$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa File: 59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa (raw, json) Hash identifier: 3/bPyEwsXL8P0H7y22ZosaLHKjZRoa4KAwdKkIO1uWU= Subject key identifier: 4D:02:12:2F:89:00:B8:F3:24:71:B7:10:F0:A6:FE:06:D7:A8:E0:40 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584DEC7B48FD492E0A007A6123D0 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 53959 IP address blocks: 72.29.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:48:fd:49:2e:0a:00:7a:61:23:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=517593fe-9459-402a-9b18-c6b3908f92d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9f:de:33:50:04:d4:5c:6f:18:bb:5d:e1:ed: 03:f7:10:b3:35:10:65:b5:40:53:f5:0a:7d:35:24: 26:42:6e:a8:8e:ba:26:80:9b:dc:91:80:b6:d0:c9: 26:c3:0f:7a:8d:8d:fb:eb:7f:8a:be:52:78:5a:f1: d0:9b:86:3e:bc:03:40:32:50:88:48:ac:1e:4a:72: b4:47:6d:91:2a:46:49:33:53:01:c9:60:c7:9d:ba: d5:71:42:b7:59:9c:60:fb:02:a8:6f:ff:7f:aa:7c: 3d:95:27:fc:5e:41:32:73:b0:76:7c:36:6e:6c:5a: d1:19:6d:e1:62:31:23:77:11:f6:05:ae:0a:66:fb: b6:e5:2e:f0:cc:95:d1:d6:fd:17:47:cd:84:02:7f: ea:c3:05:99:d1:8d:a1:f5:ee:6a:26:0e:94:d8:47: 0c:26:fa:4d:d5:fd:0e:41:73:36:12:9a:d8:6f:6e: 46:c1:c5:81:07:51:70:00:db:ae:7b:5c:ae:c8:9a: 1c:1c:ea:1c:c7:db:1b:54:60:ba:1c:7f:57:47:e0: f6:f7:d0:fd:0e:f6:d4:82:53:dd:cd:08:71:e8:11: df:f3:8e:c2:1a:ee:1d:96:4c:56:39:7a:4c:96:ea: c7:7d:bd:f0:07:5d:51:e7:8e:76:0a:86:f8:b9:a3: cb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:02:12:2F:89:00:B8:F3:24:71:B7:10:F0:A6:FE:06:D7:A8:E0:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a0:c4:00:10:6a:09:c0:8b:0f:94:e9:b1:d3:cb:5c:a8:3c: fa:da:eb:ce:61:2c:24:58:d0:dc:9d:e7:30:ff:8e:3c:74:01: 97:d0:35:82:20:4e:8b:3c:c3:3b:45:3d:33:37:e9:14:e0:96: 49:68:56:f2:79:0a:96:5a:b6:ea:24:5f:b4:a8:e3:ea:91:2d: c2:59:8b:8c:fe:dd:95:f0:77:b5:e0:dd:02:ea:c9:cc:b6:ff: 92:ca:35:29:46:e3:85:05:8d:f9:04:17:f5:71:2f:61:ae:4b: ca:2e:7f:d7:a6:85:b1:52:ff:46:cf:9a:87:c0:e9:15:2e:30: d6:37:85:b5:da:b7:44:e1:1e:5a:7e:ec:40:7b:81:27:47:1f: db:d8:8a:21:f8:76:34:1d:98:d0:ab:19:eb:20:0d:51:89:4a: 24:13:3c:21:4c:9a:a6:1f:6a:d2:5e:8f:0e:7f:85:4c:14:17: 18:de:ef:fb:54:a9:5f:75:8a:b7:7f:91:fe:a7:6b:96:18:d4: 03:b1:3e:bc:a1:bd:82:d1:d8:2a:94:bc:22:9c:8b:b7:b7:68: 61:2f:8c:cc:73:7a:f5:49:9f:f3:db:3e:8a:5e:58:86:e1:30: f8:87:f6:f5:a8:71:ac:50:a2:2f:b9:6b:48:65:be:0f:87:cf: 98:a7:02:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3se0j9SS4KAHphI9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk NTE3NTkzZmUtOTQ1OS00MDJhLTliMTgtYzZiMzkwOGY5MmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5/eM1AE1FxvGLtd4e0D9xCzNRBltUBT9Qp9 NSQmQm6ojromgJvckYC20Mkmww96jY3763+KvlJ4WvHQm4Y+vANAMlCISKweSnK0 R22RKkZJM1MByWDHnbrVcUK3WZxg+wKob/9/qnw9lSf8XkEyc7B2fDZubFrRGW3h YjEjdxH2Ba4KZvu25S7wzJXR1v0XR82EAn/qwwWZ0Y2h9e5qJg6U2EcMJvpN1f0O QXM2EprYb25GwcWBB1FwANuue1yuyJocHOocx9sbVGC6HH9XR+D299D9DvbUglPd zQhx6BHf847CGu4dlkxWOXpMlurHfb3wB11R5452Cob4uaPLKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0CEi+JALjzJHG3EPCm/gbXqOBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvNTliOTI2YTctOGNiOC0z ODBkLWI4ZWEtYTAxZTVjMDkwYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASgxAAQagnAiw+U6bHTy1yoPPra685hLCRY0Nyd5zD/jjx0AZfQNYIg Tos8wztFPTM36RTglkloVvJ5CpZatuokX7So4+qRLcJZi4z+3ZXwd7Xg3QLqycy2 /5LKNSlG44UFjfkEF/VxL2GuS8ouf9emhbFS/0bPmofA6RUuMNY3hbXat0ThHlp+ 7EB7gSdHH9vYiiH4djQdmNCrGesgDVGJSiQTPCFMmqYfatJejw5/hUwUFxje7/tU qV91ird/kf6na5YY1AOxPryhvYLR2CqUvCKci7e3aGEvjMxzevVJn/PbPopeWIbh MPiH9vWocaxQoi+5a0hlvg+Hz5inAmg= -----END CERTIFICATE-----Generated at Sat Jun 13 01:10:51 2026 by rpki-client