$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa File: 84a820e8-2494-3391-a8ed-9f54f9e78765.roa (raw, json) Hash identifier: +tsBTSIKMEHgmQ8auvnG1XWnFXVE6ijEgMzHmTwOLHs= Subject key identifier: 82:27:46:F9:1C:6B:AA:8D:3A:17:86:14:17:B8:51:89:10:50:EE:F6 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584E46BF28B2D2A4C92E5B861740 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa Signing time: Wed 24 Jun 2026 09:00:12 +0000 ROA not before: Wed 24 Jun 2026 09:00:12 +0000 ROA not after: Tue 22 Sep 2026 09:00:12 +0000 asID: 3359 IP address blocks: 129.128.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:46:bf:28:b2:d2:a4:c9:2e:5b:86:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Jun 24 09:00:12 2026 GMT Not After : Sep 22 09:00:12 2026 GMT Subject: CN=d2bbfbc5-c8c1-4be4-9507-207b4c4a7cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:58:c5:65:88:1b:dc:17:24:78:02:2e:f8: d2:a9:73:29:07:eb:c5:27:79:ed:69:f6:c1:4a:1c: f7:b8:d2:27:6e:14:d4:bf:a6:32:cb:6c:0e:da:5c: 38:db:71:da:30:74:69:34:de:93:97:28:56:20:ac: 9e:6a:4d:a4:b1:3a:c3:1b:79:da:df:52:a7:02:c7: 6f:3c:3c:cb:0d:5c:78:26:45:a8:38:41:ac:9d:4f: 63:7a:ea:09:12:17:30:b9:d3:1c:8f:45:81:de:82: 60:81:a6:27:dc:84:11:9a:d6:45:2b:1f:7c:cd:ed: f6:f2:39:99:50:8c:ce:69:90:2e:2c:cf:8d:e7:48: 04:a3:82:5e:46:a3:cf:5e:ea:4a:f8:8e:81:ab:e2: d0:11:a3:38:a6:92:74:cd:a0:26:64:29:2d:92:a4: 4c:bf:42:4d:28:6a:d7:a1:9b:06:e7:d3:44:df:45: bd:f5:3d:53:6a:ff:06:ad:aa:8a:ce:fc:5c:38:4f: d3:bd:a6:45:ac:01:02:d2:b2:e3:6d:b2:39:c8:e8: ae:4d:8e:7f:13:e9:ba:5b:47:53:17:6d:af:90:63: 39:2e:a4:0b:34:20:1b:7f:5b:34:50:4e:dc:21:a2: 54:b1:58:c3:e4:50:54:4b:b0:6f:3b:ce:a4:5e:88: b6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:27:46:F9:1C:6B:AA:8D:3A:17:86:14:17:B8:51:89:10:50:EE:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 129.128.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ae:9b:01:9b:cb:13:a3:9e:9d:d9:92:44:15:b8:a9:50:1c: fa:a3:c4:ec:ac:3e:04:ec:a3:b8:d4:36:21:da:a6:0f:87:2c: bb:46:0d:9c:54:3d:76:fe:3f:08:39:57:25:90:92:52:6b:3c: ba:60:1f:0d:d4:ff:7b:1d:13:d5:85:ee:28:66:af:59:19:54: e4:7c:9b:96:96:c4:4e:d8:46:67:15:6c:52:e7:38:51:50:66: 9d:76:fe:c0:c0:70:02:78:84:24:7a:a6:01:42:74:34:a6:bd: 07:29:c3:57:6d:85:cc:05:6d:ff:b6:b7:09:7b:df:88:fa:46: 28:ef:51:6c:76:42:a2:2c:32:61:d2:f4:2b:c2:8d:a0:3b:a4: ab:46:ca:e6:4a:e9:0e:96:bf:52:5f:a9:5c:da:05:0f:4e:42: e5:28:02:c2:29:50:e1:b7:8a:4e:f4:59:bc:d2:ef:c4:65:24: 6b:8e:e8:aa:5f:32:b2:81:d9:d4:ce:48:0c:14:0d:2b:94:05: 4c:3a:38:3b:cb:37:ff:76:08:19:bf:53:23:df:a5:49:aa:b3: b3:2e:35:75:88:c8:57:ca:4e:95:11:40:63:e3:23:ed:30:26: bf:07:eb:6f:5c:e8:57:92:0a:7e:6f:83:6a:96:7f:7a:6f:1d: 39:eb:ce:c7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5Gvyiy0qTJLluGF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk ZDJiYmZiYzUtYzhjMS00YmU0LTk1MDctMjA3YjRjNGE3Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr1YxWWIG9wXJHgCLvjSqXMpB+vFJ3ntafbB Shz3uNInbhTUv6Yyy2wO2lw423HaMHRpNN6TlyhWIKyeak2ksTrDG3na31KnAsdv PDzLDVx4JkWoOEGsnU9jeuoJEhcwudMcj0WB3oJggaYn3IQRmtZFKx98ze328jmZ UIzOaZAuLM+N50gEo4JeRqPPXupK+I6Bq+LQEaM4ppJ0zaAmZCktkqRMv0JNKGrX oZsG59NE30W99T1Tav8GraqKzvxcOE/TvaZFrAEC0rLjbbI5yOiuTY5/E+m6W0dT F22vkGM5LqQLNCAbf1s0UE7cIaJUsVjD5FBUS7BvO86kXoi27QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIInRvkca6qNOheGFBe4UYkQUO72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODRhODIwZTgtMjQ5NC0z MzkxLWE4ZWQtOWY1NGY5ZTc4NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgYAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJ66bAZvLE6OendmSRBW4qVAc+qPE7Kw+BOyjuNQ2IdqmD4csu0YNnFQ9 dv4/CDlXJZCSUms8umAfDdT/ex0T1YXuKGavWRlU5HyblpbETthGZxVsUuc4UVBm nXb+wMBwAniEJHqmAUJ0NKa9BynDV22FzAVt/7a3CXvfiPpGKO9RbHZCoiwyYdL0 K8KNoDukq0bK5krpDpa/Ul+pXNoFD05C5SgCwilQ4beKTvRZvNLvxGUka47oql8y soHZ1M5IDBQNK5QFTDo4O8s3/3YIGb9TI9+lSaqzsy41dYjIV8pOlRFAY+Mj7TAm vwfrb1zoV5IKfm+DapZ/em8dOevOxw== -----END CERTIFICATE-----Generated at Fri Jul 24 11:54:08 2026 by rpki-client