$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/1ec34ea0-2f03-3cac-8d26-2d291fb2c0ab.roa File: 1ec34ea0-2f03-3cac-8d26-2d291fb2c0ab.roa (raw, json) Hash identifier: 8ub7vuR+L/GFMIZVeHglOKQ0MuKnsJwwuk9iZp6cSlw= Subject key identifier: 14:1B:88:BE:D0:C8:65:ED:E1:F0:44:D0:4E:E3:78:39:2A:06:F2:AF Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584D6B4DE5DF1E32265C5DFB87C0 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/1ec34ea0-2f03-3cac-8d26-2d291fb2c0ab.roa Signing time: Mon 06 Apr 2026 18:30:01 +0000 ROA not before: Mon 06 Apr 2026 18:30:01 +0000 ROA not after: Sun 05 Jul 2026 18:30:01 +0000 asID: 3128 IP address blocks: 129.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:4d:e5:df:1e:32:26:5c:5d:fb:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Apr 6 18:30:01 2026 GMT Not After : Jul 5 18:30:01 2026 GMT Subject: CN=cda4a019-de25-4164-84dc-c46061920b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:58:88:92:d1:e7:0a:df:b3:bb:e1:13:13: 7b:07:b1:b2:2c:c1:9f:e7:51:19:c3:51:b6:ee:c3: 50:26:d9:40:27:c7:64:6d:f5:71:79:b7:3f:ee:5d: 3e:b0:ea:05:89:b9:36:39:d7:23:84:1d:17:dd:57: 9e:b7:fb:63:27:43:d5:bc:73:6b:b3:69:e7:d0:64: d2:b4:c4:b4:ed:47:54:67:df:07:58:4a:be:56:2c: 78:5a:ab:7d:87:38:27:68:98:60:eb:a1:80:e2:e6: 12:a6:49:b6:51:d4:1b:e2:b6:e2:bb:50:ef:b8:33: ca:15:5b:7d:cf:55:64:47:c2:33:d9:1f:77:f1:1f: c4:c1:90:fd:00:d7:c1:d8:44:11:00:1a:1b:21:16: e3:03:4c:02:fa:dd:55:17:29:45:79:cd:44:08:58: 17:64:be:8e:48:7a:d5:da:11:06:1f:0a:81:13:c9: 9a:a3:82:14:12:28:70:34:96:ae:3d:00:2b:b2:1f: 03:de:50:ea:46:c6:d6:74:93:f0:b6:83:d7:44:51: d6:23:aa:fa:ea:87:39:02:2f:19:e4:d9:55:29:c3: 63:db:a3:7e:f4:c3:98:2b:45:59:73:8b:d1:30:09: fe:3d:ca:ac:7f:62:52:61:30:09:3b:95:e5:a4:ec: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1B:88:BE:D0:C8:65:ED:E1:F0:44:D0:4E:E3:78:39:2A:06:F2:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/1ec34ea0-2f03-3cac-8d26-2d291fb2c0ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv4: 129.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:11:8b:fa:98:1f:bd:1e:b4:05:12:c0:77:34:56:14:54:f0: bb:91:16:64:e3:3f:e6:68:c4:bc:f8:21:88:d3:2d:25:b6:26: 5a:4c:b2:42:f6:e8:5c:b3:3a:6c:d3:6f:ba:4a:02:6e:57:d1: be:fd:ad:93:23:99:0e:2d:0d:de:07:47:d2:4a:f5:84:e9:cc: 81:cb:81:ea:94:84:73:bf:52:59:26:e4:da:31:e7:55:aa:f6: 35:64:9d:9d:13:39:84:31:41:18:93:3e:4e:08:85:19:89:38: ff:a0:3c:a0:27:b2:e2:c3:64:53:c3:a9:c4:a7:e9:33:97:2f: 2c:28:94:15:9c:4c:be:6e:4e:75:44:56:4c:3c:d9:e3:d5:89: 11:91:da:8d:1d:b9:31:71:31:de:c6:20:ff:b8:99:14:6f:9e: 60:3a:9a:b4:3d:da:7c:31:96:ff:2c:eb:6a:63:8e:44:ef:77: af:5a:87:15:41:40:b4:ee:76:c7:34:27:a2:27:72:72:3c:22: 3e:84:5b:8e:c2:40:d6:45:1c:29:0b:c9:b7:93:f8:51:77:33: 35:e6:96:e8:9d:01:38:bf:8a:e7:60:d7:ca:7b:85:b8:69:1c: 7f:23:2f:94:cf:3a:a2:dc:1d:b0:83:c0:9e:74:3f:25:6d:a6: 7e:b7:3d:9d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1rTeXfHjImXF37h8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI2MDQwNjE4MzAwMVoXDTI2MDcwNTE4MzAwMVowLzEtMCsGA1UEAxMk Y2RhNGEwMTktZGUyNS00MTY0LTg0ZGMtYzQ2MDYxOTIwYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7RYiJLR5wrfs7vhExN7B7GyLMGf51EZw1G2 7sNQJtlAJ8dkbfVxebc/7l0+sOoFibk2OdcjhB0X3Veet/tjJ0PVvHNrs2nn0GTS tMS07UdUZ98HWEq+Vix4Wqt9hzgnaJhg66GA4uYSpkm2UdQb4rbiu1DvuDPKFVt9 z1VkR8Iz2R938R/EwZD9ANfB2EQRABobIRbjA0wC+t1VFylFec1ECFgXZL6OSHrV 2hEGHwqBE8mao4IUEihwNJauPQArsh8D3lDqRsbWdJPwtoPXRFHWI6r66oc5Ai8Z 5NlVKcNj26N+9MOYK0VZc4vRMAn+Pcqsf2JSYTAJO5XlpOzs1wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBQbiL7QyGXt4fBE0E7jeDkqBvKvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvMWVjMzRlYTAtMmYwMy0z Y2FjLThkMjYtMmQyOTFmYjJjMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgVkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKxGL+pgfvR60BRLAdzRWFFTwu5EWZOM/5mjEvPghiNMtJbYmWkyyQvbo XLM6bNNvukoCblfRvv2tkyOZDi0N3gdH0kr1hOnMgcuB6pSEc79SWSbk2jHnVar2 NWSdnRM5hDFBGJM+TgiFGYk4/6A8oCey4sNkU8OpxKfpM5cvLCiUFZxMvm5OdURW TDzZ49WJEZHajR25MXEx3sYg/7iZFG+eYDqatD3afDGW/yzramOORO93r1qHFUFA tO52xzQnoidycjwiPoRbjsJA1kUcKQvJt5P4UXczNeaW6J0BOL+K52DXynuFuGkc fyMvlM86otwdsIPAnnQ/JW2mfrc9nQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:11:53 2026 by rpki-client