$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa File: a680df6e-155d-3d93-babb-124b8a696bd5.roa (raw, json) Hash identifier: MdHrYIwBcViq2IOKc5ebK9ycDmYcdU/Mwz2doo2WuRo= Subject key identifier: B7:1B:95:24:A5:3F:44:47:71:79:E2:EB:5C:5B:9D:90:97:B0:DF:08 Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F4328584D47C4E59BF95F833DEC1FED80 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 46672 IP address blocks: 199.30.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e5:9b:f9:5f:83:3d:ec:1f:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=a344be76-b305-468b-b91d-88b3b7dac07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:af:37:5d:d1:b7:2c:80:73:92:39:aa:b7: cd:4f:77:ca:ad:36:df:75:76:e4:03:ad:83:20:53: 42:a2:4a:51:0a:30:09:38:72:6d:e1:ec:2a:e4:6e: c4:ed:28:4a:4e:56:2c:37:05:87:76:42:a0:c8:36: e4:98:b0:13:a1:4e:dd:5a:3a:69:0b:5a:8c:63:fe: 72:e6:55:a0:ef:3c:84:f1:2a:98:35:eb:ff:88:22: 8c:4a:3b:eb:d8:ef:bf:c5:49:1a:a7:d8:43:56:ec: 32:05:78:e4:ea:69:ce:f8:b7:cf:99:ab:ac:b0:36: 06:bb:15:65:8f:48:99:05:8e:89:04:54:8d:0d:f7: 9d:42:7b:c1:9f:63:d3:f7:3e:76:32:13:60:5a:2f: 2e:99:07:30:7d:84:a5:a1:30:14:a5:b2:f8:d7:b2: b0:d2:97:65:f3:e9:73:3f:33:06:aa:78:5a:f6:8e: 0e:11:94:92:50:35:fb:a0:0a:2a:c2:10:5e:e5:80: 97:f6:ac:f3:2f:2e:ce:27:6d:b2:8c:2f:d1:6c:03: d4:6a:b8:09:1f:ab:1c:f6:56:cc:77:a1:e8:70:f3: 5f:bc:b4:2e:fd:8d:c7:7e:14:67:12:03:f8:67:08: 78:e6:3f:51:f1:ac:5d:20:00:b0:e7:d9:5c:68:7f: 41:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1B:95:24:A5:3F:44:47:71:79:E2:EB:5C:5B:9D:90:97:B0:DF:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ac:64:0c:8b:3d:59:8a:75:96:19:db:b3:5d:cb:06:52:92: 23:51:63:c5:ef:65:30:1a:ee:6e:59:91:af:57:02:ae:83:19: 3f:81:06:3b:5e:b4:1e:84:63:a2:a3:5a:36:ba:a5:eb:66:76: af:59:9c:86:0c:72:88:47:25:ef:8c:f6:7e:b5:7c:c1:85:56: 24:c9:75:4c:a6:45:cf:cf:df:5b:fd:ef:22:18:58:23:2a:16: 73:49:b5:6d:5b:39:d5:93:80:e9:0b:d8:03:03:0d:92:16:b0: ea:00:2a:49:c0:f2:7d:ba:28:7a:34:f8:75:bb:db:6e:a0:39: ac:5f:bf:4e:8d:93:9b:bf:6d:ab:0f:d4:70:5f:53:49:65:82: 71:36:94:2c:75:b4:cd:c5:bf:f1:3b:a5:f9:82:fd:37:5e:c1: 15:5b:e7:81:8e:13:96:53:a8:4f:44:47:3c:70:1f:dd:a6:97: ad:65:fe:04:b5:11:1f:56:12:ef:84:df:9b:d9:65:37:8a:ee: 37:20:d5:7c:02:b2:e6:c8:b5:e0:e7:0e:21:9b:a3:35:6d:15: 95:91:9d:9c:91:a7:e0:8e:ed:35:30:43:21:a7:1f:f9:83:7c: 93:ce:0e:1d:64:8b:3f:df:7e:8c:50:c0:73:27:5b:1f:9e:34: 0c:5d:2e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOWb+V+DPewf7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk YTM0NGJlNzYtYjMwNS00NjhiLWI5MWQtODhiM2I3ZGFjMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfKvN13RtyyAc5I5qrfNT3fKrTbfdXbkA62D IFNCokpRCjAJOHJt4ewq5G7E7ShKTlYsNwWHdkKgyDbkmLAToU7dWjppC1qMY/5y 5lWg7zyE8SqYNev/iCKMSjvr2O+/xUkap9hDVuwyBXjk6mnO+LfPmaussDYGuxVl j0iZBY6JBFSNDfedQnvBn2PT9z52MhNgWi8umQcwfYSloTAUpbL417Kw0pdl8+lz PzMGqnha9o4OEZSSUDX7oAoqwhBe5YCX9qzzLy7OJ22yjC/RbAPUargJH6sc9lbM d6HocPNfvLQu/Y3HfhRnEgP4Zwh45j9R8axdIACw59lcaH9BvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcblSSlP0RHcXni61xbnZCXsN8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvYTY4MGRmNmUtMTU1ZC0z ZDkzLWJhYmItMTI0YjhhNjk2YmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFesZAyLPVmKdZYZ27NdywZSkiNRY8XvZTAa7m5Zka9XAq6DGT+BBjte tB6EY6KjWja6petmdq9ZnIYMcohHJe+M9n61fMGFViTJdUymRc/P31v97yIYWCMq FnNJtW1bOdWTgOkL2AMDDZIWsOoAKknA8n26KHo0+HW7226gOaxfv06Nk5u/basP 1HBfU0llgnE2lCx1tM3Fv/E7pfmC/TdewRVb54GOE5ZTqE9ERzxwH92ml61l/gS1 ER9WEu+E35vZZTeK7jcg1XwCsubIteDnDiGbozVtFZWRnZyRp+CO7TUwQyGnH/mD fJPODh1kiz/ffoxQwHMnWx+eNAxdLp0= -----END CERTIFICATE-----Generated at Thu Mar 26 06:07:01 2026 by rpki-client