$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa File: 8954704f-b2e8-300f-ab85-adc7a08bd067.roa (raw, json) Hash identifier: JpHcytMcxnI00u90IzWnPQyIOgpjKILLEYOAdT3liP8= Subject key identifier: 37:63:5B:CE:2B:EA:D1:6B:F0:25:5F:4D:78:38:F7:DA:5F:4D:72:D4 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584DEF45EC0E9B7B26F94486C840 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 396185 IP address blocks: 72.29.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:45:ec:0e:9b:7b:26:f9:44:86:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=b83bda24-68eb-466c-8ac4-eb06c272759e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7c:0d:65:a8:fa:da:7b:e3:c6:e8:fc:57:24: d0:6c:8a:c9:38:4c:07:0d:f9:f0:a7:39:fc:05:0e: 18:f8:1e:1e:3a:bd:0e:9f:a3:fb:a4:9a:c5:ed:00: b8:53:d1:1b:22:e0:f7:53:f0:21:d9:9a:07:2f:21: a1:bc:8c:b9:9d:71:e2:5d:3d:24:93:91:a1:24:c7: cd:cd:b5:e9:96:47:72:60:45:95:0e:1d:78:ab:15: 3a:f2:b6:c5:5a:4b:bd:5c:2c:07:d4:6f:65:4d:de: 9d:79:59:48:9a:57:56:df:58:3e:59:38:8c:40:cd: 43:0d:25:1a:58:37:c4:f8:00:5f:17:51:db:66:15: 70:09:55:7d:88:a8:3b:ce:1d:a6:65:89:11:92:9a: a4:76:7c:c6:f8:f0:a5:3d:f6:af:21:3b:ad:02:45: dc:f0:a9:bd:50:79:99:7f:e0:88:c1:18:b9:0f:05: 26:1c:bf:29:e1:52:3c:21:7d:39:84:4f:8e:3a:38: 3e:13:16:9f:35:52:58:f0:f5:54:91:92:54:07:56: 9c:6c:11:a5:20:8d:28:20:78:a4:86:10:b8:b9:82: 97:a2:d5:28:3f:30:36:38:ca:a3:45:53:3f:b9:7d: fe:79:0c:8d:36:f5:fd:6d:bb:98:af:72:a9:c6:17: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:63:5B:CE:2B:EA:D1:6B:F0:25:5F:4D:78:38:F7:DA:5F:4D:72:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2c:48:d2:23:e9:6d:66:bb:be:81:67:89:fc:f2:7f:ad:ae: b4:24:04:c8:26:f6:f0:cb:10:c7:77:c8:01:7a:c3:18:80:80: 35:d2:1e:05:30:8e:de:44:ab:d9:25:75:9a:a8:85:79:8d:30: 06:f6:64:05:5b:d4:2b:0f:9b:93:e6:a8:41:32:f1:41:43:1b: 2c:4e:04:22:f4:a9:68:c8:1a:1c:79:2b:84:5e:9b:09:36:2d: a0:73:e5:e2:1d:ca:26:38:fc:53:30:24:c1:e8:53:26:e0:83: fc:f2:b4:73:c5:6d:51:4e:70:c7:f1:41:8e:a0:15:1d:86:ad: 3f:e9:ce:1f:34:28:27:af:ef:98:7a:66:91:77:06:3a:e7:ff: 4b:6f:d9:88:33:de:0f:28:cb:9a:d6:be:a9:fd:39:db:08:97: 77:d4:51:27:da:a4:71:3a:3d:ad:22:0d:03:94:74:48:df:d2: 2b:fc:27:b5:34:7f:cc:6e:66:e8:ec:cb:db:04:ac:70:03:b3: 0f:47:c0:07:66:b7:25:de:9f:4c:0c:bc:22:46:4c:45:d8:fd: 45:a2:03:34:a0:88:45:ab:5e:02:51:79:7e:96:6c:1d:d9:be: d7:b3:9b:d6:19:d8:7c:cc:4d:df:cf:2b:a2:11:62:0e:38:8d: 18:e5:74:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRewOm3sm+USGyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk YjgzYmRhMjQtNjhlYi00NjZjLThhYzQtZWIwNmMyNzI3NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHwNZaj62nvjxuj8VyTQbIrJOEwHDfnwpzn8 BQ4Y+B4eOr0On6P7pJrF7QC4U9EbIuD3U/Ah2ZoHLyGhvIy5nXHiXT0kk5GhJMfN zbXplkdyYEWVDh14qxU68rbFWku9XCwH1G9lTd6deVlImldW31g+WTiMQM1DDSUa WDfE+ABfF1HbZhVwCVV9iKg7zh2mZYkRkpqkdnzG+PClPfavITutAkXc8Km9UHmZ f+CIwRi5DwUmHL8p4VI8IX05hE+OOjg+ExafNVJY8PVUkZJUB1acbBGlII0oIHik hhC4uYKXotUoPzA2OMqjRVM/uX3+eQyNNvX9bbuYr3Kpxhd4qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdjW84r6tFr8CVfTXg499pfTXLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvODk1NDcwNGYtYjJlOC0z MDBmLWFiODUtYWRjN2EwOGJkMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcsSNIj6W1mu76BZ4n88n+trrQkBMgm9vDLEMd3yAF6wxiAgDXSHgUw jt5Eq9kldZqohXmNMAb2ZAVb1CsPm5PmqEEy8UFDGyxOBCL0qWjIGhx5K4Remwk2 LaBz5eIdyiY4/FMwJMHoUybgg/zytHPFbVFOcMfxQY6gFR2GrT/pzh80KCev75h6 ZpF3Bjrn/0tv2Ygz3g8oy5rWvqn9OdsIl3fUUSfapHE6Pa0iDQOUdEjf0iv8J7U0 f8xuZujsy9sErHADsw9HwAdmtyXen0wMvCJGTEXY/UWiAzSgiEWrXgJReX6WbB3Z vtezm9YZ2HzMTd/PK6IRYg44jRjldAE= -----END CERTIFICATE-----Generated at Mon Jun 1 22:58:58 2026 by rpki-client