$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/aa896354-1055-31e1-aee8-cb3f9151aabc.roa File: aa896354-1055-31e1-aee8-cb3f9151aabc.roa (raw, json) Hash identifier: eJ2ZCg+GREG+SKbj+NloO88AXQRqw9IIf01xVt1sh8E= Subject key identifier: 60:A4:8E:D4:4B:3F:60:4C:E3:F8:53:DA:B3:F6:B0:E1:E0:FD:D1:08 Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584BABFCFBEB8C77871F0E47FD80 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/aa896354-1055-31e1-aee8-cb3f9151aabc.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 49 IP address blocks: 129.6.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fb:eb:8c:77:87:1f:0e:47:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=6b4fd4d3-47b1-4b57-8280-319850e8f244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5a:11:8d:92:58:72:bb:c6:13:a3:78:41:4b: 69:6f:5f:35:9f:86:79:3d:fa:38:18:1a:e7:a1:d5: 03:94:1c:25:f4:e4:76:27:7a:cb:f4:84:2f:b5:20: 2f:02:3d:5b:9f:87:76:e3:07:59:ee:bd:df:a3:68: 73:7b:f8:83:4c:63:38:b9:1f:f5:82:73:87:83:74: d2:8b:45:ca:01:38:9e:c7:1f:61:2d:f3:6f:96:35: 33:26:bb:18:6d:2b:f0:4f:83:3b:b6:01:19:12:e8: a9:7c:b8:a0:2a:93:50:73:64:4c:25:27:b9:b0:41: 27:40:b6:8e:bc:0e:3a:38:87:f1:f2:fc:c9:bb:e9: 20:49:44:fe:07:11:ea:2a:75:05:0d:4a:da:ac:27: 6a:f0:f0:c6:ba:da:41:16:d2:e3:8d:81:3e:4f:cf: 18:9d:a0:c6:e3:a9:51:5a:81:b4:48:88:93:cf:18: 2a:16:98:be:dc:bc:d4:5e:67:64:06:46:e4:f5:e6: 21:12:eb:2f:80:a0:64:02:02:2d:74:ed:20:60:02: 62:15:ee:0d:69:df:e8:dd:84:b1:18:95:3f:36:55: 96:58:59:ab:46:fd:2d:d1:b6:dc:9e:bd:e5:e8:6f: 09:fc:f4:e0:cb:7c:13:57:4e:1a:7a:ba:83:4b:78: 40:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A4:8E:D4:4B:3F:60:4C:E3:F8:53:DA:B3:F6:B0:E1:E0:FD:D1:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/aa896354-1055-31e1-aee8-cb3f9151aabc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 129.6.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:37:8d:cc:ec:38:e9:1b:85:a1:d9:32:d1:e6:04:39:79:3d: 2b:14:2d:6e:cf:00:11:75:49:f4:ac:4e:a2:62:cb:db:5b:9a: c7:12:1e:45:62:f5:80:22:ab:06:0b:f8:2a:27:6d:bb:d7:30: 12:3b:51:ac:0a:56:2c:02:a4:a7:61:d7:d4:c5:3e:f2:56:16: 61:33:ae:bd:d4:33:76:55:df:d0:d2:34:d1:5b:fe:ef:f1:c9: fd:e9:f5:20:14:f5:69:49:85:ca:2e:6d:03:58:76:b9:be:ff: 4e:8f:82:ea:36:1a:d6:80:dd:50:2b:e0:b3:61:be:ba:88:b6: df:d9:ac:83:8a:8f:1e:94:76:b7:07:e7:4c:d3:c0:58:b1:61: 35:2f:49:50:c7:25:d9:45:35:df:eb:9f:7d:58:fa:f6:fd:d0: 73:1c:ad:95:be:f5:86:76:38:cc:c4:9b:70:13:0a:7e:48:35: f2:aa:3c:e4:df:55:35:b1:12:73:0a:1a:85:39:8a:22:f7:40: 08:b3:eb:9c:95:d7:62:60:07:a1:8e:3f:f6:7b:2d:14:42:e0: bc:03:8a:a0:6b:42:f0:0c:4a:33:f7:fb:2d:96:fe:ba:af:81: 56:90:6c:0f:e2:83:60:d6:33:66:23:c6:b8:42:3e:71:65:9e: dd:8a:7e:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/PvrjHeHHw5H/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NmI0ZmQ0ZDMtNDdiMS00YjU3LTgyODAtMzE5ODUwZThmMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7loRjZJYcrvGE6N4QUtpb181n4Z5Pfo4GBrn odUDlBwl9OR2J3rL9IQvtSAvAj1bn4d24wdZ7r3fo2hze/iDTGM4uR/1gnOHg3TS i0XKATiexx9hLfNvljUzJrsYbSvwT4M7tgEZEuipfLigKpNQc2RMJSe5sEEnQLaO vA46OIfx8vzJu+kgSUT+BxHqKnUFDUrarCdq8PDGutpBFtLjjYE+T88YnaDG46lR WoG0SIiTzxgqFpi+3LzUXmdkBkbk9eYhEusvgKBkAgItdO0gYAJiFe4Nad/o3YSx GJU/NlWWWFmrRv0t0bbcnr3l6G8J/PTgy3wTV04aerqDS3hA1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCkjtRLP2BM4/hT2rP2sOHg/dEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvYWE4OTYzNTQtMTA1NS0z MWUxLWFlZTgtY2IzZjkxNTFhYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgQYeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE3jczsOOkbhaHZMtHmBDl5PSsULW7PABF1SfSsTqJiy9tbmscSHkVi 9YAiqwYL+ConbbvXMBI7UawKViwCpKdh19TFPvJWFmEzrr3UM3ZV39DSNNFb/u/x yf3p9SAU9WlJhcoubQNYdrm+/06Pguo2GtaA3VAr4LNhvrqItt/ZrIOKjx6UdrcH 50zTwFixYTUvSVDHJdlFNd/rn31Y+vb90HMcrZW+9YZ2OMzEm3ATCn5INfKqPOTf VTWxEnMKGoU5iiL3QAiz65yV12JgB6GOP/Z7LRRC4LwDiqBrQvAMSjP3+y2W/rqv gVaQbA/ig2DWM2YjxrhCPnFlnt2Kfn4= -----END CERTIFICATE-----Generated at Thu Nov 6 06:06:19 2025 by rpki-client