$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa File: 84a820e8-2494-3391-a8ed-9f54f9e78765.roa (raw, json) Hash identifier: yKNo3iilg/cKC9mDFT55xqG13SUURWGruu3pmI5L5vE= Subject key identifier: 6E:4E:AA:6C:CB:B3:9A:EC:5B:6D:08:0F:C0:0B:ED:43:F9:47:9A:6A Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584D667A506EE365E48E737360C0 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 3359 IP address blocks: 129.128.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:50:6e:e3:65:e4:8e:73:73:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=54dbed4d-073c-4792-8dd1-ccbf1a31094a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cd:c9:ef:e8:86:15:b4:f9:fe:6c:88:43:9b: fd:23:5c:ce:00:58:84:dc:94:a6:79:e4:d6:64:44: cd:44:e2:ca:b7:dc:e0:47:3b:8a:47:2f:d8:df:f0: 46:4e:0f:03:a6:67:12:be:31:ff:33:1b:54:ce:58: c1:c3:06:a5:b7:3b:a2:be:65:9b:9a:04:8a:be:7a: 36:f9:24:08:fc:d9:70:e3:db:d0:7c:7e:0e:21:2f: 9a:25:5c:5d:e0:a6:ec:68:94:5e:cb:6c:d6:24:34: ae:8b:1d:ed:ea:ec:b4:0e:4d:d0:46:b2:0d:c2:52: 45:2a:5e:7f:c9:52:4d:fa:05:30:3d:3d:09:f7:9c: a5:65:9e:5f:72:f2:20:17:d8:93:5d:4f:d8:47:a8: 2d:77:86:2f:17:4a:38:90:23:72:0d:df:03:c2:de: 35:31:64:3e:53:b9:b2:43:4c:b2:77:c2:de:d7:c7: 58:f7:50:17:87:45:1d:4a:0d:56:9f:53:b0:9a:9d: c4:8f:91:39:65:8a:62:36:8e:73:8d:ec:a3:e0:16: 8f:06:c1:14:82:26:49:67:1c:88:15:a6:51:a2:94: f2:55:a8:72:30:0c:10:42:cc:ea:0e:7d:6c:c3:a4: 6f:67:ea:b6:4c:5d:9c:06:19:5e:36:29:5e:9f:95: c7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4E:AA:6C:CB:B3:9A:EC:5B:6D:08:0F:C0:0B:ED:43:F9:47:9A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 129.128.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:00:e3:a5:41:64:b5:d8:85:05:d3:42:86:08:02:6d:24:db: 56:f2:86:93:71:49:9e:eb:53:a1:76:31:7d:83:2e:a1:f4:92: 8a:e9:96:f8:2c:27:58:b2:1e:3e:85:34:eb:4e:d5:83:21:c8: 87:1c:93:29:9b:b3:19:49:e0:05:bf:e1:0f:e3:88:b9:69:55: c7:c4:0b:43:4c:83:79:82:36:27:ea:5e:68:b1:d6:51:26:8c: 6f:ec:1c:69:20:27:02:cb:d6:be:68:09:1b:13:c7:25:da:92: d1:93:6e:6c:25:f1:db:13:27:7a:fc:83:3a:a9:b3:a8:e6:d0: a3:0d:86:42:2b:69:9b:bd:3a:e2:20:0b:6d:bf:53:94:9e:94: 14:e1:e3:f4:76:07:81:60:bb:ec:2a:7c:fa:45:fa:e2:5e:09: 8e:78:9d:f0:88:98:dc:f3:bd:26:37:c6:16:6e:24:bb:7f:fd: fa:52:72:fe:1b:29:d6:94:01:0f:b2:0b:18:c6:de:5b:64:3e: 62:16:a3:3d:41:ce:c8:6a:4d:6a:99:04:30:e6:2b:42:64:fe: fb:1e:e7:7d:8c:4f:b9:38:73:b0:b3:87:80:c6:e4:66:8b:1d: 57:eb:b4:5e:a6:44:6b:53:36:2c:00:0d:09:e8:3d:60:9d:d9: c4:98:97:6d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1melBu42XkjnNzYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk NTRkYmVkNGQtMDczYy00NzkyLThkZDEtY2NiZjFhMzEwOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs3J7+iGFbT5/myIQ5v9I1zOAFiE3JSmeeTW ZETNROLKt9zgRzuKRy/Y3/BGTg8DpmcSvjH/MxtUzljBwwaltzuivmWbmgSKvno2 +SQI/Nlw49vQfH4OIS+aJVxd4KbsaJRey2zWJDSuix3t6uy0Dk3QRrINwlJFKl5/ yVJN+gUwPT0J95ylZZ5fcvIgF9iTXU/YR6gtd4YvF0o4kCNyDd8Dwt41MWQ+U7my Q0yyd8Le18dY91AXh0UdSg1Wn1Owmp3Ej5E5ZYpiNo5zjeyj4BaPBsEUgiZJZxyI FaZRopTyVahyMAwQQszqDn1sw6RvZ+q2TF2cBhleNilen5XH3QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFG5OqmzLs5rsW20ID8AL7UP5R5pqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODRhODIwZTgtMjQ5NC0z MzkxLWE4ZWQtOWY1NGY5ZTc4NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgYAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACgDjpUFktdiFBdNChggCbSTbVvKGk3FJnutToXYxfYMuofSSiumW+Cwn WLIePoU0607VgyHIhxyTKZuzGUngBb/hD+OIuWlVx8QLQ0yDeYI2J+peaLHWUSaM b+wcaSAnAsvWvmgJGxPHJdqS0ZNubCXx2xMnevyDOqmzqObQow2GQitpm7064iAL bb9TlJ6UFOHj9HYHgWC77Cp8+kX64l4Jjnid8IiY3PO9JjfGFm4ku3/9+lJy/hsp 1pQBD7ILGMbeW2Q+YhajPUHOyGpNapkEMOYrQmT++x7nfYxPuThzsLOHgMbkZosd V+u0XqZEa1M2LAANCeg9YJ3ZxJiXbQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:52:13 2026 by rpki-client