$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa File: ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa (raw, json) Hash identifier: ImMRVFyOsOovj3z3zlGduuVEInnFt+NutGajk9VjLVg= Subject key identifier: AE:28:E5:DB:A6:92:35:54:34:07:0D:4F:FC:10:09:D0:7D:18:9F:09 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584A6DBB51C9A08C282C2F6C2680 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 396185 IP address blocks: 72.29.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:51:c9:a0:8c:28:2c:2f:6c:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=351a6dde-77bf-42c9-8e21-042f22b1f73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:6e:79:a9:aa:6e:a1:5b:61:34:93:d1:4b: e8:b7:d8:20:ec:ab:80:89:0e:61:bb:10:43:9e:c3: 99:f6:d1:d6:a2:8f:c8:88:4b:b9:d2:ae:d5:09:66: 89:8d:be:fa:88:ec:1b:f4:52:63:a4:39:46:1a:27: 05:13:3f:29:ef:8d:ff:fe:81:26:59:81:64:57:b9: 01:87:46:71:4e:ee:a5:d9:ea:a0:1f:69:78:69:6b: 6a:69:aa:e2:1e:54:a0:1c:82:2f:42:6e:37:41:15: 25:b3:fc:7b:8d:38:5c:ec:b0:c1:f1:a6:a3:1b:b2: c3:55:c1:35:29:8b:52:98:07:e9:d1:45:40:7e:a3: 3c:2f:b8:36:ed:b3:ba:9f:38:87:13:9e:06:44:5f: 95:5e:2a:53:0f:3f:51:ce:52:19:d7:8c:37:32:07: 75:f7:89:27:79:fd:f0:06:8a:c4:9a:e7:96:f2:7e: 61:56:c0:b8:e2:c9:fb:35:5f:c4:98:3a:0c:7c:db: f0:11:04:d5:47:9a:9a:ea:96:3e:0f:ef:7b:07:3a: 3c:1f:68:75:f4:be:cc:4d:b6:05:f6:3d:71:09:75: 49:b0:bb:77:19:c8:fd:2c:3d:88:01:6d:b1:e9:43: 03:b9:d2:d9:7f:ba:89:1b:0c:29:7a:42:e0:93:22: b5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:28:E5:DB:A6:92:35:54:34:07:0D:4F:FC:10:09:D0:7D:18:9F:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/ebc47c6f-8273-314c-8c9a-ecb40201cee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:59:79:4a:91:f4:fe:91:ee:df:e6:51:96:97:62:fd:e4:16: 74:0f:2e:f3:03:71:c7:ed:b6:29:4e:32:f2:a5:ab:ab:6f:61: bd:f0:84:90:68:71:f7:7c:7e:07:f7:c1:40:8a:b7:62:8d:47: 26:6c:7c:82:74:69:6e:31:ba:3d:d2:23:b5:91:bc:bb:4c:96: 49:a6:fb:c9:e9:8d:82:a5:ce:b0:fd:50:c8:3a:32:7d:8e:50: ce:23:b3:88:b3:fb:6a:3e:f7:f9:38:94:fc:7b:d5:70:df:a4: e3:56:a9:60:39:c6:bd:d5:ae:67:d0:d2:87:6e:e4:e4:fd:5b: 13:80:26:c5:4e:d7:88:c0:be:e8:a4:a2:03:e2:47:21:1f:1c: b3:2f:06:73:ed:f7:6a:53:59:4e:d3:b7:11:8f:3d:19:80:c5: 0a:3a:a8:76:ac:35:fa:9c:af:86:1b:e1:e1:9e:f9:f5:d9:06: 0d:b2:ca:d7:bd:82:6e:ca:78:65:9b:23:25:90:17:68:4c:f4: 6f:b9:48:19:d5:7e:0e:e7:fa:ba:3a:32:9f:8e:8b:db:83:39: 37:3e:e6:35:be:8c:42:b0:ff:98:1b:99:0e:b7:dd:93:fa:2d: ae:b4:52:ce:4e:c1:dd:8d:d1:52:a8:10:29:5f:b6:4b:28:b2: 38:0a:a9:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1HJoIwoLC9sJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk MzUxYTZkZGUtNzdiZi00MmM5LThlMjEtMDQyZjIyYjFmNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4NueamqbqFbYTST0Uvot9gg7KuAiQ5huxBD nsOZ9tHWoo/IiEu50q7VCWaJjb76iOwb9FJjpDlGGicFEz8p743//oEmWYFkV7kB h0ZxTu6l2eqgH2l4aWtqaariHlSgHIIvQm43QRUls/x7jThc7LDB8aajG7LDVcE1 KYtSmAfp0UVAfqM8L7g27bO6nziHE54GRF+VXipTDz9RzlIZ14w3Mgd194knef3w BorEmueW8n5hVsC44sn7NV/EmDoMfNvwEQTVR5qa6pY+D+97Bzo8H2h19L7MTbYF 9j1xCXVJsLt3Gcj9LD2IAW2x6UMDudLZf7qJGwwpekLgkyK1GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4o5dumkjVUNAcNT/wQCdB9GJ8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvZWJjNDdjNmYtODI3My0z MTRjLThjOWEtZWNiNDAyMDFjZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRZeUqR9P6R7t/mUZaXYv3kFnQPLvMDccfttilOMvKlq6tvYb3whJBo cfd8fgf3wUCKt2KNRyZsfIJ0aW4xuj3SI7WRvLtMlkmm+8npjYKlzrD9UMg6Mn2O UM4js4iz+2o+9/k4lPx71XDfpONWqWA5xr3VrmfQ0odu5OT9WxOAJsVO14jAvuik ogPiRyEfHLMvBnPt92pTWU7TtxGPPRmAxQo6qHasNfqcr4Yb4eGe+fXZBg2yyte9 gm7KeGWbIyWQF2hM9G+5SBnVfg7n+ro6Mp+Oi9uDOTc+5jW+jEKw/5gbmQ633ZP6 La60Us5Owd2N0VKoEClftksosjgKqfs= -----END CERTIFICATE-----Generated at Sun Jul 13 12:38:49 2025 by rpki-client