$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa File: af0a8e4a-42b9-3667-8ce3-865564983774.roa (raw, json) Hash identifier: uEGKEfxJO5MqpEUhC3NAExZMuo6WShxoYYTdIS1b4jo= Subject key identifier: 55:24:6B:AB:56:04:45:D2:C8:61:83:9E:E9:FB:3C:4D:6C:EA:C9:71 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F4328584E5A49F7E0F21C242E6A6C1880 Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 11444 IP address blocks: 161.129.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f7:e0:f2:1c:24:2e:6a:6c:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=86580c74-a3c7-4ca4-a846-e9be25d9ccd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:da:14:b2:1a:ec:98:fa:5f:7e:e3:4f:4b:7f: b1:4d:a0:33:d5:21:8e:87:c3:e9:dc:28:01:61:3d: ab:27:de:4e:69:71:75:9a:ef:02:6c:d4:88:dc:78: 22:ac:2c:40:aa:68:e4:1d:2b:fc:9a:e0:54:4e:5b: b3:bd:f4:c5:9f:0c:75:77:1b:47:90:d5:83:92:59: 0c:3c:92:c7:7e:ba:fa:6e:b5:9c:a4:bf:4b:36:12: 02:a5:47:da:43:51:53:7b:27:a9:b4:2f:19:ab:d5: 06:58:60:2c:ab:a8:dd:c6:51:26:7c:c4:7e:aa:b0: cb:d1:e7:52:2d:99:30:6f:2f:ad:02:20:61:09:68: a9:e0:00:ba:51:49:c1:e3:b5:1c:87:7f:73:04:ce: b6:1c:b7:90:9b:ba:e4:a0:31:08:62:96:fc:eb:ef: 76:8b:ad:9e:66:cc:64:e0:f0:4b:37:f5:f3:95:92: 44:a5:27:66:8d:a5:5e:5e:36:9f:33:a3:f4:7e:2b: de:74:b1:8f:5e:e6:28:4a:49:09:dc:b2:f7:30:16: a6:89:26:8b:3e:77:af:34:3a:53:d6:f0:3a:d2:a5: f0:1b:bf:57:18:93:0e:23:55:f5:42:d6:b0:cf:fb: 27:2c:ca:a7:f6:be:ff:a7:6f:26:7e:27:05:10:41: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:24:6B:AB:56:04:45:D2:C8:61:83:9E:E9:FB:3C:4D:6C:EA:C9:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: 161.129.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f8:c8:35:22:7c:ab:1e:a1:9d:3d:47:5b:0b:d4:a4:18:42: 5f:d1:7b:d5:61:33:eb:31:8f:23:58:0a:1a:fd:fb:b6:ec:a5: 1f:5f:f7:d7:a7:1b:4d:01:7f:91:8d:42:06:47:77:76:f6:ca: 58:f1:be:e7:10:fa:dd:bb:99:a4:a3:ca:11:01:25:48:a8:5f: ed:74:96:f8:ca:f9:17:0d:1c:fc:f0:4b:96:b6:cf:6e:3b:79: 86:8d:ef:4a:85:d2:80:17:05:c7:eb:80:26:2a:0a:1a:3f:b6: 69:75:b0:10:00:37:5d:2d:b8:55:3a:8a:69:24:13:e4:1b:62: f3:36:55:4f:43:c8:44:64:7a:70:89:2c:3c:41:82:96:68:4c: 2a:82:97:c0:6e:c2:7c:1c:dd:5c:a7:4b:a7:a1:41:4f:4a:ce: 2c:2b:e8:c4:57:ce:0f:a9:31:65:52:8e:07:04:5e:8d:4c:04: 60:d1:53:62:8f:60:a7:15:c8:66:0f:cc:4a:20:c8:ac:d1:2d: 4c:09:67:9c:2d:28:c1:8f:8e:b0:f9:8c:f8:ca:d8:a8:b2:38: b9:8b:bf:b4:94:04:47:c5:4e:97:8a:17:ad:21:8c:d6:c6:1e: 50:36:46:52:8f:dc:8e:51:da:0a:5c:42:12:4d:95:65:96:e2: 0b:fd:78:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSffg8hwkLmpsGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ODY1ODBjNzQtYTNjNy00Y2E0LWE4NDYtZTliZTI1ZDljY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtoUshrsmPpffuNPS3+xTaAz1SGOh8Pp3CgB YT2rJ95OaXF1mu8CbNSI3HgirCxAqmjkHSv8muBUTluzvfTFnwx1dxtHkNWDklkM PJLHfrr6brWcpL9LNhICpUfaQ1FTeyeptC8Zq9UGWGAsq6jdxlEmfMR+qrDL0edS LZkwby+tAiBhCWip4AC6UUnB47Uch39zBM62HLeQm7rkoDEIYpb86+92i62eZsxk 4PBLN/XzlZJEpSdmjaVeXjafM6P0fivedLGPXuYoSkkJ3LL3MBamiSaLPnevNDpT 1vA60qXwG79XGJMOI1X1Qtawz/snLMqn9r7/p28mficFEEHhZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUka6tWBEXSyGGDnun7PE1s6slxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvYWYwYThlNGEtNDJiOS0z NjY3LThjZTMtODY1NTY0OTgzNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj4yDUifKseoZ09R1sL1KQYQl/Re9VhM+sxjyNYChr9+7bspR9f99en G00Bf5GNQgZHd3b2yljxvucQ+t27maSjyhEBJUioX+10lvjK+RcNHPzwS5a2z247 eYaN70qF0oAXBcfrgCYqCho/tml1sBAAN10tuFU6imkkE+QbYvM2VU9DyERkenCJ LDxBgpZoTCqCl8Buwnwc3VynS6ehQU9Kziwr6MRXzg+pMWVSjgcEXo1MBGDRU2KP YKcVyGYPzEogyKzRLUwJZ5wtKMGPjrD5jPjK2KiyOLmLv7SUBEfFTpeKF60hjNbG HlA2RlKP3I5R2gpcQhJNlWWW4gv9eGQ= -----END CERTIFICATE-----Generated at Fri Jul 24 21:29:19 2026 by rpki-client