$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/38bfae89-74d3-36f0-b192-b4a19cb325cf.roa File: 38bfae89-74d3-36f0-b192-b4a19cb325cf.roa (raw, json) Hash identifier: HBA6ILbKVssZo5Z9OeLqTIRdR3YobseOlVqvdXL7fbk= Subject key identifier: 72:DB:1B:50:73:D4:6E:00:54:5E:25:C4:7D:D1:A1:BF:82:14:44:73 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584D0CEE34EAC98537680E4BAC00 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/38bfae89-74d3-36f0-b192-b4a19cb325cf.roa Signing time: Tue 03 Mar 2026 23:11:14 +0000 ROA not before: Tue 03 Mar 2026 23:11:14 +0000 ROA not after: Mon 01 Jun 2026 22:11:14 +0000 asID: 53959 IP address blocks: 72.29.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:ee:34:ea:c9:85:37:68:0e:4b:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 3 23:11:14 2026 GMT Not After : Jun 1 22:11:14 2026 GMT Subject: CN=613a40f8-3942-4d7f-a57b-29ca0ee58703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:c4:07:5f:4f:9d:b9:c7:20:a8:59:24:30: b8:5d:0a:a7:65:38:5a:bf:88:1e:f2:08:e7:71:b8: 01:87:81:3e:65:56:54:73:e3:e8:98:8f:80:b8:13: ed:5a:b8:ad:21:d8:c0:98:62:dc:06:ed:de:a5:49: 39:13:03:8b:48:23:a5:21:10:31:77:6f:75:47:5d: 79:25:38:c3:e8:46:c2:62:16:11:33:ba:fa:52:b3: 05:c3:54:5e:51:b6:af:88:9d:0d:05:b0:f5:18:61: f6:36:2f:c9:07:e5:39:2d:0e:71:5e:f9:0c:60:8f: bd:eb:e6:6d:18:d9:17:b1:87:96:35:5c:0b:4e:b6: 70:ea:6b:c7:14:8f:2c:57:32:58:f6:74:ea:69:8e: 11:f0:42:e7:8e:77:3b:36:34:59:d2:36:c2:a3:2b: 6f:60:cc:d1:e9:57:fc:84:07:7c:4f:9f:69:8d:f7: 80:79:66:e5:5e:f9:d9:63:ca:b0:c2:dd:e4:65:9c: 64:40:e1:29:ac:b9:bd:4d:29:ba:d3:7e:1c:96:a8: 3b:f4:b6:93:ce:a2:e6:a4:2a:7a:31:43:65:18:46: d2:d1:33:52:5e:60:39:7e:8d:06:87:3f:f4:ce:a8: 72:3a:9d:63:eb:2e:9e:1f:7c:9c:1d:21:62:6c:38: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DB:1B:50:73:D4:6E:00:54:5E:25:C4:7D:D1:A1:BF:82:14:44:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/38bfae89-74d3-36f0-b192-b4a19cb325cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3a:e1:2b:ea:08:0f:ad:1d:c4:e8:39:fb:ec:0b:3c:20:dd: c0:2e:0a:41:d3:c6:a3:a3:41:2a:ce:3c:4e:5c:e1:b2:e9:a5: 85:b4:c2:4f:74:57:17:d9:5f:fd:b4:53:7f:85:eb:22:f8:65: e5:97:78:12:0b:60:a2:3d:30:27:45:82:36:03:4b:d2:ec:95: b8:86:32:3c:fd:36:20:fa:ec:48:9c:4d:33:d8:14:9a:4c:8d: f6:8a:51:0f:b1:6b:93:98:ca:d7:06:bb:53:5e:9f:09:c7:0b: 9e:f2:44:08:74:51:d3:e1:b0:f9:0f:ac:0f:0b:07:f3:41:7a: 9a:e9:d3:5c:74:c7:d0:eb:76:8c:1b:16:82:6e:53:fd:0b:51: 77:18:3c:07:ce:8b:5d:88:26:ff:aa:0a:89:52:15:8a:e5:5a: 34:91:7c:39:12:8b:fd:8f:2e:33:e6:e9:18:86:ef:d7:a5:56: 8b:74:fd:0f:70:57:0f:07:57:b3:31:83:62:d2:13:ac:87:e8: c4:cf:fa:d9:4d:f0:07:22:29:94:69:26:c3:ee:04:75:86:f8: 87:96:b2:8a:7e:d7:ef:83:dd:79:72:ac:a9:94:d9:c7:b7:5c: bd:8d:b4:5e:64:d2:a7:41:95:e6:3c:12:bb:5c:20:be:08:25: 24:d6:db:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0M7jTqyYU3aA5LrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDMwMzIzMTExNFoXDTI2MDYwMTIyMTExNFowLzEtMCsGA1UEAxMk NjEzYTQwZjgtMzk0Mi00ZDdmLWE1N2ItMjljYTBlZTU4NzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyXEB19PnbnHIKhZJDC4XQqnZThav4ge8gjn cbgBh4E+ZVZUc+PomI+AuBPtWritIdjAmGLcBu3epUk5EwOLSCOlIRAxd291R115 JTjD6EbCYhYRM7r6UrMFw1ReUbaviJ0NBbD1GGH2Ni/JB+U5LQ5xXvkMYI+96+Zt GNkXsYeWNVwLTrZw6mvHFI8sVzJY9nTqaY4R8ELnjnc7NjRZ0jbCoytvYMzR6Vf8 hAd8T59pjfeAeWblXvnZY8qwwt3kZZxkQOEprLm9TSm6034clqg79LaTzqLmpCp6 MUNlGEbS0TNSXmA5fo0Ghz/0zqhyOp1j6y6eH3ycHSFibDi6ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLbG1Bz1G4AVF4lxH3Rob+CFERzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMzhiZmFlODktNzRkMy0z NmYwLWIxOTItYjRhMTljYjMyNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB03MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI64SvqCA+tHcToOfvsCzwg3cAuCkHTxqOjQSrOPE5c4bLppYW0wk90 VxfZX/20U3+F6yL4ZeWXeBILYKI9MCdFgjYDS9LslbiGMjz9NiD67EicTTPYFJpM jfaKUQ+xa5OYytcGu1NenwnHC57yRAh0UdPhsPkPrA8LB/NBeprp01x0x9Drdowb FoJuU/0LUXcYPAfOi12IJv+qColSFYrlWjSRfDkSi/2PLjPm6RiG79elVot0/Q9w Vw8HV7Mxg2LSE6yH6MTP+tlN8AciKZRpJsPuBHWG+IeWsop+1++D3XlyrKmU2ce3 XL2NtF5k0qdBleY8ErtcIL4IJSTW224= -----END CERTIFICATE-----Generated at Sat Mar 14 20:46:27 2026 by rpki-client