$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa File: 12c649e9-815b-3351-8b11-f9a675702d6c.roa (raw, json) Hash identifier: ZRxvQF6r12+uv5xsIx3ahoQB498UXK5+dnP8lzhgjUs= Subject key identifier: B2:7A:B0:95:5D:AE:38:7F:A4:10:1C:99:C9:C1:C9:B9:EC:E8:A9:5E Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584F698D6AE96B1DC4ED9ACF7400 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 7050 IP address blocks: 129.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:6a:e9:6b:1d:c4:ed:9a:cf:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=2e5a056d-213e-4e2b-b799-c18c2dd3da97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:54:d0:04:87:0b:85:cd:63:b2:63:ed:b2: 26:26:1a:94:db:34:cf:23:a3:79:16:c4:fc:74:da: a1:03:85:c5:42:4d:94:29:57:99:25:17:4a:91:70: dc:d3:80:e4:bd:8f:5b:8d:c4:b0:aa:42:ea:af:82: 8e:20:1f:df:d7:0a:21:93:86:35:90:bc:16:16:5a: 5f:b7:71:4e:ad:73:e0:df:72:53:0e:c5:7a:3f:38: 03:49:58:94:6f:de:1f:3a:a3:a1:5a:3e:66:5b:e7: 0b:94:f6:a1:f9:bd:44:f2:97:75:a3:fd:09:09:d2: cc:d7:a8:b2:e1:5b:f9:3d:c8:2b:f5:92:b8:bd:15: c4:76:69:e0:8a:a5:1e:29:62:1a:8d:06:34:bb:92: c5:c6:2f:60:8f:00:07:6a:2e:cd:bf:78:dc:e3:73: 28:4b:a2:0e:8b:0b:b4:28:a4:f1:1e:bc:fd:25:a4: 7d:38:5b:60:a2:5b:00:d8:d0:4a:8d:dc:4a:f7:f9: e8:85:57:ae:16:0c:27:1d:1a:11:c7:2d:02:9c:57: 9b:92:4a:ab:54:66:57:5c:3c:24:41:9b:64:6d:9e: a9:26:52:7c:08:60:28:d1:b3:9c:61:67:09:ff:ff: ca:a9:82:e4:e2:2c:5c:20:6d:3e:42:e5:2f:b6:82: 41:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7A:B0:95:5D:AE:38:7F:A4:10:1C:99:C9:C1:C9:B9:EC:E8:A9:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv4: 129.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:89:68:bd:bb:c8:13:4a:18:bc:c4:10:c8:45:20:c6:5f:c7: 7a:b1:a1:c5:18:ba:79:30:d2:e3:a4:50:32:99:11:25:5f:35: c4:25:dc:a9:d2:7c:da:c5:22:ce:99:a7:a7:e4:ce:e1:32:dc: 3a:42:88:68:96:c0:61:f8:ea:05:5b:26:ce:43:06:4a:48:06: 8e:67:8e:db:8e:68:99:30:9a:b7:0f:b5:6f:29:e0:b0:d8:7e: 73:2b:e0:32:a1:4c:03:b2:61:99:61:10:24:ea:7f:fc:18:44: 7a:d4:cb:cb:4a:e9:1f:cd:a7:40:88:88:6d:5d:9d:4b:ac:04: 7c:d1:62:b7:3c:d9:cf:b5:db:1c:11:90:de:c7:b9:03:0b:52: 87:9a:0c:ac:ef:9e:0c:52:49:82:a2:82:d6:bd:86:94:d0:8a: 27:84:db:67:e1:83:46:0a:9f:08:e6:88:04:36:49:e1:90:4a: 9d:ed:40:9c:d1:99:30:26:94:49:a9:77:4a:4c:43:42:12:a0: 7b:e5:b7:46:5f:ee:8b:aa:25:f1:6a:58:59:97:e9:9a:eb:54: dd:49:2f:bc:64:45:61:1d:c9:88:77:d6:2e:50:1f:57:94:a0: 9e:5b:37:48:87:35:cd:c3:08:e9:0d:8b:68:30:47:65:3a:3a: ca:0f:47:a6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9pjWrpax3E7ZrPdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MmU1YTA1NmQtMjEzZS00ZTJiLWI3OTktYzE4YzJkZDNkYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDNU0ASHC4XNY7Jj7bImJhqU2zTPI6N5FsT8 dNqhA4XFQk2UKVeZJRdKkXDc04DkvY9bjcSwqkLqr4KOIB/f1wohk4Y1kLwWFlpf t3FOrXPg33JTDsV6PzgDSViUb94fOqOhWj5mW+cLlPah+b1E8pd1o/0JCdLM16iy 4Vv5Pcgr9ZK4vRXEdmngiqUeKWIajQY0u5LFxi9gjwAHai7Nv3jc43MoS6IOiwu0 KKTxHrz9JaR9OFtgolsA2NBKjdxK9/nohVeuFgwnHRoRxy0CnFebkkqrVGZXXDwk QZtkbZ6pJlJ8CGAo0bOcYWcJ///KqYLk4ixcIG0+QuUvtoJBnQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLJ6sJVdrjh/pBAcmcnBybns6KleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvMTJjNjQ5ZTktODE1Yi0z MzUxLThiMTEtZjlhNjc1NzAyZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgVkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAi4lovbvIE0oYvMQQyEUgxl/HerGhxRi6eTDS46RQMpkRJV81xCXcqdJ8 2sUizpmnp+TO4TLcOkKIaJbAYfjqBVsmzkMGSkgGjmeO245omTCatw+1byngsNh+ cyvgMqFMA7JhmWEQJOp//BhEetTLy0rpH82nQIiIbV2dS6wEfNFitzzZz7XbHBGQ 3se5AwtSh5oMrO+eDFJJgqKC1r2GlNCKJ4TbZ+GDRgqfCOaIBDZJ4ZBKne1AnNGZ MCaUSal3SkxDQhKge+W3Rl/ui6ol8WpYWZfpmutU3UkvvGRFYR3JiHfWLlAfV5Sg nls3SIc1zcMI6Q2LaDBHZTo6yg9Hpg== -----END CERTIFICATE-----Generated at Mon Oct 12 22:58:25 2026 by rpki-client