$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa File: aafbf529-4916-398b-bbf0-e5bb5123a67b.roa (raw, json) Hash identifier: b2f5TW1zoOtLJTdPzNp6ncGAoHP9f+0LbkM9w+6mZd8= Subject key identifier: FC:9E:91:03:62:16:2F:CA:FF:B7:3D:70:FD:B2:AB:4D:37:61:00:1B Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Certificate serial: 010D0C9F4328584F71ED9D9D10957252D4192F40 Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 2734 IP address blocks: 67.212.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9d:9d:10:95:72:52:d4:19:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=a05ca92c-4c81-45eb-a94e-7e186f7dc987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:7b:a1:5c:d1:2c:b8:21:6f:dd:00:72:1d: e1:ff:52:b8:c4:dd:2b:3b:eb:a0:e3:bb:ee:79:f8: 49:00:cd:98:97:d6:e0:95:16:b9:3b:c2:40:75:0e: 58:66:ba:03:ca:c7:2c:f1:10:cd:8e:27:78:3f:1b: 4e:d8:64:b4:a1:a7:47:86:ff:77:e4:bd:03:c1:c1: 93:61:e8:78:48:c3:d1:5d:ee:aa:fa:5a:5e:2d:8c: 55:c4:24:a6:21:23:77:cd:10:f8:72:c6:73:3e:d5: b9:66:49:2c:69:d6:b3:04:81:2b:74:db:43:2e:e7: 9a:35:fe:9d:e8:19:c4:1c:7d:51:12:fc:2e:04:d4: 55:66:cc:68:9f:01:7d:72:37:f3:95:81:e4:af:8c: b0:09:b6:99:c1:a1:fd:c3:9a:43:61:9b:59:8a:48: e6:c3:40:47:8b:fb:2b:e5:45:31:6c:87:fd:cc:1b: a1:2d:67:8d:95:34:37:06:78:78:bf:a6:ca:78:00: d2:dd:af:25:9e:27:e1:6a:4a:2c:88:8d:4c:4d:20: 0b:4e:b0:49:39:28:5f:b7:0d:b9:34:55:d0:02:6f: 22:3a:b7:05:48:cb:45:15:fa:19:6a:dd:b2:19:8d: 19:c0:b6:88:93:d9:61:46:12:12:31:28:f2:69:58: 97:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9E:91:03:62:16:2F:CA:FF:B7:3D:70:FD:B2:AB:4D:37:61:00:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl X509v3 Authority Key Identifier: keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer sbgp-ipAddrBlock: critical IPv4: 67.212.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3f:cf:40:74:1f:6d:9d:95:e9:95:e4:4b:e4:54:2b:a6:55: 88:50:d7:ba:38:2e:2d:f7:12:4b:30:de:96:c4:d9:aa:77:50: 86:00:70:f6:d5:86:3b:5d:ab:ef:77:cf:81:08:c3:88:09:26: 42:8d:48:8b:a6:d6:8a:cd:a8:4c:4f:22:89:01:5f:4c:e1:bd: df:17:75:cd:51:0b:89:6f:62:aa:32:95:be:e6:11:83:53:30: 59:03:97:cb:63:e0:96:96:45:f8:04:6d:c6:17:bb:77:3b:62: f0:7d:6a:ae:2c:8e:ce:91:4e:e9:5c:32:52:1a:32:be:bb:06: fa:06:c4:68:85:18:90:d1:95:60:ab:31:88:09:1d:af:aa:51: 00:94:bb:f9:f1:2c:a7:3d:7d:39:16:14:bd:ea:9e:88:c3:02: 20:8c:61:4a:29:be:78:ed:3c:d3:7f:2e:a8:29:26:bd:ed:ba: 50:ca:a2:2a:3a:a8:4f:62:07:8c:81:6c:d0:66:b6:24:be:bb: ae:19:a0:11:4e:21:3c:58:3d:8d:bc:d4:ff:fa:70:c0:ef:a2: 6f:29:8c:d7:17:69:47:3c:02:ef:c3:36:bb:fb:06:4a:25:ba: aa:3d:9c:47:9c:bb:fe:11:bc:16:0e:f5:ea:01:6c:db:b1:48: 2e:a6:57:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Z2dEJVyUtQZL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw MTRhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk YTA1Y2E5MmMtNGM4MS00NWViLWE5NGUtN2UxODZmN2RjOTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT57oVzRLLghb90Ach3h/1K4xN0rO+ug47vu efhJAM2Yl9bglRa5O8JAdQ5YZroDyscs8RDNjid4PxtO2GS0oadHhv935L0DwcGT Yeh4SMPRXe6q+lpeLYxVxCSmISN3zRD4csZzPtW5ZkksadazBIErdNtDLueaNf6d 6BnEHH1REvwuBNRVZsxonwF9cjfzlYHkr4ywCbaZwaH9w5pDYZtZikjmw0BHi/sr 5UUxbIf9zBuhLWeNlTQ3Bnh4v6bKeADS3a8lnifhakosiI1MTSALTrBJOShftw25 NFXQAm8iOrcFSMtFFfoZat2yGY0ZwLaIk9lhRhISMSjyaViXrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyekQNiFi/K/7c9cP2yq003YQAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1 ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvYWFmYmY1MjktNDkxNi0z OThiLWJiZjAtZTViYjUxMjNhNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5 MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2 MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ9ScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI/z0B0H22dlemV5EvkVCumVYhQ17o4Li33Eksw3pbE2ap3UIYAcPbV hjtdq+93z4EIw4gJJkKNSIum1orNqExPIokBX0zhvd8Xdc1RC4lvYqoylb7mEYNT MFkDl8tj4JaWRfgEbcYXu3c7YvB9aq4sjs6RTulcMlIaMr67BvoGxGiFGJDRlWCr MYgJHa+qUQCUu/nxLKc9fTkWFL3qnojDAiCMYUopvnjtPNN/LqgpJr3tulDKoio6 qE9iB4yBbNBmtiS+u64ZoBFOITxYPY281P/6cMDvom8pjNcXaUc8Au/DNrv7Bkol uqo9nEecu/4RvBYO9eoBbNuxSC6mV/0= -----END CERTIFICATE-----Generated at Wed Nov 4 02:50:03 2026 by rpki-client