$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa File: 12c649e9-815b-3351-8b11-f9a675702d6c.roa (raw, json) Hash identifier: 0sC5MhsYDkFbVPTkvAgJyHpXPLFE8ZCZHWt39U4IetM= Subject key identifier: 75:A7:FD:D9:5F:CE:AE:49:82:01:EA:EB:C4:81:D6:10:64:C5:67:0B Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584B84E765A6B41DF122756261D0 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 7050 IP address blocks: 129.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:65:a6:b4:1d:f1:22:75:62:61:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=af4dad91-4ddf-43da-a0d9-7156857c78dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:6d:b5:95:9f:97:a4:bc:e8:89:3a:d4:45: e0:83:94:60:7c:62:bf:ed:08:b2:47:1c:18:45:a9: d5:cd:6a:2c:35:93:09:02:ac:6f:0a:fb:60:6b:2c: b6:b8:df:2d:9c:94:2c:b4:7e:b0:96:89:88:6f:f6: fe:03:fa:47:e4:b6:50:1f:a7:28:db:5c:c6:e7:06: 23:f5:0b:8d:1a:8f:01:20:43:c9:98:62:ca:09:00: e1:ae:18:64:86:8d:11:a3:cf:d0:a3:73:71:f8:75: ae:c2:9b:ab:61:e5:89:1b:14:ce:a2:85:51:69:8c: c5:22:10:b4:9d:5a:8d:c5:ae:18:6d:9b:8e:11:79: 72:9d:29:0b:05:91:83:35:a6:f8:e9:04:91:82:3c: b2:35:c9:39:71:7b:fa:6e:ec:7c:f0:09:8d:1d:49: ff:a6:25:7a:cc:1c:8b:6d:86:9a:c4:22:03:99:1b: b9:cf:a5:0e:90:7b:f6:d1:ba:9f:7e:47:85:64:99: f5:99:5f:98:f9:44:81:c1:b8:97:e0:ab:cb:6d:34: 9c:2d:e5:60:54:e1:45:6c:db:16:85:02:d3:26:c6: bc:0b:ab:25:1e:25:3d:2a:ce:0b:b9:d6:13:79:3e: 15:f8:8a:aa:52:7b:d8:f2:8b:37:1e:e2:98:1a:19: 9e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A7:FD:D9:5F:CE:AE:49:82:01:EA:EB:C4:81:D6:10:64:C5:67:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv4: 129.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:11:b4:fa:bd:6d:e9:0d:a9:56:dc:e9:78:f6:c6:03:c1:ad: 68:7f:fe:c1:2e:aa:b8:8b:df:df:e9:78:8f:21:72:78:b7:8a: c9:2d:7f:64:61:28:49:f4:fc:c0:04:61:cb:4d:c0:4e:92:55: 3b:78:e3:44:8a:44:26:ad:09:12:bd:f2:1e:cd:93:0b:8b:c6: 3e:9c:69:96:68:09:df:9f:14:88:6f:dd:e7:40:16:72:62:89: e4:29:33:12:16:10:f1:4a:5f:42:20:ad:03:42:e8:75:a9:c2: ca:b4:57:13:62:22:ee:f4:d2:77:37:15:ba:14:4e:a4:5c:21: c9:e2:95:0f:55:62:35:8a:cb:5a:34:30:0f:7e:5d:74:63:58: 36:6f:ca:e5:bb:5b:12:c6:3b:fd:33:e2:a6:31:f6:03:8d:4c: 36:34:50:f7:5c:fe:58:80:90:66:4b:a3:6f:48:10:25:0e:5b: 2c:bc:59:73:a1:c2:80:26:20:6c:b9:c0:3d:55:03:77:e2:1c: 4b:ec:55:6a:c6:84:9c:a6:99:55:55:67:38:c2:51:74:d3:90: de:f3:21:3e:0e:a2:d6:d4:b0:df:89:63:be:89:31:1f:f0:8f: 65:68:44:73:16:34:4c:1a:fe:92:a9:6e:1b:51:51:f5:68:8d: ff:22:5a:92 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuE52WmtB3xInViYdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YWY0ZGFkOTEtNGRkZi00M2RhLWEwZDktNzE1Njg1N2M3OGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigtttZWfl6S86Ik61EXgg5RgfGK/7QiyRxwY RanVzWosNZMJAqxvCvtgayy2uN8tnJQstH6wlomIb/b+A/pH5LZQH6co21zG5wYj 9QuNGo8BIEPJmGLKCQDhrhhkho0Ro8/Qo3Nx+HWuwpurYeWJGxTOooVRaYzFIhC0 nVqNxa4YbZuOEXlynSkLBZGDNab46QSRgjyyNck5cXv6bux88AmNHUn/piV6zByL bYaaxCIDmRu5z6UOkHv20bqffkeFZJn1mV+Y+USBwbiX4KvLbTScLeVgVOFFbNsW hQLTJsa8C6slHiU9Ks4LudYTeT4V+IqqUnvY8os3HuKYGhmeUQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHWn/dlfzq5JggHq68SB1hBkxWcLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvMTJjNjQ5ZTktODE1Yi0z MzUxLThiMTEtZjlhNjc1NzAyZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgVkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOBG0+r1t6Q2pVtzpePbGA8GtaH/+wS6quIvf3+l4jyFyeLeKyS1/ZGEo SfT8wARhy03ATpJVO3jjRIpEJq0JEr3yHs2TC4vGPpxplmgJ358UiG/d50AWcmKJ 5CkzEhYQ8UpfQiCtA0LodanCyrRXE2Ii7vTSdzcVuhROpFwhyeKVD1ViNYrLWjQw D35ddGNYNm/K5btbEsY7/TPipjH2A41MNjRQ91z+WICQZkujb0gQJQ5bLLxZc6HC gCYgbLnAPVUDd+IcS+xVasaEnKaZVVVnOMJRdNOQ3vMhPg6i1tSw34ljvokxH/CP ZWhEcxY0TBr+kqluG1FR9WiN/yJakg== -----END CERTIFICATE-----Generated at Tue Oct 21 11:40:31 2025 by rpki-client