$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa File: 8954704f-b2e8-300f-ab85-adc7a08bd067.roa (raw, json) Hash identifier: E2+wQhyX8Fw5gCghSjSA8BUjAW/Q3tIn6furXMHdYrg= Subject key identifier: 08:34:94:64:13:07:F2:69:FF:24:6C:95:CB:46:32:90:CF:C7:A4:AF Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584A6DBB5190262F7148DC731640 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 396185 IP address blocks: 72.29.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:51:90:26:2f:71:48:dc:73:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=67193a0b-4f88-4229-bf11-31e07fddd248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:9e:8c:1b:70:e1:ca:f8:d9:71:f3:23:83: f5:d9:af:90:03:c6:7d:63:18:a3:53:91:51:d4:98: 34:cd:cc:b9:b3:58:02:3d:aa:0d:23:78:6f:f1:8d: 26:79:0d:e6:5f:03:50:f2:73:20:fc:90:dd:64:e6: f9:4a:13:10:e1:23:4d:a5:dc:a9:69:21:8f:9f:93: 21:c1:e6:9a:2d:f6:69:08:dc:0d:a9:d7:0e:45:c2: 6c:91:ec:7b:c6:9c:05:41:84:05:ee:8a:e4:ef:97: 7c:91:da:72:12:3f:ff:f0:a9:9f:8e:c3:f5:18:92: e2:ab:b8:3c:0c:69:8f:20:79:50:03:5c:c5:fd:a0: 19:b1:db:7b:eb:f3:01:35:79:75:ed:5f:a3:24:0b: 30:d5:a1:fa:1f:7b:45:f6:36:5e:b7:86:95:a2:85: 5b:12:4f:1b:23:45:13:18:0c:3b:0c:ee:16:37:e6: 82:56:9c:49:59:62:92:cc:c6:6d:71:12:90:ba:cf: c9:cb:ef:66:58:60:3c:ba:87:87:11:95:1c:9d:58: 06:d2:5e:98:e8:50:e8:da:f8:97:28:86:61:dd:11: 9c:56:15:d5:e5:70:a1:1d:8d:0f:5c:0a:ee:c3:91: 79:64:4f:4c:6f:ca:29:01:ae:99:ea:3a:0a:50:10: 94:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:34:94:64:13:07:F2:69:FF:24:6C:95:CB:46:32:90:CF:C7:A4:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8954704f-b2e8-300f-ab85-adc7a08bd067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:05:7e:a1:0b:91:bf:f6:53:07:d2:98:8d:5e:3c:40:9e:2b: b7:36:75:99:23:0b:1b:35:87:e2:a6:9c:a4:6a:01:2f:63:49: 84:95:f3:0e:87:e6:5f:5f:4d:53:7a:8c:a7:e2:eb:d8:26:cb: 86:29:21:48:43:65:8e:a8:bc:ca:84:89:49:5c:62:34:9d:2f: c5:6c:fc:42:7e:98:b8:e5:fb:a3:12:23:c0:6d:33:87:45:e0: 9d:d2:e7:e3:5a:61:d4:27:41:b3:95:c9:a1:15:84:19:06:47: a8:ac:d5:8a:6c:51:46:13:f1:f3:30:49:e9:14:51:51:14:bd: d7:e8:7d:0c:ae:a8:03:60:9f:fb:99:5b:f6:fd:9b:d4:97:4d: da:e3:bb:6f:2b:93:42:33:84:f5:c7:3f:9a:a2:2f:5a:7a:8f: 2f:09:38:eb:a7:f3:ce:10:98:ae:a0:be:c8:8e:63:e0:c1:0f: ae:98:87:11:a6:38:fa:97:22:d0:46:23:cc:44:8c:c6:36:63: 62:8b:91:ca:a7:2c:80:8e:18:e3:c1:0f:3e:35:47:64:6f:95: 75:44:b5:88:5b:50:69:fd:e7:72:05:84:47:9d:bb:08:7f:a0: 8a:ea:fc:98:3e:08:a9:b8:0f:ca:8a:37:89:53:2c:bc:fd:80: 0c:84:7d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1GQJi9xSNxzFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk NjcxOTNhMGItNGY4OC00MjI5LWJmMTEtMzFlMDdmZGRkMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+mejBtw4cr42XHzI4P12a+QA8Z9YxijU5FR 1Jg0zcy5s1gCPaoNI3hv8Y0meQ3mXwNQ8nMg/JDdZOb5ShMQ4SNNpdypaSGPn5Mh weaaLfZpCNwNqdcORcJskex7xpwFQYQF7ork75d8kdpyEj//8KmfjsP1GJLiq7g8 DGmPIHlQA1zF/aAZsdt76/MBNXl17V+jJAsw1aH6H3tF9jZet4aVooVbEk8bI0UT GAw7DO4WN+aCVpxJWWKSzMZtcRKQus/Jy+9mWGA8uoeHEZUcnVgG0l6Y6FDo2viX KIZh3RGcVhXV5XChHY0PXAruw5F5ZE9Mb8opAa6Z6joKUBCUuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg0lGQTB/Jp/yRslctGMpDPx6SvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvODk1NDcwNGYtYjJlOC0z MDBmLWFiODUtYWRjN2EwOGJkMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4FfqELkb/2UwfSmI1ePECeK7c2dZkjCxs1h+KmnKRqAS9jSYSV8w6H 5l9fTVN6jKfi69gmy4YpIUhDZY6ovMqEiUlcYjSdL8Vs/EJ+mLjl+6MSI8BtM4dF 4J3S5+NaYdQnQbOVyaEVhBkGR6is1YpsUUYT8fMwSekUUVEUvdfofQyuqANgn/uZ W/b9m9SXTdrju28rk0IzhPXHP5qiL1p6jy8JOOun884QmK6gvsiOY+DBD66YhxGm OPqXItBGI8xEjMY2Y2KLkcqnLICOGOPBDz41R2RvlXVEtYhbUGn953IFhEeduwh/ oIrq/Jg+CKm4D8qKN4lTLLz9gAyEfdc= -----END CERTIFICATE-----Generated at Sun Jul 13 12:10:35 2025 by rpki-client