$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa File: 84a820e8-2494-3391-a8ed-9f54f9e78765.roa (raw, json) Hash identifier: ebcfApQDaKNYk7bRt+ZecRu4+UImn8WRgGAvWHxeDIM= Subject key identifier: 0B:7B:22:53:5C:CC:23:31:C8:65:53:3E:20:BA:E2:1D:F6:D1:84:8C Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584BA5023E9CFE993BF728586D10 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 3359 IP address blocks: 129.128.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3e:9c:fe:99:3b:f7:28:58:6d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=3a39b205-09b5-4a4a-8ffa-0127c61a66ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:62:a9:ac:60:cf:61:f9:76:02:1f:16:ff:de: 4f:47:ca:a7:82:15:fb:46:46:56:df:be:b5:7c:fa: f2:79:a3:82:24:2f:fd:32:9a:c0:b2:f0:c4:ec:4d: a7:44:16:b2:0e:b1:53:e3:1f:9a:a3:54:38:59:13: a4:d5:35:da:1d:28:2b:bc:89:eb:48:94:9e:41:76: 4f:b2:21:a4:d5:80:2a:0b:f4:b2:c5:3a:20:a0:33: 8d:01:2f:97:a9:02:ba:32:0a:ab:7b:cb:f4:d6:4b: 36:54:7c:ea:08:4a:c2:fa:63:96:b4:8b:b0:e7:1d: 59:ad:22:e3:be:2c:16:6b:ca:fd:73:15:d2:33:f1: 80:e0:cf:12:43:f6:3f:14:64:06:aa:22:67:ef:f7: 28:29:0e:9d:b8:3d:6a:25:1d:7d:a2:ac:ad:7c:80: 1b:73:2c:07:d6:f3:8d:73:46:8e:d5:eb:43:b3:07: 36:c3:df:ec:7d:f7:d3:ba:32:14:72:65:4c:db:db: 0c:5e:05:96:6f:66:7e:6b:e4:ba:56:29:af:1d:eb: 7d:81:fa:7d:a8:f6:e3:25:07:f4:fb:c7:17:23:e2: 6b:af:7e:27:8d:38:02:ba:e6:71:85:c0:f7:06:07: dc:f5:df:ce:58:74:4d:af:16:a1:63:a3:cd:ca:5a: 25:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7B:22:53:5C:CC:23:31:C8:65:53:3E:20:BA:E2:1D:F6:D1:84:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 129.128.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8f:62:69:2f:2b:df:d1:03:46:c3:d3:27:20:a9:36:e6:ec: e6:c4:f8:56:ee:bc:ce:d0:4e:78:da:01:b6:04:b2:01:4b:13: 1d:f2:eb:6a:74:2b:51:74:a7:4f:2c:64:97:6c:61:e1:56:89: a7:a7:d3:d7:84:c1:fc:95:a2:d0:45:cd:b0:31:1e:7b:40:55: 09:bc:73:08:9a:44:75:32:df:5c:a9:42:f9:6d:49:87:c3:78: f3:46:fe:e3:6b:98:54:62:c2:02:de:99:99:ec:49:d3:ae:ad: d0:a0:a3:f4:08:66:db:62:06:74:a5:d2:db:b9:0f:99:f8:84: 65:0e:cc:90:73:a3:9f:95:40:55:9e:f9:77:a3:a6:07:75:cd: f6:1a:ed:15:36:97:35:45:53:6e:34:40:8c:2d:b7:a9:4a:8b: 30:38:ba:ca:68:46:0c:93:c0:2d:c5:7f:a8:fb:37:05:4e:8a: f6:d2:fe:1a:1a:10:cc:a9:97:68:75:7b:9a:5f:11:86:20:db: 41:a3:b0:45:f6:97:01:20:65:2f:73:16:1c:b4:50:4b:60:de: 08:94:08:f4:60:84:eb:7f:38:92:56:d2:c3:60:e4:0d:b9:bf: 3c:61:5d:c3:48:da:ac:03:b7:df:b9:69:48:60:85:67:17:34: 82:d2:b0:9e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEulAj6c/pk79yhYbRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk M2EzOWIyMDUtMDliNS00YTRhLThmZmEtMDEyN2M2MWE2NmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGKprGDPYfl2Ah8W/95PR8qnghX7RkZW3761 fPryeaOCJC/9MprAsvDE7E2nRBayDrFT4x+ao1Q4WROk1TXaHSgrvInrSJSeQXZP siGk1YAqC/SyxTogoDONAS+XqQK6Mgqre8v01ks2VHzqCErC+mOWtIuw5x1ZrSLj viwWa8r9cxXSM/GA4M8SQ/Y/FGQGqiJn7/coKQ6duD1qJR19oqytfIAbcywH1vON c0aO1etDswc2w9/sfffTujIUcmVM29sMXgWWb2Z+a+S6VimvHet9gfp9qPbjJQf0 +8cXI+Jrr34njTgCuuZxhcD3Bgfc9d/OWHRNrxahY6PNylolDwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAt7IlNczCMxyGVTPiC64h320YSMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODRhODIwZTgtMjQ5NC0z MzkxLWE4ZWQtOWY1NGY5ZTc4NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgYAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAg49iaS8r39EDRsPTJyCpNubs5sT4Vu68ztBOeNoBtgSyAUsTHfLranQr UXSnTyxkl2xh4VaJp6fT14TB/JWi0EXNsDEee0BVCbxzCJpEdTLfXKlC+W1Jh8N4 80b+42uYVGLCAt6ZmexJ066t0KCj9Ahm22IGdKXS27kPmfiEZQ7MkHOjn5VAVZ75 d6OmB3XN9hrtFTaXNUVTbjRAjC23qUqLMDi6ymhGDJPALcV/qPs3BU6K9tL+GhoQ zKmXaHV7ml8RhiDbQaOwRfaXASBlL3MWHLRQS2DeCJQI9GCE6384klbSw2DkDbm/ PGFdw0jarAO337lpSGCFZxc0gtKwng== -----END CERTIFICATE-----Generated at Thu Nov 6 02:40:00 2025 by rpki-client