$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6ccddd9c-dd1a-3fa3-b2dc-ed9263297ecc.roa File: 6ccddd9c-dd1a-3fa3-b2dc-ed9263297ecc.roa (raw, json) Hash identifier: JSXxvLGal+0IK8KQOa+RarfLjKhSuG57VwmV72I6Jl4= Subject key identifier: 7B:E9:C6:62:F6:30:FF:49:01:FA:42:30:82:A4:0A:4A:E2:59:99:E4 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8DA239F13FA36D4EE42B7800 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6ccddd9c-dd1a-3fa3-b2dc-ed9263297ecc.roa Signing time: Sun 19 Jul 2026 18:24:21 +0000 ROA not before: Sun 19 Jul 2026 18:24:21 +0000 ROA not after: Sat 17 Oct 2026 18:24:21 +0000 asID: 395500 IP address blocks: 72.29.188.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:a2:39:f1:3f:a3:6d:4e:e4:2b:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 18:24:21 2026 GMT Not After : Oct 17 18:24:21 2026 GMT Subject: CN=804d41a4-5eca-4e84-ac18-20402e10dddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:ee:c3:75:ec:7f:ab:27:ba:4e:58:c9:c0: 1f:ab:86:e5:f5:a2:5f:e8:5b:af:9a:41:1f:3d:6c: ad:f6:fd:fa:f1:7c:a8:ef:49:d1:78:c5:ad:ea:ae: 2a:ca:a8:50:16:9c:95:ee:84:d7:d1:a5:8e:3c:86: 1e:a5:2a:a1:20:fd:4a:09:49:16:9a:6c:d8:51:ed: 58:7b:e5:61:8f:0d:62:33:f4:36:6d:26:ee:e5:a0: cb:a2:27:9c:00:69:55:19:59:f7:b7:6a:1f:df:b9: df:91:ba:0c:c7:92:b8:cc:60:77:d7:82:5b:f9:99: 90:09:b8:88:4b:3d:33:9f:98:b6:d4:91:3d:5d:25: 41:04:96:a2:9b:29:66:8d:b3:62:eb:10:82:6a:18: 66:de:89:e9:92:19:a6:3c:cc:07:e1:e1:d0:99:2a: e3:1b:1c:bd:d1:43:af:f1:61:f0:1e:af:77:59:00: f6:24:68:75:56:77:2d:08:66:31:e8:d3:30:09:b6: 26:b5:b2:08:de:b0:7f:28:30:a4:59:d7:56:de:5f: c9:de:dd:59:76:9d:84:04:42:22:01:ec:af:0e:d1: 62:39:ba:b5:d5:cb:3e:04:6a:8b:fa:c9:61:46:b5: f3:f8:48:cf:a8:33:3a:7c:c5:41:6f:7a:dd:94:d9: 02:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E9:C6:62:F6:30:FF:49:01:FA:42:30:82:A4:0A:4A:E2:59:99:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6ccddd9c-dd1a-3fa3-b2dc-ed9263297ecc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 72.29.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a6:b0:ee:0b:ff:5b:e2:40:9b:56:d2:1e:6f:3a:59:0b:ff: 09:b4:4a:fb:e7:bb:5e:34:ca:d2:89:e7:45:e6:9e:bb:b0:c1: 64:f1:0b:0e:ca:99:57:4c:a5:59:57:2c:be:87:0b:73:ab:61: 7b:fc:3e:9a:f1:59:cb:f2:7e:ff:f5:e1:49:79:d2:aa:4f:82: 8c:4a:ad:3a:24:30:8b:33:05:d0:c0:8a:66:0c:89:f1:a0:4f: cd:ce:63:5e:1a:ee:f7:0a:75:f0:de:9e:cb:f3:9f:2b:36:65: 12:4f:b8:33:a8:78:75:22:8c:c2:14:ba:bf:c3:26:77:42:24: 55:ca:65:0e:4f:fa:2e:4d:bb:91:ec:6b:fb:e8:b9:74:7d:a2: e1:88:6a:90:67:71:5d:25:6c:77:92:ab:3b:cd:7c:f1:d0:17: 43:ae:20:e3:2c:09:8c:f6:e8:ee:26:e6:64:e5:7a:9d:a4:5b: 6f:10:c4:63:c1:52:e5:6b:4e:93:14:e8:36:32:6b:a4:12:4c: 54:53:a8:29:1b:b1:d0:ac:cb:69:4e:0b:db:3e:b4:ae:f9:1b: 6d:6a:38:b7:44:f2:84:e0:53:c9:2b:a0:5e:88:6c:e9:d8:1b: df:80:51:6c:30:29:3d:c0:2a:64:1a:43:d0:09:d4:41:61:55: ad:6a:d7:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6NojnxP6NtTuQreAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTE4MjQyMVoXDTI2MTAxNzE4MjQyMVowLzEtMCsGA1UEAxMk ODA0ZDQxYTQtNWVjYS00ZTg0LWFjMTgtMjA0MDJlMTBkZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJPuw3Xsf6snuk5YycAfq4bl9aJf6FuvmkEf PWyt9v368Xyo70nReMWt6q4qyqhQFpyV7oTX0aWOPIYepSqhIP1KCUkWmmzYUe1Y e+Vhjw1iM/Q2bSbu5aDLoiecAGlVGVn3t2of37nfkboMx5K4zGB314Jb+ZmQCbiI Sz0zn5i21JE9XSVBBJaimylmjbNi6xCCahhm3onpkhmmPMwH4eHQmSrjGxy90UOv 8WHwHq93WQD2JGh1VnctCGYx6NMwCbYmtbII3rB/KDCkWddW3l/J3t1Zdp2EBEIi AeyvDtFiObq11cs+BGqL+slhRrXz+EjPqDM6fMVBb3rdlNkCIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvpxmL2MP9JAfpCMIKkCkriWZnkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNmNjZGRkOWMtZGQxYS0z ZmEzLWIyZGMtZWQ5MjYzMjk3ZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWmsO4L/1viQJtW0h5vOlkL/wm0Svvnu140ytKJ50XmnruwwWTxCw7K mVdMpVlXLL6HC3OrYXv8PprxWcvyfv/14Ul50qpPgoxKrTokMIszBdDAimYMifGg T83OY14a7vcKdfDensvznys2ZRJPuDOoeHUijMIUur/DJndCJFXKZQ5P+i5Nu5Hs a/vouXR9ouGIapBncV0lbHeSqzvNfPHQF0OuIOMsCYz26O4m5mTlep2kW28QxGPB UuVrTpMU6DYya6QSTFRTqCkbsdCsy2lOC9s+tK75G21qOLdE8oTgU8kroF6IbOnY G9+AUWwwKT3AKmQaQ9AJ1EFhVa1q1wA= -----END CERTIFICATE-----Generated at Tue Jul 21 22:36:56 2026 by rpki-client