$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa File: 59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa (raw, json) Hash identifier: o0pIrWJAsORezqNcSWzEuNxcKXZZCb8EuMmQ0sAi5cA= Subject key identifier: 0F:7A:CB:FC:9B:B5:CB:97:EF:6D:27:6C:1D:2B:CE:C9:7A:0A:62:F4 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584EA793F6B8059FE528BDED7E00 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 53959 IP address blocks: 72.29.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:f6:b8:05:9f:e5:28:bd:ed:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=716140e7-daac-405d-b3fc-36a7edccf027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:73:72:85:43:26:71:5a:2f:93:d2:e9:13: f3:7e:a9:79:d0:07:2d:82:aa:6d:81:bb:f0:a2:7a: 0b:86:fd:d8:ec:17:28:97:68:d4:c7:ea:48:9e:c9: dc:9f:62:d0:9a:1b:db:6d:2c:8b:65:8c:aa:5d:47: 73:d0:69:b8:49:bf:c3:c0:2e:56:80:7f:c9:98:6b: 86:1e:dd:1e:16:55:9e:43:f5:8e:ea:ce:58:3b:a8: d4:f1:f6:28:45:38:a9:e7:6d:18:4b:5e:01:8c:84: d2:99:df:2b:74:b9:50:82:cc:6a:e6:04:5f:e1:94: 75:1c:c7:85:86:a1:d1:65:b5:aa:fd:55:7a:0a:92: 3f:e7:12:cf:b7:bd:e5:be:91:6d:24:a5:28:1e:ec: e8:42:2e:10:f2:0f:c3:2b:c0:5b:1d:ca:31:6e:41: 5f:ea:72:f5:d4:30:4f:e0:1f:d8:84:9f:92:bc:b4: 76:68:3c:0f:34:c5:12:12:78:1b:24:df:68:e6:54: f8:58:77:f9:af:5d:39:74:14:d8:ca:c8:1f:87:b2: bc:d4:43:9a:8a:34:4e:34:b8:d2:42:d6:79:b5:06: ea:6c:46:e7:61:91:2e:7e:3c:2a:53:eb:79:f3:4d: 50:42:83:3c:6d:17:9d:1e:25:e9:24:b4:76:07:3e: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7A:CB:FC:9B:B5:CB:97:EF:6D:27:6C:1D:2B:CE:C9:7A:0A:62:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/59b926a7-8cb8-380d-b8ea-a01e5c090c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2e:83:ec:a5:05:ca:da:a3:e0:2d:bb:8e:d1:11:cb:59:04: 29:20:e9:f8:f6:63:47:c8:60:44:e6:ed:45:5f:99:5b:c1:8d: 79:ce:ee:61:c0:32:53:4d:4b:24:a2:50:17:f1:77:bc:15:d5: 8c:b0:e5:9c:aa:1f:a4:fc:44:c7:1f:ab:3d:e8:d1:30:9c:54: dd:ba:20:ad:16:a0:58:fe:db:49:bf:de:74:af:0f:99:97:b0: 9c:53:0b:62:b3:21:f5:a1:6f:54:f1:5a:1e:30:7b:e0:ca:89: fc:68:c8:6b:c9:b3:7f:3a:4a:a3:20:43:90:c8:4f:8e:d0:0a: 07:2b:91:97:fd:d8:14:fb:15:ce:4a:b0:bd:ae:6a:eb:2c:cb: fe:63:c2:30:b5:2d:bd:e1:ae:ef:32:b1:d6:53:19:93:94:0f: a3:e5:ec:fd:0a:9c:a9:b2:c4:17:7d:9a:1c:db:5b:3a:c5:37: 29:3d:b9:63:8e:59:9e:77:19:e8:78:80:ce:c3:c3:29:8f:1d: b4:4a:4e:7c:7a:32:00:6d:74:ee:95:e4:28:9a:4b:ce:a0:31: c4:9e:d4:2d:7c:cf:24:99:e5:8f:a2:6c:00:c4:67:59:59:a5: c5:bc:b4:d0:2f:50:0a:a3:71:b6:61:f4:08:a3:0a:bd:1b:c7: 9f:50:79:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk/a4BZ/lKL3tfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzE2MTQwZTctZGFhYy00MDVkLWIzZmMtMzZhN2VkY2NmMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjRzcoVDJnFaL5PS6RPzfql50Actgqptgbvw onoLhv3Y7Bcol2jUx+pInsncn2LQmhvbbSyLZYyqXUdz0Gm4Sb/DwC5WgH/JmGuG Ht0eFlWeQ/WO6s5YO6jU8fYoRTip520YS14BjITSmd8rdLlQgsxq5gRf4ZR1HMeF hqHRZbWq/VV6CpI/5xLPt73lvpFtJKUoHuzoQi4Q8g/DK8BbHcoxbkFf6nL11DBP 4B/YhJ+SvLR2aDwPNMUSEngbJN9o5lT4WHf5r105dBTYysgfh7K81EOaijRONLjS QtZ5tQbqbEbnYZEufjwqU+t5801QQoM8bRedHiXpJLR2Bz5AfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA96y/ybtcuX720nbB0rzsl6CmL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvNTliOTI2YTctOGNiOC0z ODBkLWI4ZWEtYTAxZTVjMDkwYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEug+ylBcrao+Atu47REctZBCkg6fj2Y0fIYETm7UVfmVvBjXnO7mHA MlNNSySiUBfxd7wV1Yyw5ZyqH6T8RMcfqz3o0TCcVN26IK0WoFj+20m/3nSvD5mX sJxTC2KzIfWhb1TxWh4we+DKifxoyGvJs386SqMgQ5DIT47QCgcrkZf92BT7Fc5K sL2uaussy/5jwjC1Lb3hru8ysdZTGZOUD6Pl7P0KnKmyxBd9mhzbWzrFNyk9uWOO WZ53Geh4gM7DwymPHbRKTnx6MgBtdO6V5CiaS86gMcSe1C18zySZ5Y+ibADEZ1lZ pcW8tNAvUAqjcbZh9AijCr0bx59QeSk= -----END CERTIFICATE-----Generated at Wed Jul 29 06:51:59 2026 by rpki-client