$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa File: 84a820e8-2494-3391-a8ed-9f54f9e78765.roa (raw, json) Hash identifier: XQ9NENJXpSz5MwcP3NoSHlGAquC/cGgWq8ckEjUCziI= Subject key identifier: A9:F3:45:07:34:D5:D9:86:5B:B5:DE:85:F5:ED:21:4D:AE:2E:EA:77 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584AC48142BA569880567BD6E220 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa Signing time: Wed 06 Aug 2025 14:59:39 +0000 ROA not before: Wed 06 Aug 2025 14:59:39 +0000 ROA not after: Tue 04 Nov 2025 15:59:39 +0000 asID: 3359 IP address blocks: 129.128.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:81:42:ba:56:98:80:56:7b:d6:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Aug 6 14:59:39 2025 GMT Not After : Nov 4 15:59:39 2025 GMT Subject: CN=a03a156b-0340-4656-83ee-a2f73e8b83cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e6:a2:54:fe:d5:59:b9:ba:4a:9f:4a:a9:2b: 1b:e5:85:50:0a:3d:ef:9a:f2:9a:b0:1b:2f:b8:cf: 69:9f:c7:da:d9:28:c7:d2:72:3b:02:2a:95:f3:9c: 3c:96:6f:09:87:20:c5:3c:ed:d8:b3:ee:5f:00:95: 41:58:4f:fa:fd:69:ad:d6:6a:57:8e:21:01:f5:ae: 50:3e:f8:01:9e:f2:2a:2b:6c:58:2c:74:ef:d4:96: ab:a5:57:35:3c:c0:ca:9d:a4:8f:da:65:49:91:cc: 83:ae:7c:bd:d0:33:65:39:f5:74:a4:73:68:cb:68: 5b:02:2f:ca:2e:80:0c:07:b9:c8:4f:76:b1:d7:2f: bc:e6:1f:3c:c7:98:92:bf:f2:ad:c5:5c:ce:5d:a2: b6:af:05:77:b8:7c:3d:da:14:fe:10:a6:fd:1f:f6: 0d:e1:36:7e:d8:b0:7b:22:17:15:f1:af:b2:77:a9: c0:e6:e3:37:3f:b3:aa:6a:46:ba:dc:72:94:d3:4e: 5e:eb:d0:dd:7f:ee:16:32:17:6d:5b:9b:5d:b7:98: ff:a5:7c:d1:58:d0:c7:5e:d7:e1:15:d0:64:fd:b6: 5b:04:b0:2a:6d:2a:35:85:c0:34:dd:e8:25:c1:c9: 21:d8:01:39:20:73:22:38:49:3f:8c:bd:9f:00:e4: 4d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F3:45:07:34:D5:D9:86:5B:B5:DE:85:F5:ED:21:4D:AE:2E:EA:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 129.128.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0c:66:8b:1f:46:1a:f9:2e:8c:84:37:eb:5e:40:af:ab:b5: 24:f2:64:05:71:b7:ef:2b:62:03:36:75:cd:95:23:ff:af:3f: 50:85:66:e6:51:fc:ba:f8:2b:5a:7d:40:17:50:b6:9f:9e:2a: 2f:6a:16:8b:76:8a:27:6d:b9:eb:f6:74:63:1a:a7:16:87:90: f9:14:6e:9e:c4:3b:7c:ff:56:78:48:9b:e2:e1:d6:d6:fb:97: 07:ed:7a:73:7d:40:45:d2:e0:c9:04:58:2b:81:a9:dd:f4:4b: e0:d4:a7:61:fb:c3:b6:27:57:92:66:b9:0d:6f:d7:2a:84:23: 24:01:a2:7e:82:0e:b4:6e:fb:7b:6a:12:b3:e6:1c:53:1b:31: 37:0d:26:71:d3:3c:46:7b:e2:49:e9:d9:7e:a5:b1:1d:d0:f5: a8:f1:03:db:08:11:9c:c8:f4:f6:f7:8b:5a:1a:97:dc:bc:2d: a3:8a:69:43:5f:af:37:0b:7f:5a:c8:23:e9:e4:42:66:aa:37: bd:da:9e:7c:f4:d9:d0:28:1b:f7:09:02:2a:22:4e:ca:8e:f2: 99:ae:77:92:fe:e6:8c:ba:6a:ab:5d:2b:fb:d2:68:26:a4:a5: 71:52:26:1a:74:73:00:36:16:e0:2b:b5:0b:cd:6b:63:6c:20: d5:01:a8:90 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErEgUK6VpiAVnvW4iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI1MDgwNjE0NTkzOVoXDTI1MTEwNDE1NTkzOVowLzEtMCsGA1UEAxMk YTAzYTE1NmItMDM0MC00NjU2LTgzZWUtYTJmNzNlOGI4M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eaiVP7VWbm6Sp9KqSsb5YVQCj3vmvKasBsv uM9pn8fa2SjH0nI7AiqV85w8lm8JhyDFPO3Ys+5fAJVBWE/6/Wmt1mpXjiEB9a5Q PvgBnvIqK2xYLHTv1JarpVc1PMDKnaSP2mVJkcyDrny90DNlOfV0pHNoy2hbAi/K LoAMB7nIT3ax1y+85h88x5iSv/KtxVzOXaK2rwV3uHw92hT+EKb9H/YN4TZ+2LB7 IhcV8a+yd6nA5uM3P7Oqaka63HKU005e69Ddf+4WMhdtW5tdt5j/pXzRWNDHXtfh FdBk/bZbBLAqbSo1hcA03eglwckh2AE5IHMiOEk/jL2fAORNCwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKnzRQc01dmGW7XehfXtIU2uLup3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODRhODIwZTgtMjQ5NC0z MzkxLWE4ZWQtOWY1NGY5ZTc4NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgYAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcwxmix9GGvkujIQ3615Ar6u1JPJkBXG37ytiAzZ1zZUj/68/UIVm5lH8 uvgrWn1AF1C2n54qL2oWi3aKJ2256/Z0YxqnFoeQ+RRunsQ7fP9WeEib4uHW1vuX B+16c31ARdLgyQRYK4Gp3fRL4NSnYfvDtidXkma5DW/XKoQjJAGifoIOtG77e2oS s+YcUxsxNw0mcdM8RnviSenZfqWxHdD1qPED2wgRnMj09veLWhqX3Lwto4ppQ1+v Nwt/Wsgj6eRCZqo3vdqefPTZ0Cgb9wkCKiJOyo7yma53kv7mjLpqq10r+9JoJqSl cVImGnRzADYW4Cu1C81rY2wg1QGokA== -----END CERTIFICATE-----Generated at Thu Aug 14 06:42:59 2025 by rpki-client