$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa File: 12c649e9-815b-3351-8b11-f9a675702d6c.roa (raw, json) Hash identifier: MFS+EP7FgVup82RJitljLEOm09M/yzA0/CVM2pUCmbo= Subject key identifier: 51:54:88:E5:24:12:DB:EE:6F:1E:E5:B7:55:C5:2F:80:87:1D:14:D8 Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584D473857B2C85747C398E56280 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 7050 IP address blocks: 129.89.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:38:57:b2:c8:57:47:c3:98:e5:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=ae61be72-af65-4774-ac43-60f3f6ee7435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2c:35:c1:12:e6:93:d2:ff:5f:89:25:a5:08: fb:19:df:8f:fb:23:f8:9e:90:fc:31:6e:bc:87:49: 70:37:5f:f8:4f:e2:f0:85:5f:1b:cf:82:3d:3d:2f: a3:fb:7a:52:bd:01:ea:4c:41:b7:d1:16:7b:77:a6: cd:ca:5d:c2:fe:fd:4a:19:0e:7a:43:1c:a7:ed:8e: 1c:2e:7e:a7:26:a6:ee:e2:09:23:42:25:e1:2d:b2: 23:9d:25:4a:8e:6b:90:cc:38:47:a9:57:85:07:0c: c7:3f:38:f0:0b:09:bb:62:0d:d6:2f:78:06:6b:8d: 47:c7:f1:64:64:cf:e2:39:e9:42:bc:8d:94:cb:b3: b0:61:a7:19:0e:7d:38:d1:05:3a:fe:3c:f5:52:91: 21:79:4e:89:29:c9:3e:92:47:7a:af:41:c6:26:0b: 39:d0:28:40:9f:c9:6a:be:1e:dd:dd:00:02:e3:e3: b3:19:21:c4:c4:77:d1:f4:1f:81:a0:2b:6c:f2:1a: dd:1d:be:5c:92:a5:0d:1e:3c:06:c8:41:d4:83:12: 93:16:2f:8d:52:b9:62:5a:a7:c0:02:e7:b6:23:a3: 7c:db:a1:73:71:d8:c1:c1:75:1a:23:59:2d:42:a7: 5f:13:48:b3:0b:a9:e2:40:0e:8d:6c:83:c8:ab:ff: 3e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:54:88:E5:24:12:DB:EE:6F:1E:E5:B7:55:C5:2F:80:87:1D:14:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv4: 129.89.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f8:d8:7e:48:92:ba:60:3a:35:15:3d:08:ec:f9:23:c8:6b: c1:fd:85:a8:87:a2:7f:8c:ca:43:e2:d7:9e:88:01:e8:ea:6d: b4:f3:23:82:67:15:8a:7f:bc:7f:16:91:1f:d3:f8:87:a6:b8: 8c:d6:a9:10:ab:9c:c1:c8:35:ee:66:61:60:12:58:cf:9f:7a: f6:26:6d:67:b1:3f:70:8d:e5:c7:be:c6:46:b9:5f:ff:8a:28: d7:84:e3:31:39:96:0c:4a:23:a4:c6:cb:26:60:b2:91:89:50: 9b:73:72:c6:7b:a9:c7:4d:db:75:7b:91:dd:5c:a3:0f:e0:af: 0b:7b:9b:98:3e:11:fc:19:e1:69:11:3b:f9:71:5f:0f:a3:0b: 4e:57:c2:06:92:d9:09:75:ce:2a:e7:0d:0b:0d:97:d2:7b:5a: d7:f9:d6:bc:ed:d1:17:40:a1:26:9b:37:41:ce:bf:36:0f:3c: 7f:0e:70:65:c0:11:66:5f:af:fd:dc:60:2e:4a:c0:45:8a:08: e0:17:ab:bb:80:ec:be:5d:27:e3:94:dc:0a:1c:cf:cd:a8:46: 62:80:68:5d:33:f9:c8:e3:cf:9a:1d:94:51:38:e2:65:c3:25: e0:46:38:a8:70:36:59:4b:f1:35:4b:c1:2c:38:2b:4c:96:84: fc:e8:46:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HOFeyyFdHw5jlYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YWU2MWJlNzItYWY2NS00Nzc0LWFjNDMtNjBmM2Y2ZWU3NDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCw1wRLmk9L/X4klpQj7Gd+P+yP4npD8MW68 h0lwN1/4T+LwhV8bz4I9PS+j+3pSvQHqTEG30RZ7d6bNyl3C/v1KGQ56Qxyn7Y4c Ln6nJqbu4gkjQiXhLbIjnSVKjmuQzDhHqVeFBwzHPzjwCwm7Yg3WL3gGa41Hx/Fk ZM/iOelCvI2Uy7OwYacZDn040QU6/jz1UpEheU6JKck+kkd6r0HGJgs50ChAn8lq vh7d3QAC4+OzGSHExHfR9B+BoCts8hrdHb5ckqUNHjwGyEHUgxKTFi+NUrliWqfA Aue2I6N826FzcdjBwXUaI1ktQqdfE0izC6niQA6NbIPIq/8+wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFUiOUkEtvubx7lt1XFL4CHHRTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvMTJjNjQ5ZTktODE1Yi0z MzUxLThiMTEtZjlhNjc1NzAyZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgVkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT42H5IkrpgOjUVPQjs+SPIa8H9haiHon+MykPi156IAejqbbTzI4Jn FYp/vH8WkR/T+IemuIzWqRCrnMHINe5mYWASWM+fevYmbWexP3CN5ce+xka5X/+K KNeE4zE5lgxKI6TGyyZgspGJUJtzcsZ7qcdN23V7kd1cow/grwt7m5g+EfwZ4WkR O/lxXw+jC05XwgaS2Ql1zirnDQsNl9J7Wtf51rzt0RdAoSabN0HOvzYPPH8OcGXA EWZfr/3cYC5KwEWKCOAXq7uA7L5dJ+OU3Aocz82oRmKAaF0z+cjjz5odlFE44mXD JeBGOKhwNllL8TVLwSw4K0yWhPzoRv8= -----END CERTIFICATE-----Generated at Thu Mar 26 22:54:43 2026 by rpki-client