$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa File: aafbf529-4916-398b-bbf0-e5bb5123a67b.roa (raw, json) Hash identifier: E5dNssmlr6RnI5dJEzN92FwpLDY5ubVGoKVZ2dIaKt4= Subject key identifier: 6C:BC:B5:F8:80:F8:E5:79:DE:08:9C:AE:4D:E0:A4:88:DC:63:7B:5F Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Certificate serial: 010D0C9F4328584D4D5A6D7369A0A80B7F5F5880 Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 2734 IP address blocks: 67.212.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:6d:73:69:a0:a8:0b:7f:5f:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=46df6b5f-fb73-4d21-a692-d281bc1f2077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:aa:ef:82:29:ac:03:8d:d5:d1:4d:76:ca: fe:19:29:df:f1:82:73:40:cb:81:3a:e6:88:1f:14: 2a:62:e7:6a:b1:16:91:57:9e:af:b9:c7:9f:4b:f2: 7b:cd:6f:b9:25:a8:95:c1:10:20:c5:f7:0d:5f:de: 03:aa:d8:3a:2c:03:3d:e5:7e:b0:1b:2c:49:30:3b: 00:97:81:18:58:d1:eb:54:c1:d0:76:92:bb:3a:53: 6b:c7:16:3d:ab:73:de:a3:06:ea:ce:a2:6c:70:be: b9:9b:8d:3a:b5:da:cd:e2:f4:ab:e6:e2:f4:67:1d: 02:ef:62:cc:80:68:98:f6:3a:ca:f9:c0:e2:3e:2a: 33:27:27:48:79:70:24:77:a3:6e:f7:ef:45:62:28: 5c:d8:32:a3:38:a4:85:bf:9b:71:d1:e9:68:e1:20: 6c:f2:5c:36:91:eb:99:bb:75:f4:e1:aa:b5:a1:4b: a4:30:06:b8:39:f3:96:ac:77:35:a7:94:fa:25:70: e3:fc:dc:28:4e:97:87:3d:0a:dd:11:cb:9b:86:cf: 48:6f:0b:0c:0e:a7:76:5e:86:46:d4:ed:77:87:02: 8d:7c:c7:fd:0a:e0:3f:73:b4:35:3e:bd:29:3a:98: e3:4e:9e:c0:7f:a1:63:85:99:95:a4:28:68:33:66: d9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BC:B5:F8:80:F8:E5:79:DE:08:9C:AE:4D:E0:A4:88:DC:63:7B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl X509v3 Authority Key Identifier: keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer sbgp-ipAddrBlock: critical IPv4: 67.212.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7f:1a:21:fb:77:3b:d6:c3:8f:14:b4:9c:d0:20:c5:ab:56: 95:fb:3c:4a:96:b0:70:96:63:c2:78:2e:7f:25:71:44:79:1d: 6e:de:e1:d5:20:9b:7a:9a:96:c2:02:2b:1a:21:d0:a0:40:18: 00:6a:21:4a:61:bf:df:d7:1d:63:b1:d7:d6:61:4b:66:45:4d: ef:02:88:b4:33:49:8a:61:e7:0d:4e:4d:16:8d:b7:dc:21:dc: 55:83:a7:e3:29:1a:49:1e:a4:f5:da:d2:bd:56:ce:10:fd:da: 30:90:b4:af:6a:aa:a6:46:01:ef:93:3c:6b:98:56:09:37:6c: 88:79:16:d6:8b:a7:93:0e:6d:9a:cc:5c:af:6d:65:52:d2:d5: e3:47:9b:89:18:cb:83:f9:8b:6b:65:dd:74:43:bf:5d:61:6e: 0d:53:58:d6:24:96:2e:0f:23:16:f3:1c:f4:d7:fd:ca:02:cc: c8:b9:49:e0:0b:98:c9:ea:bd:47:af:f8:8f:a3:83:c4:d6:0b: 92:1e:a1:e9:ad:cf:f5:0c:18:93:54:db:81:7b:23:a0:2a:23: 94:91:cb:d3:97:f8:b8:01:77:4b:7d:7b:1e:39:03:e8:a1:bb: 22:32:a9:8b:4b:09:55:e2:4c:c7:c2:cb:d6:4b:54:9e:64:ae: 4f:5c:68:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWm1zaaCoC39fWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw MTRhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NDZkZjZiNWYtZmI3My00ZDIxLWE2OTItZDI4MWJjMWYyMDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN6q74IprAON1dFNdsr+GSnf8YJzQMuBOuaI HxQqYudqsRaRV56vucefS/J7zW+5JaiVwRAgxfcNX94Dqtg6LAM95X6wGyxJMDsA l4EYWNHrVMHQdpK7OlNrxxY9q3PeowbqzqJscL65m406tdrN4vSr5uL0Zx0C72LM gGiY9jrK+cDiPiozJydIeXAkd6Nu9+9FYihc2DKjOKSFv5tx0elo4SBs8lw2keuZ u3X04aq1oUukMAa4OfOWrHc1p5T6JXDj/NwoTpeHPQrdEcubhs9IbwsMDqd2XoZG 1O13hwKNfMf9CuA/c7Q1Pr0pOpjjTp7Af6FjhZmVpChoM2bZWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGy8tfiA+OV53gicrk3gpIjcY3tfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1 ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvYWFmYmY1MjktNDkxNi0z OThiLWJiZjAtZTViYjUxMjNhNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5 MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2 MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ9ScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9/GiH7dzvWw48UtJzQIMWrVpX7PEqWsHCWY8J4Ln8lcUR5HW7e4dUg m3qalsICKxoh0KBAGABqIUphv9/XHWOx19ZhS2ZFTe8CiLQzSYph5w1OTRaNt9wh 3FWDp+MpGkkepPXa0r1WzhD92jCQtK9qqqZGAe+TPGuYVgk3bIh5FtaLp5MObZrM XK9tZVLS1eNHm4kYy4P5i2tl3XRDv11hbg1TWNYkli4PIxbzHPTX/coCzMi5SeAL mMnqvUev+I+jg8TWC5Ieoemtz/UMGJNU24F7I6AqI5SRy9OX+LgBd0t9ex45A+ih uyIyqYtLCVXiTMfCy9ZLVJ5krk9caIk= -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:15 2026 by rpki-client