$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/1ec34ea0-2f03-3cac-8d26-2d291fb2c0ab.roa File: 1ec34ea0-2f03-3cac-8d26-2d291fb2c0ab.roa (raw, json) Hash identifier: Eu5uDDsL1CRGF2hTd856EUlN3RLeq0VYxI1HZ8zoUvg= Subject key identifier: 0F:17:9B:38:0A:AC:D1:E2:E9:EF:23:FA:C4:D4:DD:5E:A1:04:85:94 Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584EED52431FE8D79BD6A3E062A8 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/1ec34ea0-2f03-3cac-8d26-2d291fb2c0ab.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 3128 IP address blocks: 129.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:43:1f:e8:d7:9b:d6:a3:e0:62:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=b6fafea5-f53a-49e7-9a7e-c82b5b2c45ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:b2:98:dd:db:86:62:ea:34:9e:cd:94:f0: 5a:0b:d3:d4:37:49:68:54:20:b6:10:b8:ab:49:d7: d0:f6:4b:b4:38:80:6a:14:1e:ef:bd:d4:d9:b1:8b: 79:e4:91:d7:e9:77:af:f4:d7:a3:03:aa:08:f4:bd: 74:81:a3:fb:cc:9a:0f:ec:34:34:32:8e:3a:66:e9: 82:af:42:f8:41:c2:ee:2a:47:fa:ee:84:c5:5c:26: c3:d0:e9:c8:bc:aa:fd:7f:09:8b:c1:5c:8c:65:d8: 5a:58:2a:96:10:8c:b2:1b:61:2c:a6:ef:32:0d:0f: f8:07:7b:32:fb:ad:99:30:41:05:f6:d9:26:13:46: a4:95:9e:ac:43:a8:87:33:af:2d:1e:c8:82:70:ad: 3f:a8:a6:1c:0a:73:5f:2e:c6:0f:1f:de:0a:ee:dd: 5c:d4:41:67:52:68:03:e1:6a:7f:bc:3b:71:e8:e1: b0:04:d2:a3:0b:d2:9d:4b:c9:d1:d6:91:a4:95:90: 5c:55:58:23:59:27:62:17:cc:8b:d0:c3:6e:66:e9: 2e:56:72:07:72:f4:44:b7:cd:0e:8a:07:80:0f:03: 8e:bc:45:bf:4a:2b:71:cc:5d:f6:11:d0:c9:14:cd: 22:1f:17:02:d6:56:7b:97:84:07:6c:bf:91:17:c6: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:17:9B:38:0A:AC:D1:E2:E9:EF:23:FA:C4:D4:DD:5E:A1:04:85:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/1ec34ea0-2f03-3cac-8d26-2d291fb2c0ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv4: 129.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:7a:ef:34:cf:a5:c5:1d:70:20:81:3f:d7:54:19:f6:ff:66: 65:76:c1:03:7a:a1:f8:f3:49:72:51:5b:d9:11:fc:71:3e:ad: d3:5e:3c:a3:6f:52:70:35:64:c1:8a:d8:55:7f:5b:df:ae:fd: e8:54:b8:03:7f:58:57:1f:31:35:06:39:32:40:93:f7:4a:a2: 06:90:12:10:c6:a5:e2:ab:ea:1c:3e:f5:bc:58:4a:be:53:9a: 5d:b8:80:9b:dd:69:3d:61:32:c7:06:23:f7:df:16:78:d4:64: 78:5a:2b:4f:42:86:e0:9f:83:e8:74:f7:d9:45:57:2b:7b:5c: a1:0a:13:fc:f3:d4:60:96:15:70:5b:83:db:ae:7b:f5:08:71: b3:7b:e7:55:c2:99:19:be:ea:04:96:da:72:76:0d:0a:99:75: 92:50:a2:db:a0:2a:bb:25:f5:96:bd:5f:16:86:56:78:f2:c4: 93:f6:5a:64:9f:77:ca:20:9a:53:fc:e7:2c:36:53:e3:a5:19: b3:a2:f3:95:48:e9:b0:4c:e5:61:55:bd:4d:ec:d1:80:c0:f0: 23:b1:73:1b:b5:dc:88:bb:31:a4:fb:c0:e0:97:1f:a2:55:6d: 4c:d8:92:37:26:0d:08:40:83:de:ec:52:73:d2:43:74:30:57: 8d:e9:95:d7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7tUkMf6Neb1qPgYqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YjZmYWZlYTUtZjUzYS00OWU3LTlhN2UtYzgyYjViMmM0NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aGymN3bhmLqNJ7NlPBaC9PUN0loVCC2ELir SdfQ9ku0OIBqFB7vvdTZsYt55JHX6Xev9NejA6oI9L10gaP7zJoP7DQ0Mo46ZumC r0L4QcLuKkf67oTFXCbD0OnIvKr9fwmLwVyMZdhaWCqWEIyyG2Espu8yDQ/4B3sy +62ZMEEF9tkmE0aklZ6sQ6iHM68tHsiCcK0/qKYcCnNfLsYPH94K7t1c1EFnUmgD 4Wp/vDtx6OGwBNKjC9KdS8nR1pGklZBcVVgjWSdiF8yL0MNuZukuVnIHcvREt80O igeADwOOvEW/SitxzF32EdDJFM0iHxcC1lZ7l4QHbL+RF8aqOQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFA8XmzgKrNHi6e8j+sTU3V6hBIWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvMWVjMzRlYTAtMmYwMy0z Y2FjLThkMjYtMmQyOTFmYjJjMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgVkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQXrvNM+lxR1wIIE/11QZ9v9mZXbBA3qh+PNJclFb2RH8cT6t0148o29S cDVkwYrYVX9b36796FS4A39YVx8xNQY5MkCT90qiBpASEMal4qvqHD71vFhKvlOa XbiAm91pPWEyxwYj998WeNRkeForT0KG4J+D6HT32UVXK3tcoQoT/PPUYJYVcFuD 26579Qhxs3vnVcKZGb7qBJbacnYNCpl1klCi26AquyX1lr1fFoZWePLEk/ZaZJ93 yiCaU/znLDZT46UZs6LzlUjpsEzlYVW9TezRgMDwI7FzG7XciLsxpPvA4JcfolVt TNiSNyYNCECD3uxSc9JDdDBXjemV1w== -----END CERTIFICATE-----Generated at Mon Sep 21 22:59:26 2026 by rpki-client