$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa File: 84a820e8-2494-3391-a8ed-9f54f9e78765.roa (raw, json) Hash identifier: qDIxxujCy4SZQjf6/3AbIccTUihY0WlXzCBPIOD2U9c= Subject key identifier: 2C:32:AF:3E:C8:FA:C5:AC:FB:CB:BC:65:4C:B8:EF:C3:F2:3C:64:4D Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584F8B0DA26FDE02CA68F31B1B68 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa Signing time: Sun 18 Oct 2026 13:00:12 +0000 ROA not before: Sun 18 Oct 2026 13:00:12 +0000 ROA not after: Sat 16 Jan 2027 14:00:12 +0000 asID: 3359 IP address blocks: 129.128.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8b:0d:a2:6f:de:02:ca:68:f3:1b:1b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Oct 18 13:00:12 2026 GMT Not After : Jan 16 14:00:12 2027 GMT Subject: CN=58a08b22-e78e-4ebb-955d-de86d822bb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:92:61:fe:35:ea:ba:7f:a9:47:fe:fc:95:84: c3:ed:28:6a:64:46:6b:0a:f5:d1:36:9e:3e:ef:51: 2c:d6:d0:1d:c8:b3:53:15:43:64:f9:b8:5c:c1:14: 5b:7b:43:cb:0c:21:89:a0:17:50:d9:5b:b0:69:2e: ba:ab:63:fa:95:08:1c:3b:bd:37:90:b8:04:98:bc: 4c:72:50:8f:a6:f4:05:ff:b0:e0:58:1f:8b:78:0e: 35:36:19:e9:60:af:b8:95:f6:df:9c:1c:c1:d7:db: 89:e7:98:ae:b7:5e:1e:d1:8c:42:df:30:c2:25:d6: cf:db:12:1f:c7:ef:a8:aa:da:60:bf:cf:12:26:9d: 2e:be:b9:a1:cc:0a:7d:c4:ea:34:05:31:40:04:3c: 03:19:53:a7:13:58:a3:ca:00:1b:c7:28:3c:9c:2f: 00:0e:c8:0c:b1:d5:69:fd:12:02:9e:84:56:87:5f: 6b:60:cd:9c:ee:0d:4b:52:49:3b:ee:1e:33:6c:6f: 67:25:96:fa:b5:f4:32:51:89:95:5c:b8:0e:86:6e: d9:e6:40:82:64:ce:d0:a5:fc:c0:a2:a6:45:58:cc: 1b:8b:40:ba:5c:93:b0:bb:ca:e6:53:a4:cf:51:af: be:4e:96:d3:7b:7a:d7:60:36:5f:6b:ca:d3:a0:14: 3c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:32:AF:3E:C8:FA:C5:AC:FB:CB:BC:65:4C:B8:EF:C3:F2:3C:64:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 129.128.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5a:e5:fc:61:71:6f:85:42:3e:11:32:06:ad:14:f2:04:f1: f0:91:f5:de:ee:5d:75:db:6c:98:df:6e:0f:40:77:4f:6d:8e: 02:fa:bd:4f:bd:b8:5c:b6:4d:85:d9:a2:de:c2:30:c4:48:de: db:45:d5:af:55:6f:cc:4c:96:d6:6f:ab:93:74:68:84:26:12: 9f:6d:29:30:42:60:fc:ab:08:4e:9c:55:45:bf:f5:f1:69:4f: 01:66:fb:ff:56:33:8a:25:50:ff:e3:50:b7:5f:d5:63:3b:3f: ca:0e:ee:e2:70:02:98:aa:a3:f1:1c:38:7e:95:95:f9:8b:d6: ff:3b:af:d7:7f:12:8d:f3:b4:88:05:a0:e5:f8:6b:1f:f8:3c: 99:74:bb:ae:c2:3a:2e:a9:b6:04:bc:42:0f:d3:76:18:12:93: 3d:81:55:57:48:db:2e:a9:36:c7:e7:8d:53:4f:a3:6a:51:6f: 3e:28:5d:e7:ca:a7:4f:bf:73:04:57:cd:cd:65:6b:d2:86:00: fd:6e:68:28:de:7e:68:34:ec:98:87:66:88:71:66:d6:cd:c1: c2:32:5f:87:70:f6:87:77:30:dd:03:01:1c:80:b2:3f:d5:62: 87:f3:14:33:99:62:74:a9:86:a1:f2:90:64:10:82:d2:5b:0b: 98:1b:12:ff -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+LDaJv3gLKaPMbG2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MTAxODEzMDAxMloXDTI3MDExNjE0MDAxMlowLzEtMCsGA1UEAxMk NThhMDhiMjItZTc4ZS00ZWJiLTk1NWQtZGU4NmQ4MjJiYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZJh/jXqun+pR/78lYTD7ShqZEZrCvXRNp4+ 71Es1tAdyLNTFUNk+bhcwRRbe0PLDCGJoBdQ2VuwaS66q2P6lQgcO703kLgEmLxM clCPpvQF/7DgWB+LeA41NhnpYK+4lfbfnBzB19uJ55iut14e0YxC3zDCJdbP2xIf x++oqtpgv88SJp0uvrmhzAp9xOo0BTFABDwDGVOnE1ijygAbxyg8nC8ADsgMsdVp /RICnoRWh19rYM2c7g1LUkk77h4zbG9nJZb6tfQyUYmVXLgOhm7Z5kCCZM7QpfzA oqZFWMwbi0C6XJOwu8rmU6TPUa++TpbTe3rXYDZfa8rToBQ8GwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCwyrz7I+sWs+8u8ZUy478PyPGRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODRhODIwZTgtMjQ5NC0z MzkxLWE4ZWQtOWY1NGY5ZTc4NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgYAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAL1rl/GFxb4VCPhEyBq0U8gTx8JH13u5dddtsmN9uD0B3T22OAvq9T724 XLZNhdmi3sIwxEje20XVr1VvzEyW1m+rk3RohCYSn20pMEJg/KsITpxVRb/18WlP AWb7/1YziiVQ/+NQt1/VYzs/yg7u4nACmKqj8Rw4fpWV+YvW/zuv138SjfO0iAWg 5fhrH/g8mXS7rsI6Lqm2BLxCD9N2GBKTPYFVV0jbLqk2x+eNU0+jalFvPihd58qn T79zBFfNzWVr0oYA/W5oKN5+aDTsmIdmiHFm1s3BwjJfh3D2h3cw3QMBHICyP9Vi h/MUM5lidKmGofKQZBCC0lsLmBsS/w== -----END CERTIFICATE-----Generated at Sun Nov 1 19:41:09 2026 by rpki-client