$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa File: af0a8e4a-42b9-3667-8ce3-865564983774.roa (raw, json) Hash identifier: U1bsQ1s3wrhjqD7IsSq0CQaOPh6PkkJ7gRo49t+j/+0= Subject key identifier: 0A:BE:57:07:65:E9:4A:CF:62:FB:19:E5:C3:9B:FE:DD:5B:7D:82:02 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F4328584EFCACC2AA9E362C9243DE0300 Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 11444 IP address blocks: 161.129.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c2:aa:9e:36:2c:92:43:de:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=fc8ac9a0-ffc2-416e-a1c4-bbd70516965c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:7c:39:dd:1e:5a:c1:3e:ee:30:c6:24:a2: e9:0b:cc:98:c5:2e:f8:e1:8e:a1:0a:8e:0a:ec:23: da:4b:6f:1f:c3:6d:c2:07:88:0e:bd:dc:f7:76:68: cf:9b:83:f0:4c:88:2b:49:69:b9:2c:00:ee:ea:96: 33:c0:7e:75:11:9f:8a:4c:de:92:f9:31:0c:e9:26: 80:3b:2d:25:2f:65:df:68:f1:8c:07:9b:f4:50:e6: c2:a9:5d:c6:28:58:a2:1c:97:82:7f:77:0c:7e:5a: d9:0f:55:70:a9:b1:ef:cd:24:f4:46:7b:e5:ec:1c: a0:b7:ab:c4:f9:c5:a3:01:c0:91:c5:e4:bc:86:f3: 85:c5:52:35:fa:f2:20:0d:ac:90:3e:d1:ea:c3:06: a2:4f:e4:3e:e2:51:81:0c:5e:2d:a3:5a:57:17:96: a5:92:7a:91:fc:76:36:8e:c7:be:91:03:51:e0:89: 9f:db:6c:12:38:aa:8a:71:6b:67:42:73:ab:97:cb: ac:73:18:36:b6:16:a0:7a:2b:96:5f:e7:97:8e:53: 08:91:a5:a6:ce:d3:bb:29:68:06:d8:b0:3f:a6:78: 1d:40:b7:d4:94:02:ca:c2:0d:00:99:56:44:79:b3: f5:c2:0f:b3:66:e5:88:8e:29:ad:6a:c6:4e:18:10: c5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BE:57:07:65:E9:4A:CF:62:FB:19:E5:C3:9B:FE:DD:5B:7D:82:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: 161.129.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:06:01:9f:b2:a7:dd:eb:1b:ec:d0:63:38:7f:91:28:6b:b8: 3c:ba:59:af:4c:63:e1:b7:b5:08:ae:53:f4:8f:28:70:29:b2: ef:2a:cd:05:16:92:7a:36:50:75:e0:d8:c0:72:b6:d2:3f:89: 74:fc:8e:d6:bb:57:d3:90:08:5d:91:71:65:c2:77:b2:4d:f1: 99:b4:12:60:5f:ec:6e:21:34:54:bb:d6:f9:17:76:80:c5:a1: 32:56:7d:61:e7:55:5f:46:9d:ba:50:b4:6a:48:56:d1:9d:f9: 59:83:f9:b1:b8:a1:9a:8b:eb:13:7f:98:de:54:bf:80:65:c2: c3:5d:94:df:fa:32:66:0c:82:cf:f6:10:e9:19:e8:0d:3f:f4: aa:d7:97:2f:9e:c4:76:45:0f:a7:6c:59:50:5e:33:07:ee:c2: 5a:d5:2d:27:b5:56:01:df:fb:52:31:c1:79:5c:f1:df:e0:85: 62:bc:b7:4f:33:86:14:75:44:89:9c:1b:bc:0f:b4:57:a2:da: a0:6e:5d:95:26:d4:34:08:54:7d:e9:20:50:63:71:40:31:3a: e2:af:a4:32:5a:99:ab:ad:38:59:3b:a9:0b:44:a1:fe:74:b8: e6:36:a5:bf:4e:cf:33:c6:85:d6:41:3e:99:57:85:a0:db:eb: 6b:b6:65:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMKqnjYskkPeAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZmM4YWM5YTAtZmZjMi00MTZlLWExYzQtYmJkNzA1MTY5NjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyx8Od0eWsE+7jDGJKLpC8yYxS744Y6hCo4K 7CPaS28fw23CB4gOvdz3dmjPm4PwTIgrSWm5LADu6pYzwH51EZ+KTN6S+TEM6SaA Oy0lL2XfaPGMB5v0UObCqV3GKFiiHJeCf3cMflrZD1VwqbHvzST0Rnvl7Bygt6vE +cWjAcCRxeS8hvOFxVI1+vIgDayQPtHqwwaiT+Q+4lGBDF4to1pXF5alknqR/HY2 jse+kQNR4Imf22wSOKqKcWtnQnOrl8uscxg2thageiuWX+eXjlMIkaWmztO7KWgG 2LA/pngdQLfUlALKwg0AmVZEebP1wg+zZuWIjimtasZOGBDFIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAq+Vwdl6UrPYvsZ5cOb/t1bfYICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvYWYwYThlNGEtNDJiOS0z NjY3LThjZTMtODY1NTY0OTgzNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIGAZ+yp93rG+zQYzh/kShruDy6Wa9MY+G3tQiuU/SPKHApsu8qzQUW kno2UHXg2MByttI/iXT8jta7V9OQCF2RcWXCd7JN8Zm0EmBf7G4hNFS71vkXdoDF oTJWfWHnVV9GnbpQtGpIVtGd+VmD+bG4oZqL6xN/mN5Uv4BlwsNdlN/6MmYMgs/2 EOkZ6A0/9KrXly+exHZFD6dsWVBeMwfuwlrVLSe1VgHf+1IxwXlc8d/ghWK8t08z hhR1RImcG7wPtFei2qBuXZUm1DQIVH3pIFBjcUAxOuKvpDJamautOFk7qQtEof50 uOY2pb9OzzPGhdZBPplXhaDb62u2ZVM= -----END CERTIFICATE-----Generated at Tue Oct 6 23:01:55 2026 by rpki-client