$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa File: ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa (raw, json) Hash identifier: pDOxshyal95Ej6l7GUNeK/hk/3RUOGZ7uOIF7aIFimc= Subject key identifier: 04:72:FE:31:8E:C1:0A:81:DB:83:B3:89:8E:92:F1:08:62:8E:BC:0E Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584B4E772509B7D7BD6F323FC180 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 396185 IP address blocks: 72.29.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:25:09:b7:d7:bd:6f:32:3f:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=630da658-00e6-4ee4-9224-a1bcc52d8222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:92:44:64:eb:42:08:61:bf:8e:16:2b:fb: 0a:a0:f4:7d:2d:01:2f:61:11:8f:85:31:7d:69:f5: 1c:5b:d9:06:b7:c1:05:a0:11:6c:2a:f3:b0:02:f9: 6b:74:35:00:dd:64:4f:63:35:73:df:4c:95:a4:96: 8d:ab:b2:7e:45:4c:d9:a5:75:43:9f:17:08:9a:e2: 71:fa:74:94:00:ac:7d:66:75:fd:8b:e7:7c:3d:e9: 21:4c:ee:d7:a2:8e:28:54:98:fa:cf:49:ad:40:dc: 68:2c:17:92:47:59:85:b9:4b:f9:45:42:8a:6b:95: 07:58:24:cd:77:bc:bd:ce:10:9d:7b:61:4d:ee:e2: eb:7b:3c:3e:3e:db:57:97:70:ac:bb:1f:84:a1:8f: 6b:9a:09:3a:62:5a:9a:e7:51:18:3a:1f:d1:19:4d: 66:66:b1:53:27:d3:2b:a9:9e:48:fe:90:dd:0e:40: a5:fd:30:3b:c8:e7:d7:76:7c:dc:b2:d3:80:f2:ed: 6c:84:1c:51:6b:4f:5a:79:95:79:f0:a4:83:55:cc: 1e:55:b0:31:76:c0:cf:e4:d9:57:09:fe:eb:c5:68: 82:de:2c:80:1a:94:72:f5:60:91:f3:4d:5c:46:44: 4b:5b:00:ee:d0:89:4a:ae:d5:0e:0b:0a:2d:f0:c8: c3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:72:FE:31:8E:C1:0A:81:DB:83:B3:89:8E:92:F1:08:62:8E:BC:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4b:80:90:89:01:84:4a:09:b1:d7:83:f8:b9:fe:39:a2:13: 15:ad:c8:b3:6e:77:1b:39:90:12:37:f4:20:13:2e:fb:19:02: c5:66:70:25:5d:0f:54:2c:a6:11:11:64:a4:32:dc:16:a9:45: 22:42:4a:e9:b3:8c:c7:b5:cc:06:8f:d9:59:42:10:24:d0:ed: e9:a8:70:0e:bf:fa:67:bd:11:9d:52:10:a0:97:d2:aa:7e:ee: 4f:82:2f:1d:33:98:e9:df:f2:36:c9:78:f3:68:d8:11:77:67: fe:84:a5:f5:1b:50:22:b3:a0:09:5e:35:6b:e6:5b:0e:16:d5: 25:14:52:e7:de:cc:7a:0d:37:1d:08:cb:42:eb:13:7e:82:33: 3f:10:c5:1e:ed:fb:bd:a4:ec:fe:ea:4f:06:09:63:07:a2:bd: 6c:d3:24:d6:c3:95:df:62:08:d1:6b:63:6b:62:18:34:40:00: 9b:90:d9:27:5f:9c:7c:6c:11:61:89:3e:05:cb:4a:31:76:99: 8e:ec:21:aa:c2:23:29:d6:db:d6:c8:79:ba:d4:73:85:34:34: 95:9b:b6:36:2f:b6:5b:79:f0:1c:7c:7e:3b:04:45:7a:59:d7: 29:ff:9a:de:bc:b1:be:ca:98:ce:8b:27:bc:09:1a:59:84:03: 34:85:a7:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyUJt9e9bzI/wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NjMwZGE2NTgtMDBlNi00ZWU0LTkyMjQtYTFiY2M1MmQ4MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PCSRGTrQghhv44WK/sKoPR9LQEvYRGPhTF9 afUcW9kGt8EFoBFsKvOwAvlrdDUA3WRPYzVz30yVpJaNq7J+RUzZpXVDnxcImuJx +nSUAKx9ZnX9i+d8PekhTO7Xoo4oVJj6z0mtQNxoLBeSR1mFuUv5RUKKa5UHWCTN d7y9zhCde2FN7uLrezw+PttXl3Csux+EoY9rmgk6Ylqa51EYOh/RGU1mZrFTJ9Mr qZ5I/pDdDkCl/TA7yOfXdnzcstOA8u1shBxRa09aeZV58KSDVcweVbAxdsDP5NlX Cf7rxWiC3iyAGpRy9WCR801cRkRLWwDu0IlKrtUOCwot8MjDEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARy/jGOwQqB24OziY6S8QhijrwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvZWJjNDdjNmYtODI3My0z MTRjLThjOWEtZWNiNDAyMDFjZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClLgJCJAYRKCbHXg/i5/jmiExWtyLNudxs5kBI39CATLvsZAsVmcCVd D1QsphERZKQy3BapRSJCSumzjMe1zAaP2VlCECTQ7emocA6/+me9EZ1SEKCX0qp+ 7k+CLx0zmOnf8jbJePNo2BF3Z/6EpfUbUCKzoAleNWvmWw4W1SUUUufezHoNNx0I y0LrE36CMz8QxR7t+72k7P7qTwYJYweivWzTJNbDld9iCNFrY2tiGDRAAJuQ2Sdf nHxsEWGJPgXLSjF2mY7sIarCIynW29bIebrUc4U0NJWbtjYvtlt58Bx8fjsERXpZ 1yn/mt68sb7KmM6LJ7wJGlmEAzSFp3s= -----END CERTIFICATE-----Generated at Tue Oct 21 02:14:41 2025 by rpki-client