$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa File: af0a8e4a-42b9-3667-8ce3-865564983774.roa (raw, json) Hash identifier: gNp5ub58EvYvyv4GvzPSKAjV+Hl8h0AfP7xDHgyNreo= Subject key identifier: C7:5E:76:E0:D3:C7:AC:58:77:E9:22:BD:98:82:3A:8A:EB:3C:B2:B2 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F4328584BB88D1504C7A94194E4F78780 Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 11444 IP address blocks: 161.129.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:15:04:c7:a9:41:94:e4:f7:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=4b43bc65-3c74-4351-8e65-e150ebdcd529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:41:73:9f:66:5b:53:ed:57:6d:11:2a:8b: 90:73:78:01:8d:d4:87:4d:1f:ab:d2:67:2c:67:a4: 55:80:8c:7e:c0:01:7a:98:ad:25:38:aa:60:65:9b: cb:3e:43:7f:9b:6a:87:5e:b8:09:bf:57:5a:87:fd: 1d:31:ea:b9:04:65:4d:44:93:d9:28:67:3d:71:65: 80:94:71:45:3d:6d:75:85:09:13:5f:f8:47:9b:60: e5:86:d2:e4:5c:ed:13:9e:b8:b4:82:48:79:9b:de: 08:ae:07:49:65:03:02:c2:02:6b:0c:97:36:1d:75: 8e:e1:cf:d7:78:74:db:a6:bc:d4:ed:ec:b0:b0:27: 90:13:4c:75:5f:7f:ef:5e:9f:05:93:62:0e:e9:ef: ca:4b:48:4b:7b:c3:df:2d:9d:9f:2a:c8:5a:de:39: 22:41:1d:dc:c6:b1:ee:65:f4:7f:49:56:4d:20:89: fd:3d:a9:bb:d1:86:e6:26:f0:68:67:10:3e:bc:84: 93:7d:62:87:5f:85:3a:45:9b:65:2a:8b:55:1e:52: a2:91:73:e0:0e:13:09:d5:c8:55:d4:0b:1d:1b:ea: 8c:9b:a7:ac:fd:60:3a:78:aa:68:13:8a:c7:84:d3: 65:23:80:a0:b5:51:3f:71:c6:38:f0:66:8f:b7:fb: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5E:76:E0:D3:C7:AC:58:77:E9:22:BD:98:82:3A:8A:EB:3C:B2:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/af0a8e4a-42b9-3667-8ce3-865564983774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: 161.129.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8f:80:a5:3c:b7:d8:75:73:d6:b6:d9:a0:d4:7f:15:7e:51: bb:bc:f7:bd:a1:46:5f:4d:1f:37:3d:50:0f:a7:0d:09:5b:ea: b2:aa:b0:69:ed:7f:3f:50:4d:cd:40:fe:80:d2:73:2d:bd:38: 3e:af:ac:50:5e:44:0b:b3:de:1e:5a:d2:fc:c7:bf:cc:a4:dc: 75:07:9c:12:ec:1e:2b:b7:d9:5a:ba:38:b6:78:b4:b9:d6:48: c0:e5:bf:b5:df:a9:da:ee:d7:2e:31:03:33:4a:93:54:75:ce: 6a:2c:75:2b:74:20:7c:53:7a:a3:48:94:9f:cb:c9:77:3c:78: 0e:ef:6c:53:e7:7e:32:24:33:7c:58:ff:d6:59:f3:a2:db:11: 5f:40:cf:57:ac:06:de:6d:97:cd:b0:f9:87:62:05:e6:45:b5: fd:18:37:21:47:b6:0a:e2:28:f7:98:7d:95:22:c9:9f:85:97: b1:a5:72:c9:d7:b8:bf:fb:bb:63:d6:ff:4b:82:f7:89:97:2c: 12:16:15:4f:60:a5:39:78:03:65:dd:bc:85:52:7c:d5:2a:40: c2:89:2b:c9:db:c6:ec:dc:ef:1f:31:43:72:19:bb:56:41:71: 34:34:88:cf:f1:e0:1e:d5:82:e4:4a:99:85:48:1b:b7:66:70: 62:d9:cd:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRUEx6lBlOT3h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGI0M2JjNjUtM2M3NC00MzUxLThlNjUtZTE1MGViZGNkNTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopRBc59mW1PtV20RKouQc3gBjdSHTR+r0mcs Z6RVgIx+wAF6mK0lOKpgZZvLPkN/m2qHXrgJv1dah/0dMeq5BGVNRJPZKGc9cWWA lHFFPW11hQkTX/hHm2DlhtLkXO0Tnri0gkh5m94IrgdJZQMCwgJrDJc2HXWO4c/X eHTbprzU7eywsCeQE0x1X3/vXp8Fk2IO6e/KS0hLe8PfLZ2fKsha3jkiQR3cxrHu ZfR/SVZNIIn9Pam70YbmJvBoZxA+vISTfWKHX4U6RZtlKotVHlKikXPgDhMJ1chV 1AsdG+qMm6es/WA6eKpoE4rHhNNlI4CgtVE/ccY48GaPt/toYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdeduDTx6xYd+kivZiCOorrPLKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvYWYwYThlNGEtNDJiOS0z NjY3LThjZTMtODY1NTY0OTgzNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiPgKU8t9h1c9a22aDUfxV+Ubu8972hRl9NHzc9UA+nDQlb6rKqsGnt fz9QTc1A/oDScy29OD6vrFBeRAuz3h5a0vzHv8yk3HUHnBLsHiu32Vq6OLZ4tLnW SMDlv7Xfqdru1y4xAzNKk1R1zmosdSt0IHxTeqNIlJ/LyXc8eA7vbFPnfjIkM3xY /9ZZ86LbEV9Az1esBt5tl82w+YdiBeZFtf0YNyFHtgriKPeYfZUiyZ+Fl7GlcsnX uL/7u2PW/0uC94mXLBIWFU9gpTl4A2XdvIVSfNUqQMKJK8nbxuzc7x8xQ3IZu1ZB cTQ0iM/x4B7VguRKmYVIG7dmcGLZzdM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:28:37 2025 by rpki-client