$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa File: aafbf529-4916-398b-bbf0-e5bb5123a67b.roa (raw, json) Hash identifier: kgV8kQwCsmAS9DcwunqZX0ZnS++ERSIRtHEoZuhgwC8= Subject key identifier: 24:1E:21:C4:BF:70:BC:D4:54:02:A3:C7:7C:B7:47:58:5E:7A:1E:F1 Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Certificate serial: 010D0C9F4328584AADF11B473C59E9C44B4AE9C0 Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 2734 IP address blocks: 67.212.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1b:47:3c:59:e9:c4:4b:4a:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=f3c97c28-0d66-4216-a45e-e6f01d8c93d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:8c:1d:41:59:79:0b:d3:14:64:3e:0a:9d: 25:3d:73:a5:06:b4:7b:cb:7b:99:68:a0:6c:bb:3f: 14:38:62:75:f9:b5:d3:e5:dc:16:14:9d:21:28:86: 69:0f:2f:08:cf:b0:ac:78:eb:e3:41:26:5f:2a:6f: fc:44:33:a9:58:ef:6a:1f:12:32:be:1d:e3:a4:b8: d2:45:f1:23:f2:03:f2:13:90:81:3c:7c:c1:36:bd: 9b:f7:7e:f7:23:8a:58:ed:f2:4b:b7:12:f7:41:f1: 17:71:8e:1e:70:3d:df:b3:a2:08:cb:86:fd:4c:0f: db:aa:88:da:3f:cc:d3:49:30:49:c1:43:ca:56:f3: 8b:30:e9:23:93:f0:13:df:12:ec:86:ad:45:04:07: 21:12:8e:73:d9:7f:c4:2e:2d:59:b2:94:dd:ae:9d: 46:ea:03:e6:4c:74:a8:1a:89:86:9f:de:5b:a3:4b: 65:2c:9b:c4:a1:00:9f:ea:99:d5:a4:8b:23:f6:bb: c0:ff:65:af:60:49:35:28:d5:5e:64:b7:d5:14:22: c7:6b:42:de:e1:38:b3:82:61:19:17:75:8f:68:4c: c3:61:e1:7b:ab:dd:8c:86:dc:9e:74:31:31:a7:1f: 9e:02:89:95:78:4a:a2:78:4d:bf:8a:cb:71:40:49: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1E:21:C4:BF:70:BC:D4:54:02:A3:C7:7C:B7:47:58:5E:7A:1E:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl X509v3 Authority Key Identifier: keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer sbgp-ipAddrBlock: critical IPv4: 67.212.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4e:6d:46:7d:41:24:db:b4:df:f2:28:3e:6a:8a:aa:b4:d8: ac:a0:a9:e0:2c:2c:fe:38:bb:4c:af:83:b1:e3:c8:c2:4c:72: 20:63:f0:b4:6f:6f:a5:95:f1:aa:3e:c7:79:22:7a:a5:c0:8c: 37:6a:0d:5b:ad:b5:e2:fe:f9:14:aa:a9:e0:ef:24:8a:9f:b2: 5c:68:f8:d1:7f:b5:1b:ec:ed:a5:3a:e4:71:80:8e:cd:f4:88: c3:8d:55:43:a7:30:4c:7d:68:d4:3f:da:35:a0:ee:c3:0c:c2: 47:f9:97:ea:f8:78:bf:0b:22:08:51:67:cc:27:a3:8d:44:a1: 7e:3f:b2:c5:db:c2:45:75:3b:4c:b9:42:a0:3b:9b:d6:22:db: 71:f6:9f:0e:8c:22:89:14:10:b5:5a:da:09:de:fe:b1:8d:52: 28:7e:0b:9d:eb:dc:45:43:57:00:74:bb:9d:57:b1:83:7e:75: 2e:e8:91:5d:55:70:ed:82:3d:07:20:11:58:36:5c:25:fd:75: d6:ee:15:ae:47:87:6f:41:6b:1a:da:ed:37:df:2d:73:37:87: 36:23:1f:d2:4b:37:12:ca:83:71:26:95:83:fc:a4:4f:96:d1: 62:63:80:7d:55:3f:94:c1:83:be:0c:48:8c:6f:8a:ee:d0:06: 03:2a:de:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RtHPFnpxEtK6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw MTRhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZjNjOTdjMjgtMGQ2Ni00MjE2LWE0NWUtZTZmMDFkOGM5M2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopuMHUFZeQvTFGQ+Cp0lPXOlBrR7y3uZaKBs uz8UOGJ1+bXT5dwWFJ0hKIZpDy8Iz7CseOvjQSZfKm/8RDOpWO9qHxIyvh3jpLjS RfEj8gPyE5CBPHzBNr2b9373I4pY7fJLtxL3QfEXcY4ecD3fs6IIy4b9TA/bqoja P8zTSTBJwUPKVvOLMOkjk/AT3xLshq1FBAchEo5z2X/ELi1ZspTdrp1G6gPmTHSo GomGn95bo0tlLJvEoQCf6pnVpIsj9rvA/2WvYEk1KNVeZLfVFCLHa0Le4TizgmEZ F3WPaEzDYeF7q92MhtyedDExpx+eAomVeEqieE2/istxQEnKaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQeIcS/cLzUVAKjx3y3R1heeh7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1 ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvYWFmYmY1MjktNDkxNi0z OThiLWJiZjAtZTViYjUxMjNhNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5 MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2 MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ9ScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtObUZ9QSTbtN/yKD5qiqq02KygqeAsLP44u0yvg7HjyMJMciBj8LRv b6WV8ao+x3kieqXAjDdqDVutteL++RSqqeDvJIqfslxo+NF/tRvs7aU65HGAjs30 iMONVUOnMEx9aNQ/2jWg7sMMwkf5l+r4eL8LIghRZ8wno41EoX4/ssXbwkV1O0y5 QqA7m9Yi23H2nw6MIokUELVa2gne/rGNUih+C53r3EVDVwB0u51XsYN+dS7okV1V cO2CPQcgEVg2XCX9ddbuFa5Hh29Baxra7TffLXM3hzYjH9JLNxLKg3EmlYP8pE+W 0WJjgH1VP5TBg74MSIxviu7QBgMq3p0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:26 2025 by rpki-client