$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7654818c-dc53-3730-ba27-2df80fc36fca.roa File: 7654818c-dc53-3730-ba27-2df80fc36fca.roa (raw, json) Hash identifier: MAQpS71/4Kmmxb5gqA6tLr+VZaqy7cYMZBYdC/QYJgE= Subject key identifier: DC:DE:B3:F5:13:E1:C1:0A:79:9B:19:05:3A:BD:23:6D:00:CA:EC:16 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584CAA271FF48BAC2DC5CC101140 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7654818c-dc53-3730-ba27-2df80fc36fca.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 27310 IP address blocks: 72.29.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:1f:f4:8b:ac:2d:c5:cc:10:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=73468bee-0eed-48e7-9b3a-8d7223e9cff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:5c:9c:87:b8:7a:17:26:e7:43:11:ae:7f: ed:a7:3e:e6:cf:0a:f7:d3:84:32:2c:5e:b0:6b:1f: f6:a2:27:87:42:02:be:79:32:0f:80:61:08:5f:a0: 34:75:e0:73:ca:d4:ef:5b:e4:ec:f3:8b:0f:87:8d: 2b:80:d4:da:dd:ab:9a:dd:ce:73:ec:52:77:37:ab: cd:26:60:5d:c1:55:f6:2a:d3:5a:3a:14:36:4e:54: a1:a0:ac:ac:66:56:7a:27:84:44:5f:50:51:f5:64: 3c:3c:59:4c:25:be:ff:57:c7:95:d1:58:f6:2a:4d: d5:b4:91:40:43:81:f1:36:65:8f:b5:ff:42:db:b5: d0:23:0b:e3:38:35:40:a8:ea:4d:56:54:6d:db:11: 9a:96:47:e7:f7:9f:16:66:da:a8:cb:6b:ec:ec:ea: ea:9e:1e:31:00:df:e4:3d:02:6d:a4:79:ad:99:b3: 6e:06:b5:4d:f4:04:da:22:ef:ef:7f:0b:e6:34:81: 67:5d:10:5e:80:09:c9:a2:72:31:b9:7e:69:fb:39: 3a:c1:ac:9b:0e:72:13:82:72:32:f8:61:a3:aa:99: a4:42:2a:64:ed:7a:08:20:7d:3d:0a:8a:20:50:73: 54:a3:35:ce:5a:ff:b2:d1:2a:2a:2f:f5:3e:ed:f7: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DE:B3:F5:13:E1:C1:0A:79:9B:19:05:3A:BD:23:6D:00:CA:EC:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7654818c-dc53-3730-ba27-2df80fc36fca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.29.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:0c:7c:50:bb:2b:79:8d:5c:9d:50:51:6e:76:7c:47:4a:54: 12:79:85:f3:f3:42:4a:0e:aa:29:d9:77:92:63:bc:1f:7a:57: 93:99:54:b1:39:2d:5f:1f:0a:15:3e:be:92:ad:7d:15:e5:8f: 8c:da:39:56:3f:77:66:6d:cd:b1:e4:2d:8d:c5:61:0d:b8:4c: 34:75:65:07:af:28:58:88:6d:57:5b:d9:51:09:83:43:4d:23: e8:b3:44:bf:15:72:7b:f9:6c:d4:e1:cf:8f:8e:d8:40:24:6f: 2d:25:5b:58:7e:27:81:ce:5d:cc:1d:c9:25:47:c1:83:75:22: 3d:fe:2a:95:8f:7b:bb:5b:48:b5:f7:c9:d9:b0:f5:fd:81:9d: 85:96:98:d3:a2:59:f9:00:8a:5c:84:93:e2:95:31:52:05:c0: 50:c9:f9:64:86:77:b8:a6:04:c3:54:c8:d0:78:1d:02:37:1a: 80:66:4a:41:5e:25:f9:ef:e6:b1:cb:cd:97:4e:bf:3b:4c:07: f4:e7:55:63:8f:ec:7c:e0:4b:16:c4:87:61:8c:45:30:c0:ef: 98:5b:04:aa:b8:6f:00:ee:d3:e6:e3:64:f3:58:c5:3a:25:28: 00:3f:f0:ab:66:41:a3:9d:5f:ee:e6:1d:fa:fd:79:2d:db:83: b9:e4:d6:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJx/0i6wtxcwQEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NzM0NjhiZWUtMGVlZC00OGU3LTliM2EtOGQ3MjIzZTljZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sdcnIe4ehcm50MRrn/tpz7mzwr304QyLF6w ax/2oieHQgK+eTIPgGEIX6A0deBzytTvW+Ts84sPh40rgNTa3aua3c5z7FJ3N6vN JmBdwVX2KtNaOhQ2TlShoKysZlZ6J4REX1BR9WQ8PFlMJb7/V8eV0Vj2Kk3VtJFA Q4HxNmWPtf9C27XQIwvjODVAqOpNVlRt2xGalkfn958WZtqoy2vs7Orqnh4xAN/k PQJtpHmtmbNuBrVN9ATaIu/vfwvmNIFnXRBegAnJonIxuX5p+zk6waybDnITgnIy +GGjqpmkQipk7XoIIH09CoogUHNUozXOWv+y0SoqL/U+7fehBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzes/UT4cEKeZsZBTq9I20AyuwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNzY1NDgxOGMtZGM1My0z NzMwLWJhMjctMmRmODBmYzM2ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQMfFC7K3mNXJ1QUW52fEdKVBJ5hfPzQkoOqinZd5JjvB96V5OZVLE5 LV8fChU+vpKtfRXlj4zaOVY/d2ZtzbHkLY3FYQ24TDR1ZQevKFiIbVdb2VEJg0NN I+izRL8Vcnv5bNThz4+O2EAkby0lW1h+J4HOXcwdySVHwYN1Ij3+KpWPe7tbSLX3 ydmw9f2BnYWWmNOiWfkAilyEk+KVMVIFwFDJ+WSGd7imBMNUyNB4HQI3GoBmSkFe Jfnv5rHLzZdOvztMB/TnVWOP7HzgSxbEh2GMRTDA75hbBKq4bwDu0+bjZPNYxTol KAA/8KtmQaOdX+7mHfr9eS3bg7nk1jQ= -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:26 2026 by rpki-client