$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29285be7-eaca-3a1c-8f13-b2dd8eec1d1a.roa File: 29285be7-eaca-3a1c-8f13-b2dd8eec1d1a.roa (raw, json) Hash identifier: CtX4F4B0GqkXY5v7igglMktK25kGVelIzZHXy/caRq8= Subject key identifier: D5:FE:E3:07:8C:E2:EC:8A:7F:FC:16:A1:AA:24:5A:30:4E:01:D9:42 Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Certificate serial: 010D0C9F4328584D4D5A6D44375BF72A2F2FD550 Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29285be7-eaca-3a1c-8f13-b2dd8eec1d1a.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 2734 IP address blocks: 66.128.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:6d:44:37:5b:f7:2a:2f:2f:d5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=2343fba6-118e-427e-9e4e-2b2f4aed8ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:0a:39:cd:4d:8c:82:c2:b6:b5:e3:28:03: 20:79:da:68:27:ba:16:f3:03:37:ea:01:1b:f8:2f: 23:ca:5c:8e:4b:25:55:6b:fc:ed:36:7d:86:8b:5f: e6:82:1a:cb:5c:d9:30:78:17:cb:b4:1e:00:45:23: 90:77:62:ee:64:80:f7:bd:27:02:09:aa:57:85:8a: 8d:53:6f:1a:25:bc:23:0c:2f:ef:af:d8:f1:17:b8: 89:1d:2f:54:5b:dd:aa:5f:9d:29:f3:ae:b9:ee:41: 33:05:bc:35:b2:6d:49:a6:7c:64:59:85:c4:38:64: 47:3a:61:a1:76:f1:18:d0:1c:9b:5e:05:78:55:35: 2e:d0:41:d2:58:f0:76:83:df:df:9e:b6:f5:9f:93: a1:2e:9a:b9:91:48:c0:e8:7b:25:e7:3e:16:55:49: e9:01:34:3c:2c:7a:50:47:7c:3b:96:46:e0:68:b4: fc:85:ef:3c:e0:41:c8:4c:0e:fd:8b:0e:9f:49:6c: a0:9c:18:ba:ba:7c:a7:c0:dd:ff:53:b5:66:ca:29: 46:3c:2b:b8:d5:cd:e9:33:d7:fb:31:19:fa:e9:d6: b9:59:20:22:62:39:2f:9a:18:4c:62:09:41:00:36: 1b:d9:fe:2d:95:0b:73:08:0f:b7:52:7c:d1:88:3e: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FE:E3:07:8C:E2:EC:8A:7F:FC:16:A1:AA:24:5A:30:4E:01:D9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29285be7-eaca-3a1c-8f13-b2dd8eec1d1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl X509v3 Authority Key Identifier: keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer sbgp-ipAddrBlock: critical IPv4: 66.128.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:1e:ad:33:77:95:4e:1d:04:e1:10:83:59:de:84:46:be:73: 87:a0:67:34:73:87:94:1d:83:d1:ec:59:90:92:54:a3:d6:44: 8c:b0:e7:a6:70:ef:4c:86:53:43:09:58:fb:cf:c9:49:9d:8a: 7b:79:85:37:0a:47:e6:d6:83:dd:b9:84:e5:17:d6:41:d1:de: 81:2b:73:4b:83:ce:da:91:d7:cb:02:f2:22:87:c7:3c:ac:9b: bb:a8:97:04:42:86:0b:48:d1:4e:4d:85:cc:93:fe:c7:56:cc: 38:81:88:37:d4:ba:5f:3e:78:7f:99:24:89:1e:b9:4d:2a:be: a7:39:c6:bb:10:a8:6e:9f:5d:09:0e:5e:f8:e2:90:82:c8:79: a0:16:6c:04:18:fb:29:c8:4b:c0:13:8c:01:84:47:1d:c4:b0: 69:c4:44:57:ee:ec:a2:a7:3c:22:12:5b:d1:69:ec:2e:d8:73: 28:57:94:eb:91:be:62:b2:fd:6f:6e:70:b2:82:d6:d8:0b:15: 74:f5:5d:62:6f:a9:b5:c8:0d:c5:a3:15:ef:f2:19:90:40:65: 0a:e9:9f:4e:a5:4b:0d:a0:21:28:36:1d:48:a9:9a:46:15:f8: 0b:f8:13:21:aa:41:86:ef:af:53:df:0a:b2:4e:7f:01:28:26: 36:6e:ff:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWm1EN1v3Ki8v1VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw MTRhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MjM0M2ZiYTYtMTE4ZS00MjdlLTllNGUtMmIyZjRhZWQ4ZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhQKOc1NjILCtrXjKAMgedpoJ7oW8wM36gEb +C8jylyOSyVVa/ztNn2Gi1/mghrLXNkweBfLtB4ARSOQd2LuZID3vScCCapXhYqN U28aJbwjDC/vr9jxF7iJHS9UW92qX50p86657kEzBbw1sm1JpnxkWYXEOGRHOmGh dvEY0BybXgV4VTUu0EHSWPB2g9/fnrb1n5OhLpq5kUjA6Hsl5z4WVUnpATQ8LHpQ R3w7lkbgaLT8he884EHITA79iw6fSWygnBi6unynwN3/U7VmyilGPCu41c3pM9f7 MRn66da5WSAiYjkvmhhMYglBADYb2f4tlQtzCA+3UnzRiD5QTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNX+4weM4uyKf/wWoaokWjBOAdlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1 ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvMjkyODViZTctZWFjYS0z YTFjLThmMTMtYjJkZDhlZWMxZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5 MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2 MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgerTN3lU4dBOEQg1nehEa+c4egZzRzh5Qdg9HsWZCSVKPWRIyw56Zw 70yGU0MJWPvPyUmdint5hTcKR+bWg925hOUX1kHR3oErc0uDztqR18sC8iKHxzys m7uolwRChgtI0U5NhcyT/sdWzDiBiDfUul8+eH+ZJIkeuU0qvqc5xrsQqG6fXQkO XvjikILIeaAWbAQY+ynIS8ATjAGERx3EsGnERFfu7KKnPCISW9Fp7C7YcyhXlOuR vmKy/W9ucLKC1tgLFXT1XWJvqbXIDcWjFe/yGZBAZQrpn06lSw2gISg2HUipmkYV +Av4EyGqQYbvr1PfCrJOfwEoJjZu/6s= -----END CERTIFICATE-----Generated at Fri Apr 17 09:55:18 2026 by rpki-client