$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/c41b4012-510a-3aef-87ef-a711c036e4ed.roa File: c41b4012-510a-3aef-87ef-a711c036e4ed.roa (raw, json) Hash identifier: Q1yDs8F5f2/Hfd7uw4a/OUJTWeQ3g0XKmU7jVKlapYs= Subject key identifier: CB:34:FF:3E:F0:5B:90:74:8A:E0:FE:84:CD:F2:55:BB:99:FA:3D:0E Certificate issuer: /CN=64a0177e-75a0-4585-b068-73030736bbb1 Certificate serial: 010D0C9F4328584B970D06B8F7839FC8D58FA880 Authority key identifier: C7:CF:89:56:DB:55:A4:13:2A:3A:30:CC:DD:D3:C1:D7:80:2A:EE:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/c41b4012-510a-3aef-87ef-a711c036e4ed.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 91 IP address blocks: 129.161.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/64a0177e-75a0-4585-b068-73030736bbb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/64a0177e-75a0-4585-b068-73030736bbb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:06:b8:f7:83:9f:c8:d5:8f:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a0177e-75a0-4585-b068-73030736bbb1 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=ecdb560f-a0b6-42b2-b038-51ce504b7620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d3:69:8d:ed:2c:1b:eb:ba:c2:4e:f9:7d:67: 90:1b:f9:d8:b7:2d:ef:c8:c9:f8:c0:93:44:d5:0a: 13:45:4d:f2:17:53:7e:84:51:3a:85:7c:46:ad:64: 3b:26:a3:4e:d7:6a:0a:60:05:3a:4f:7f:d3:0b:bc: 19:14:79:35:9c:0f:2a:57:a5:9c:f4:93:5e:c4:6d: bd:b6:b6:5d:98:17:14:ba:f7:91:71:05:7f:fd:6e: 6e:ae:a5:6b:70:67:f7:5e:3a:4f:9d:78:cb:06:5c: 7c:7f:d8:d5:49:7f:5a:94:94:11:66:a4:b5:fe:50: 53:3d:24:47:29:ac:52:0a:2a:14:64:26:85:2e:34: 38:0d:45:b4:a1:84:ba:66:93:27:36:20:32:66:a0: 2f:2b:4b:2c:d5:54:21:27:e6:69:a3:4a:1e:c2:87: e9:af:30:d9:97:45:dd:a9:0e:0a:f4:8a:64:43:31: 8b:e1:e0:88:a3:32:8a:e5:90:7c:f4:cd:17:34:e7: bf:31:97:5f:84:4f:48:76:37:1e:67:56:07:10:6a: 44:c2:49:fd:5f:4e:68:b0:c0:f1:94:76:12:65:20: b4:2b:2f:fb:63:24:8c:12:79:e3:f2:20:ad:f6:46: ae:56:e9:db:1c:dd:39:51:87:ba:ef:35:1a:03:99: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:34:FF:3E:F0:5B:90:74:8A:E0:FE:84:CD:F2:55:BB:99:FA:3D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/c41b4012-510a-3aef-87ef-a711c036e4ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/64a0177e-75a0-4585-b068-73030736bbb1.crl X509v3 Authority Key Identifier: keyid:C7:CF:89:56:DB:55:A4:13:2A:3A:30:CC:DD:D3:C1:D7:80:2A:EE:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1.cer sbgp-ipAddrBlock: critical IPv4: 129.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:48:a7:03:46:e4:ee:13:b9:8a:c9:89:39:0b:60:be:b2:73: 78:18:c4:94:6f:2a:90:29:39:1c:00:23:1e:5d:07:68:aa:92: 47:36:71:b9:84:19:a5:54:b3:9d:ec:b0:93:c7:1b:6c:a3:9b: 35:17:4a:7c:b1:81:04:c4:d0:fd:f7:3b:79:95:78:9d:bc:75: 2f:8a:dd:20:c6:61:ce:8c:dc:9f:3a:d8:a0:95:a6:04:93:01: 67:8b:79:61:a5:d7:da:4e:00:9a:c1:e2:87:29:53:73:d3:8c: 65:84:cc:a7:11:52:51:31:af:85:db:a1:d4:29:60:63:33:7e: 7f:ac:30:21:0d:42:73:86:bd:c7:c8:c4:7d:0f:70:52:dc:47: f8:ec:f7:47:5f:84:03:8a:e9:76:27:42:6a:a2:d2:f8:d9:78: 03:6a:49:ea:a6:6a:c3:f2:a0:62:27:11:bf:9f:60:5a:b3:5d: a0:8f:dd:69:3c:22:45:d0:cf:01:48:40:49:1a:31:1d:b3:1e: 96:a1:77:84:2f:82:d7:e9:a1:e2:b5:e2:b4:57:7a:d9:34:4c: ec:a7:90:90:70:ad:00:8c:bb:b5:93:47:09:b8:f6:85:36:56: 58:61:f7:60:3b:44:b7:e9:59:09:a3:8c:f8:d0:c6:81:83:b9: b6:a9:60:c3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuXDQa494OfyNWPqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhMDE3N2UtNzVhMC00NTg1LWIwNjgtNzMwMzA3MzZi YmIxMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZWNkYjU2MGYtYTBiNi00MmIyLWIwMzgtNTFjZTUwNGI3NjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9Npje0sG+u6wk75fWeQG/nYty3vyMn4wJNE 1QoTRU3yF1N+hFE6hXxGrWQ7JqNO12oKYAU6T3/TC7wZFHk1nA8qV6Wc9JNexG29 trZdmBcUuveRcQV//W5urqVrcGf3XjpPnXjLBlx8f9jVSX9alJQRZqS1/lBTPSRH KaxSCioUZCaFLjQ4DUW0oYS6ZpMnNiAyZqAvK0ss1VQhJ+Zpo0oewofprzDZl0Xd qQ4K9IpkQzGL4eCIozKK5ZB89M0XNOe/MZdfhE9IdjceZ1YHEGpEwkn9X05osMDx lHYSZSC0Ky/7YySMEnnj8iCt9kauVunbHN05UYe67zUaA5mGJwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMs0/z7wW5B0iuD+hM3yVbuZ+j0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NGEw MTc3ZS03NWEwLTQ1ODUtYjA2OC03MzAzMDczNmJiYjEvYzQxYjQwMTItNTEwYS0z YWVmLTg3ZWYtYTcxMWMwMzZlNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjRhMDE3N2UtNzVhMC00NTg1LWIw NjgtNzMwMzA3MzZiYmIxLzY0YTAxNzdlLTc1YTAtNDU4NS1iMDY4LTczMDMwNzM2 YmJiMS5jcmwwHwYDVR0jBBgwFoAUx8+JVttVpBMqOjDM3dPB14Aq7jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NGEwMTc3ZS03NWEwLTQ1ODUtYjA2OC03MzAz MDczNmJiYjEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgaEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHEinA0bk7hO5ismJOQtgvrJzeBjElG8qkCk5HAAjHl0HaKqSRzZxuYQZ pVSzneywk8cbbKObNRdKfLGBBMTQ/fc7eZV4nbx1L4rdIMZhzozcnzrYoJWmBJMB Z4t5YaXX2k4AmsHihylTc9OMZYTMpxFSUTGvhduh1ClgYzN+f6wwIQ1Cc4a9x8jE fQ9wUtxH+Oz3R1+EA4rpdidCaqLS+Nl4A2pJ6qZqw/KgYicRv59gWrNdoI/daTwi RdDPAUhASRoxHbMelqF3hC+C1+mh4rXitFd62TRM7KeQkHCtAIy7tZNHCbj2hTZW WGH3YDtEt+lZCaOM+NDGgYO5tqlgww== -----END CERTIFICATE-----Generated at Wed Nov 5 12:22:59 2025 by rpki-client