$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa File: 59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa (raw, json) Hash identifier: r9WLv4zJ75J8iWASEGcMfkf0kQpcetZgBgvd4jZx3Is= Subject key identifier: B2:0A:C7:D4:F5:A9:57:44:B0:67:7A:C8:8C:F0:35:D1:56:9A:C1:52 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584D0CA0E9BA43F27B34405789F0 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa Signing time: Tue 03 Mar 2026 20:35:30 +0000 ROA not before: Tue 03 Mar 2026 20:35:30 +0000 ROA not after: Mon 01 Jun 2026 19:35:30 +0000 asID: 53959 IP address blocks: 72.29.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:a0:e9:ba:43:f2:7b:34:40:57:89:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 3 20:35:30 2026 GMT Not After : Jun 1 19:35:30 2026 GMT Subject: CN=d3c95a00-c030-4d4b-8f0d-4a6134ec9545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:82:56:33:fd:bd:dd:b7:09:88:47:16:bf: 18:2f:a4:4c:c8:00:eb:ad:c1:c7:4e:e5:f2:86:a0: d9:64:e7:ee:57:7e:9e:1b:3c:f2:61:67:58:69:e9: cc:08:06:76:81:e3:9f:71:03:32:1f:a1:37:ba:f3: 66:15:f5:a5:07:07:d8:25:ef:21:8f:7f:ad:87:89: 84:dd:c4:d9:ed:0d:f7:55:2f:5a:32:49:78:60:84: ba:02:1a:58:f0:fa:5d:a5:21:9c:c1:a0:0f:04:82: 86:95:ba:e8:c7:a3:5e:5c:2b:4e:6d:1e:ec:59:4e: 73:9d:85:80:43:e0:83:cb:73:b8:e4:fb:e3:52:75: bb:a9:38:fd:8a:53:7d:fe:2a:76:40:77:c5:be:a1: 6c:03:fc:b7:23:0a:19:49:c1:12:38:29:e2:76:1a: aa:e0:d7:b1:15:e5:ac:fb:77:86:6c:a0:d2:7f:a4: 57:78:8d:de:84:52:06:12:62:95:7f:d2:61:c7:f6: 44:f3:36:4c:f8:44:ed:01:39:77:f8:a4:72:83:3b: e0:2c:0a:93:d3:bf:91:5f:e4:ba:d1:47:b6:7f:94: 59:c1:86:48:39:20:4e:09:a9:09:79:76:a9:a8:8e: cc:c9:e0:50:51:e3:aa:0b:d9:12:d7:52:ca:6d:15: d8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0A:C7:D4:F5:A9:57:44:B0:67:7A:C8:8C:F0:35:D1:56:9A:C1:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ea:d4:b8:f5:c9:8b:7b:3b:e8:61:ee:9d:c2:12:65:51:c6: b2:b9:b5:06:b4:3f:c9:7f:d0:00:91:8a:cd:7e:ec:85:93:a4: 03:43:c3:d8:bb:60:0b:38:77:18:2a:5d:19:15:77:92:f4:c2: 3e:43:8a:43:fe:87:e5:be:2f:99:88:b6:17:0c:53:38:b4:0e: 34:ff:ef:51:41:f9:75:4e:99:c1:7f:97:49:81:b2:f8:6c:28: 16:b2:ed:9d:a4:84:27:76:01:68:6c:ac:bb:fb:71:1e:74:dc: ef:f4:6b:2a:07:90:fc:48:5f:b9:8c:96:36:65:17:5b:05:9e: 47:dc:02:22:d0:be:5c:32:1d:e6:85:05:86:cd:cf:cc:3f:35: 77:5e:62:15:f7:1d:97:97:f8:5e:6f:f3:73:86:71:a3:aa:09: 79:fe:fd:8e:f7:8f:95:ff:59:85:87:d8:a4:c9:5b:4b:8e:b1: 82:8d:f2:33:4f:6a:9b:b9:4f:3a:be:6c:47:ee:4a:a0:a5:3a: 8d:a5:fa:f7:0a:18:62:6e:ea:1d:63:d5:d4:a0:39:81:d5:c7: 05:06:6f:52:9e:d6:02:28:9e:4d:74:f8:74:f8:97:f9:90:2a: 8c:ed:6f:c6:fe:4d:61:5f:9a:86:ce:f3:9c:43:68:5b:ef:3f: ed:6d:bf:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0MoOm6Q/J7NEBXifAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDMwMzIwMzUzMFoXDTI2MDYwMTE5MzUzMFowLzEtMCsGA1UEAxMk ZDNjOTVhMDAtYzAzMC00ZDRiLThmMGQtNGE2MTM0ZWM5NTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQWCVjP9vd23CYhHFr8YL6RMyADrrcHHTuXy hqDZZOfuV36eGzzyYWdYaenMCAZ2geOfcQMyH6E3uvNmFfWlBwfYJe8hj3+th4mE 3cTZ7Q33VS9aMkl4YIS6AhpY8PpdpSGcwaAPBIKGlbrox6NeXCtObR7sWU5znYWA Q+CDy3O45PvjUnW7qTj9ilN9/ip2QHfFvqFsA/y3IwoZScESOCnidhqq4NexFeWs +3eGbKDSf6RXeI3ehFIGEmKVf9Jhx/ZE8zZM+ETtATl3+KRygzvgLAqT07+RX+S6 0Ue2f5RZwYZIOSBOCakJeXapqI7MyeBQUeOqC9kS11LKbRXYBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIKx9T1qVdEsGd6yIzwNdFWmsFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvNTliOTI2YTctOGNiOC0z ODBkLWI4ZWEtYTAxZTVjMDkwYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXq1Lj1yYt7O+hh7p3CEmVRxrK5tQa0P8l/0ACRis1+7IWTpANDw9i7 YAs4dxgqXRkVd5L0wj5DikP+h+W+L5mIthcMUzi0DjT/71FB+XVOmcF/l0mBsvhs KBay7Z2khCd2AWhsrLv7cR503O/0ayoHkPxIX7mMljZlF1sFnkfcAiLQvlwyHeaF BYbNz8w/NXdeYhX3HZeX+F5v83OGcaOqCXn+/Y73j5X/WYWH2KTJW0uOsYKN8jNP apu5Tzq+bEfuSqClOo2l+vcKGGJu6h1j1dSgOYHVxwUGb1Ke1gIonk10+HT4l/mQ Koztb8b+TWFfmobO85xDaFvvP+1tv3c= -----END CERTIFICATE-----Generated at Sat Mar 14 20:46:22 2026 by rpki-client