e:10:fd:92:2d:14:ae: b0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F0:D9:65:14:8F:68:F5:51:07:CC:DC:5C:CE:19:4F:63:2A:A4:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a0:1e:e2:2e:12:5f:e1:10:b5:c7:cb:54:3e:b2:34:dd:ee: 75:64:ce:7f:7f:08:98:ea:7f:40:8d:c2:0b:a4:e3:37:62:a6: 05:6e:a4:05:7a:f8:47:96:d5:70:c7:e4:c0:fb:b7:1c:26:44: 47:08:94:51:a5:a5:10:47:25:bf:2c:c3:47:12:d2:fb:82:a4: e0:5f:f7:22:6f:0a:99:0d:ec:39:42:de:c8:ad:dc:4e:49:df: 4d:45:75:6c:ba:35:c4:b7:4d:d4:26:f4:d6:6d:12:b3:cc:f3: 4a:11:aa:cd:74:85:2a:5e:80:c0:46:34:cd:29:b7:43:38:20: 10:1e:70:27:81:2b:9d:1e:a1:bc:b5:04:81:7b:11:da:4f:07: 21:21:1b:f3:6c:3b:17:88:d8:83:34:8d:0e:bd:3d:da:95:8e: 9e:49:a0:c2:1b:13:ae:e9:b3:77:d3:ed:5e:16:40:39:e6:16: bc:f3:ee:a6:7f:92:17:58:b7:8e:59:e2:78:a6:6f:7c:7d:5c: 8a:9a:09:72:4e:6e:ef:34:4c:c0:65:df:c5:96:71:df:5d:1f: a1:c4:6a:54:be:4d:be:2e:de:e1:28:a2:e6:27:c1:19:6c:c8: a2:89:55:e6:91:16:73:df:ec:d7:ab:a5:fe:9a:4c:ce:76:90: eb:02:c5:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op8zGpJLbK3l8xsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NzUzYzViNzQtNWI0Ny00ZWNjLTlmYTQtYzY4ODc5ZDRjZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mIn0f6Eb0aL9uIuUADVcJwJn6OPlzaPFJ0D etyn2ts330zGmLPsEMHWykhndHZLXes303zwA9YxcZ5VoGHSZQJHFBXKuFWepxQP mhAxPudsM0IvG9SDY1OtR6FkhEG6/hV04bRTob6hLqVO5QCpnZHIjkKoAqxJTQSl ZAKHktqza5z5JrrBl6xllCkkkXKqM5jDBeN6i3jk3C12m6d5NqKui3h3TFKtTiQL GgrDKDT4PPHnI0PZirX2fSNPWOA1DmMtjbUgVVY1iVYlYNGmIM9silEllVxTW7eO wwiz4NRz1UhfbumVimbhdUSpNoG7Ap0Md1VafS4Q/ZItFK6wTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTw2WUUj2j1UQfM3FzOGU9jKqS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvZWJjNDdjNmYtODI3My0z MTRjLThjOWEtZWNiNDAyMDFjZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKgHuIuEl/hELXHy1Q+sjTd7nVkzn9/CJjqf0CNwguk4zdipgVupAV6 +EeW1XDH5MD7txwmREcIlFGlpRBHJb8sw0cS0vuCpOBf9yJvCpkN7DlC3sit3E5J 301FdWy6NcS3TdQm9NZtErPM80oRqs10hSpegMBGNM0pt0M4IBAecCeBK50eoby1 BIF7EdpPByEhG/NsOxeI2IM0jQ69PdqVjp5JoMIbE67ps3fT7V4WQDnmFrzz7qZ/ khdYt45Z4nimb3x9XIqaCXJObu80TMBl38WWcd9dH6HEalS+Tb4u3uEoouYnwRls yKKJVeaRFnPf7Nerpf6aTM52kOsCxcc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:00:52 2026 by rpki-client