$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/c41b4012-510a-3aef-87ef-a711c036e4ed.roa File: c41b4012-510a-3aef-87ef-a711c036e4ed.roa (raw, json) Hash identifier: v2FDFEg3XeniNb7H3vREum9ImSFCtDthFIoLkgMXlDM= Subject key identifier: E0:7C:ED:5A:D0:74:28:BE:CD:F4:EE:4A:9A:1D:F5:AA:B2:97:2E:C2 Certificate issuer: /CN=64a0177e-75a0-4585-b068-73030736bbb1 Certificate serial: 010D0C9F4328584D571FC093D7C7A784C5E69D40 Authority key identifier: C7:CF:89:56:DB:55:A4:13:2A:3A:30:CC:DD:D3:C1:D7:80:2A:EE:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/c41b4012-510a-3aef-87ef-a711c036e4ed.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 91 IP address blocks: 129.161.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/64a0177e-75a0-4585-b068-73030736bbb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/64a0177e-75a0-4585-b068-73030736bbb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:c0:93:d7:c7:a7:84:c5:e6:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a0177e-75a0-4585-b068-73030736bbb1 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=c65c1b92-cd59-4ed8-a0da-51839511c7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:80:fd:68:67:00:eb:12:d2:db:56:4a:3b: 63:c1:5d:23:56:7e:14:41:de:4c:c0:b0:d7:93:60: b6:45:2a:f7:e6:b5:41:b9:a4:16:77:60:95:b9:10: 48:40:6e:d8:fb:41:c5:54:b7:01:0f:c4:4a:dc:59: ad:6a:98:87:bd:a7:22:ab:cc:9a:c4:ac:a7:5b:48: 3c:66:93:c3:91:6b:a5:5b:1b:9c:00:30:c1:9e:e9: 91:80:7f:18:f6:24:4b:e0:1a:40:94:e3:01:3a:2c: 10:0f:5f:3b:94:fe:b1:45:0d:33:62:29:e2:7e:73: db:ed:12:32:ba:69:c7:b9:48:eb:6e:f4:6a:31:af: 0b:bc:89:9a:d3:ae:25:99:6b:ff:22:fb:5a:1e:c6: b2:40:a0:ad:02:23:c3:96:11:43:1e:4d:21:9e:a9: 1f:30:7d:70:90:d7:cb:45:83:04:97:97:da:6d:4b: 95:11:87:2e:58:2b:cf:61:f3:4d:da:39:61:d9:6f: 40:cc:60:58:9c:b9:31:83:a5:6c:07:09:91:e9:d3: 48:cd:f1:5f:82:13:66:55:75:2b:01:53:ea:17:2a: b8:b4:12:e6:bf:66:99:9b:ca:29:3d:21:31:2e:90: dc:79:fb:17:45:86:bf:f8:29:f1:7a:87:f8:32:bf: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7C:ED:5A:D0:74:28:BE:CD:F4:EE:4A:9A:1D:F5:AA:B2:97:2E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/c41b4012-510a-3aef-87ef-a711c036e4ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/64a0177e-75a0-4585-b068-73030736bbb1.crl X509v3 Authority Key Identifier: keyid:C7:CF:89:56:DB:55:A4:13:2A:3A:30:CC:DD:D3:C1:D7:80:2A:EE:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1.cer sbgp-ipAddrBlock: critical IPv4: 129.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9a:8e:08:6b:25:67:aa:5e:3a:d7:f6:41:08:b9:06:ba:99: f0:97:02:6d:9c:31:38:97:f4:21:19:cb:0e:ed:87:6a:bb:82: be:38:3b:cf:93:9c:7a:2c:99:c4:a2:9a:3f:5a:80:2c:12:25: de:fd:b1:f1:f0:2e:30:f3:7b:d6:e4:3d:c5:d0:c6:c0:11:6c: 0d:44:ba:96:b5:0e:1e:99:4e:ad:46:4f:87:4c:cf:34:e0:c8: b4:0a:22:5d:31:3b:e7:5a:b3:a2:9d:d0:ad:82:97:54:0f:43: f0:54:22:ba:74:c1:44:23:cc:2b:6d:9e:1e:44:30:6c:9b:d5: f9:b7:6a:04:c6:ae:a2:70:95:40:2c:98:30:e1:4a:b3:55:72: f7:f9:b8:df:45:73:d8:f9:68:31:3b:a0:f5:de:3d:25:b6:91: 79:d8:ab:9f:ae:da:3a:37:e2:85:7e:dd:d4:b3:5b:ef:0a:07: 44:26:54:a2:fb:32:ef:ee:ec:d8:c5:43:f1:24:7d:2b:dc:2d: 9c:98:3a:58:9b:6b:85:35:85:e4:ce:f5:64:5b:a0:16:6b:1c: 1e:97:de:da:7a:24:9a:c4:11:57:2d:b3:54:11:f2:73:91:cd: 59:ac:24:16:e6:b4:ec:00:b3:49:fe:a7:80:80:d0:49:94:65: 7b:40:ac:11 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1XH8CT18enhMXmnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhMDE3N2UtNzVhMC00NTg1LWIwNjgtNzMwMzA3MzZi YmIxMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YzY1YzFiOTItY2Q1OS00ZWQ4LWEwZGEtNTE4Mzk1MTFjN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvaA/WhnAOsS0ttWSjtjwV0jVn4UQd5MwLDX k2C2RSr35rVBuaQWd2CVuRBIQG7Y+0HFVLcBD8RK3FmtapiHvaciq8yaxKynW0g8 ZpPDkWulWxucADDBnumRgH8Y9iRL4BpAlOMBOiwQD187lP6xRQ0zYinifnPb7RIy umnHuUjrbvRqMa8LvIma064lmWv/IvtaHsayQKCtAiPDlhFDHk0hnqkfMH1wkNfL RYMEl5fabUuVEYcuWCvPYfNN2jlh2W9AzGBYnLkxg6VsBwmR6dNIzfFfghNmVXUr AVPqFyq4tBLmv2aZm8opPSExLpDcefsXRYa/+Cnxeof4Mr9qLQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOB87VrQdCi+zfTuSpod9aqyly7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NGEw MTc3ZS03NWEwLTQ1ODUtYjA2OC03MzAzMDczNmJiYjEvYzQxYjQwMTItNTEwYS0z YWVmLTg3ZWYtYTcxMWMwMzZlNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjRhMDE3N2UtNzVhMC00NTg1LWIw NjgtNzMwMzA3MzZiYmIxLzY0YTAxNzdlLTc1YTAtNDU4NS1iMDY4LTczMDMwNzM2 YmJiMS5jcmwwHwYDVR0jBBgwFoAUx8+JVttVpBMqOjDM3dPB14Aq7jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NGEwMTc3ZS03NWEwLTQ1ODUtYjA2OC03MzAz MDczNmJiYjEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgaEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkpqOCGslZ6peOtf2QQi5BrqZ8JcCbZwxOJf0IRnLDu2HaruCvjg7z5Oc eiyZxKKaP1qALBIl3v2x8fAuMPN71uQ9xdDGwBFsDUS6lrUOHplOrUZPh0zPNODI tAoiXTE751qzop3QrYKXVA9D8FQiunTBRCPMK22eHkQwbJvV+bdqBMauonCVQCyY MOFKs1Vy9/m430Vz2PloMTug9d49JbaRedirn67aOjfihX7d1LNb7woHRCZUovsy 7+7s2MVD8SR9K9wtnJg6WJtrhTWF5M71ZFugFmscHpfe2nokmsQRVy2zVBHyc5HN WawkFua07ACzSf6ngIDQSZRle0CsEQ== -----END CERTIFICATE-----Generated at Thu Apr 16 06:09:57 2026 by rpki-client