$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/068e8863-e6cd-3feb-80a5-65a9b52ae390.roa File: 068e8863-e6cd-3feb-80a5-65a9b52ae390.roa (raw, json) Hash identifier: TajQRAeFz1mOkgwD4cWCe1t5nJczpB0egQMAGa7agbI= Subject key identifier: B9:18:3C:32:93:3F:98:7E:2B:75:56:B5:22:17:4A:9F:7A:4F:E9:C3 Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584F498B505BC1E7B68C661F1870 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/068e8863-e6cd-3feb-80a5-65a9b52ae390.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 49 IP address blocks: 129.6.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:50:5b:c1:e7:b6:8c:66:1f:18:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=08bc2bd1-dc0f-4760-8e9c-38a87d5c4343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:52:75:bb:ca:23:4f:31:e6:2c:06:8f:85:66: bc:b1:c9:00:be:d1:91:c7:b6:b7:58:66:85:17:3a: 83:75:18:16:38:c9:71:28:7f:8a:2a:ff:25:35:59: b5:0e:9c:58:5c:2a:de:9c:cc:c4:3d:b4:84:78:01: b6:f0:fc:b5:1a:2f:de:58:e8:05:ed:20:0b:2c:f6: 35:67:8c:2e:f5:0f:ef:da:b1:0b:c3:6e:22:67:48: d8:e3:4e:a6:a3:4c:a2:cf:aa:16:72:7b:ff:50:5d: d1:4b:1a:b9:d4:17:ce:41:70:e0:8d:bc:45:76:e9: 41:fc:ed:70:fb:dc:c2:73:d9:7f:80:75:d6:d5:65: 98:98:89:ef:9c:78:98:d1:3d:74:89:3d:c5:eb:21: 9f:04:a4:07:4b:30:cb:cf:41:ca:f9:0d:d0:8c:f1: be:3a:12:41:a4:c7:ca:45:0e:7a:75:63:27:c0:57: 61:79:83:66:bc:8d:d3:05:93:fb:2b:b8:97:a3:f6: c8:f0:2c:5c:4f:da:a7:50:e4:5a:86:cc:04:e3:4b: 75:cd:4b:14:b1:7a:6e:b8:c7:1d:b8:9e:84:42:67: 9d:4d:7e:f3:01:56:c8:0b:39:51:1f:f6:40:a8:9b: f4:19:29:b3:e4:be:3c:80:b4:8e:0a:09:09:8e:10: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:18:3C:32:93:3F:98:7E:2B:75:56:B5:22:17:4A:9F:7A:4F:E9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/068e8863-e6cd-3feb-80a5-65a9b52ae390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 129.6.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:78:fb:2d:80:93:93:c4:a2:b8:f7:18:7d:ac:3c:c0:66:17: 35:4c:e9:db:ad:17:37:a8:3d:07:ff:50:f4:5f:2a:4f:99:11: 82:83:51:c8:c8:6b:03:d0:50:45:05:69:11:7f:09:3c:7e:c0: 24:2e:18:b3:ac:62:70:12:44:99:ec:86:91:b2:40:5e:d1:0d: 7a:21:03:f1:f6:6e:43:4b:a0:63:84:fd:6d:7e:31:08:aa:73: ff:c1:f3:a3:6b:ac:1c:7d:49:9d:f3:d5:70:5f:22:ec:b9:c8: 0d:03:7d:27:6f:0e:80:6f:86:66:ed:50:55:41:5f:72:9d:c9: 6f:11:05:c9:17:4c:17:c0:7a:6b:3d:79:37:77:0f:80:b5:68: c8:72:13:0f:24:22:36:5a:44:f8:8e:e8:90:aa:8c:44:4f:f9: b5:1e:c9:26:de:01:dd:81:30:07:c4:f6:d8:3a:86:8b:8e:8f: 56:c6:6e:06:a4:e4:4c:d1:83:19:7a:fa:6c:f8:4d:0e:ff:41: 57:b0:f1:16:d2:3f:31:5f:a6:d9:90:2a:bc:cc:78:f2:5e:06: 39:98:c4:6f:f9:76:5b:1d:3d:da:90:59:7d:76:d2:16:31:48: 1b:c9:4e:ef:79:90:3d:9d:2c:28:35:13:30:f4:34:65:4f:bd: 75:ad:2d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji1Bbwee2jGYfGHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDhiYzJiZDEtZGMwZi00NzYwLThlOWMtMzhhODdkNWM0MzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1J1u8ojTzHmLAaPhWa8sckAvtGRx7a3WGaF FzqDdRgWOMlxKH+KKv8lNVm1DpxYXCrenMzEPbSEeAG28Py1Gi/eWOgF7SALLPY1 Z4wu9Q/v2rELw24iZ0jY406mo0yiz6oWcnv/UF3RSxq51BfOQXDgjbxFdulB/O1w +9zCc9l/gHXW1WWYmInvnHiY0T10iT3F6yGfBKQHSzDLz0HK+Q3QjPG+OhJBpMfK RQ56dWMnwFdheYNmvI3TBZP7K7iXo/bI8CxcT9qnUORahswE40t1zUsUsXpuuMcd uJ6EQmedTX7zAVbICzlRH/ZAqJv0GSmz5L48gLSOCgkJjhARsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkYPDKTP5h+K3VWtSIXSp96T+nDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvMDY4ZTg4NjMtZTZjZC0z ZmViLTgwYTUtNjVhOWI1MmFlMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgQY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl4+y2Ak5PEorj3GH2sPMBmFzVM6dutFzeoPQf/UPRfKk+ZEYKDUcjI awPQUEUFaRF/CTx+wCQuGLOsYnASRJnshpGyQF7RDXohA/H2bkNLoGOE/W1+MQiq c//B86NrrBx9SZ3z1XBfIuy5yA0DfSdvDoBvhmbtUFVBX3KdyW8RBckXTBfAems9 eTd3D4C1aMhyEw8kIjZaRPiO6JCqjERP+bUeySbeAd2BMAfE9tg6houOj1bGbgak 5EzRgxl6+mz4TQ7/QVew8RbSPzFfptmQKrzMePJeBjmYxG/5dlsdPdqQWX120hYx SBvJTu95kD2dLCg1EzD0NGVPvXWtLf0= -----END CERTIFICATE-----Generated at Mon Sep 28 04:04:06 2026 by rpki-client