$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a805108c-c7df-314c-b85d-80982b41b1e8.roa File: a805108c-c7df-314c-b85d-80982b41b1e8.roa (raw, json) Hash identifier: B4zG2SA3q5BW9BVmw3TX8rNKGWPA7qH8fRGEZ/FBmC0= Subject key identifier: 99:73:7F:2A:42:8B:9F:A3:61:76:EE:65:CA:23:F2:1A:CF:5C:24:F2 Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584BA7CD177838C2F0FE735518C0 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a805108c-c7df-314c-b85d-80982b41b1e8.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 49 IP address blocks: 129.6.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:17:78:38:c2:f0:fe:73:55:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=1e8a5d4b-c9c6-433d-964e-40eed8de1587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:28:8a:eb:5a:4a:b0:b5:20:b3:5e:90:95: 8e:31:13:4a:c4:11:d1:85:2a:eb:ab:46:ba:3a:34: 6a:b6:ac:27:8d:d7:e8:89:18:b6:de:0d:36:8e:d5: a2:9d:ff:35:10:96:85:9b:5c:a4:df:53:36:bf:81: be:e4:e2:f9:0c:8f:02:8f:14:55:58:af:ed:93:ba: de:7a:dc:5e:19:30:04:3a:2d:0a:22:22:0b:df:fe: bb:d4:d8:56:d7:5d:5a:bf:01:f6:64:d8:f1:92:ab: e8:51:6b:13:62:28:1b:38:c1:0b:1f:6d:1e:3c:9f: 36:fa:7f:13:a9:78:18:78:af:f3:aa:1b:3a:ee:1e: a9:78:34:c5:cd:ba:5a:fc:dd:7e:8b:7b:d3:48:3c: 75:4c:e9:ce:f0:50:05:12:14:ba:55:09:ce:b5:0b: 73:d7:f5:e9:68:a1:0f:77:55:2a:8f:60:ce:26:96: 9c:1d:e6:41:ae:d2:e4:68:56:54:3c:2b:71:3d:84: a0:50:38:d4:a7:c6:2b:b0:b2:41:b9:e3:33:e7:e3: aa:3f:d9:9c:2f:ec:26:01:25:b8:5b:ed:d0:28:f0: 17:39:d2:53:62:61:e0:7d:0f:c9:bd:18:eb:f9:a4: 27:f7:9f:23:70:a0:98:f7:4e:2a:67:3b:28:d2:31: 99:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:73:7F:2A:42:8B:9F:A3:61:76:EE:65:CA:23:F2:1A:CF:5C:24:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a805108c-c7df-314c-b85d-80982b41b1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 129.6.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:72:bf:68:d3:18:a5:1c:08:23:a5:13:3d:ee:ab:49:83:b9: b9:7d:62:34:53:fc:5f:a3:55:af:fd:08:f4:68:fd:c9:3e:23: f3:44:b4:4e:57:5d:f9:44:6e:d7:96:95:59:4c:53:cf:ea:67: 95:1a:51:d8:50:2c:33:d4:7e:e2:d6:be:b3:ba:2e:17:6d:6b: d1:c3:52:8d:c2:11:c9:11:83:58:55:43:43:f3:81:06:51:3d: 5a:29:1a:c9:89:40:1d:0e:38:fc:ac:7e:13:08:fb:60:3c:63: cb:55:34:31:8b:87:9f:73:23:47:b4:6c:8e:b3:07:36:f4:67: 34:65:56:f3:f3:e3:43:b0:d2:e3:34:18:c0:cc:6e:13:9f:6f: 0d:07:63:c1:35:8f:85:54:5b:f7:f0:eb:95:09:70:5b:b9:96: d0:1f:ae:8a:dc:51:19:fc:c6:52:fb:33:5d:69:2c:7b:8b:22: b0:ac:e0:07:10:2f:a0:cd:a4:bd:76:03:ff:af:38:25:b2:a0: 4f:c8:39:a0:08:c9:95:d7:20:e6:d9:9f:8a:04:af:8c:2e:3a: 11:c3:67:37:68:f6:6f:15:10:05:91:1b:a6:50:ea:85:71:44: e6:de:b4:74:b1:3f:8c:fa:24:eb:d1:7b:75:3f:10:36:7f:fa: 6d:89:f4:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRd4OMLw/nNVGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MWU4YTVkNGItYzljNi00MzNkLTk2NGUtNDBlZWQ4ZGUxNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm24oiutaSrC1ILNekJWOMRNKxBHRhSrrq0a6 OjRqtqwnjdfoiRi23g02jtWinf81EJaFm1yk31M2v4G+5OL5DI8CjxRVWK/tk7re etxeGTAEOi0KIiIL3/671NhW111avwH2ZNjxkqvoUWsTYigbOMELH20ePJ82+n8T qXgYeK/zqhs67h6peDTFzbpa/N1+i3vTSDx1TOnO8FAFEhS6VQnOtQtz1/XpaKEP d1Uqj2DOJpacHeZBrtLkaFZUPCtxPYSgUDjUp8YrsLJBueMz5+OqP9mcL+wmASW4 W+3QKPAXOdJTYmHgfQ/JvRjr+aQn958jcKCY904qZzso0jGZtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlzfypCi5+jYXbuZcoj8hrPXCTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvYTgwNTEwOGMtYzdkZi0z MTRjLWI4NWQtODA5ODJiNDFiMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgQYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhyv2jTGKUcCCOlEz3uq0mDubl9YjRT/F+jVa/9CPRo/ck+I/NEtE5X XflEbteWlVlMU8/qZ5UaUdhQLDPUfuLWvrO6Lhdta9HDUo3CEckRg1hVQ0PzgQZR PVopGsmJQB0OOPysfhMI+2A8Y8tVNDGLh59zI0e0bI6zBzb0ZzRlVvPz40Ow0uM0 GMDMbhOfbw0HY8E1j4VUW/fw65UJcFu5ltAfrorcURn8xlL7M11pLHuLIrCs4AcQ L6DNpL12A/+vOCWyoE/IOaAIyZXXIObZn4oEr4wuOhHDZzdo9m8VEAWRG6ZQ6oVx RObetHSxP4z6JOvRe3U/EDZ/+m2J9Kg= -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:16 2025 by rpki-client