$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c7a9d36a-13b0-38ff-ba3a-7176806b8a24.roa File: c7a9d36a-13b0-38ff-ba3a-7176806b8a24.roa (raw, json) Hash identifier: rjPwyWYPaGdwErm+ROx2gP1sxRB5Yg+aiNRWtAnie8I= Subject key identifier: 8A:55:03:9F:FA:26:C4:71:43:7B:5F:25:01:F6:50:73:83:89:43:D0 Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F43285849E79FE7905B0220AACA372E60 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c7a9d36a-13b0-38ff-ba3a-7176806b8a24.roa Signing time: Mon 19 May 2025 12:07:44 +0000 ROA not before: Mon 19 May 2025 12:07:44 +0000 ROA not after: Sun 17 Aug 2025 12:07:44 +0000 asID: 49 IP address blocks: 129.6.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:9f:e7:90:5b:02:20:aa:ca:37:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: May 19 12:07:44 2025 GMT Not After : Aug 17 12:07:44 2025 GMT Subject: CN=c37f794f-140d-4953-8950-ef1ca879ef36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ae:e8:94:a4:9b:c0:bc:e1:e8:45:e8:59:fe: c0:25:9e:c2:8a:79:c7:36:d1:40:de:8a:3b:96:c2: 1e:93:99:f2:f2:20:2f:68:a7:6b:75:c2:59:7d:28: c8:a2:76:88:00:2e:f8:15:7d:e4:e9:54:a9:40:cd: b7:94:a6:b2:11:fc:71:1f:87:38:6c:62:8a:f3:0a: 62:52:70:22:13:7c:bb:fb:a1:0c:8d:12:58:bf:3f: fa:68:7d:5d:40:fd:22:6c:c5:ac:4a:5d:6c:43:29: e8:d9:60:e4:1e:db:e3:2f:7a:6d:1c:18:5b:8c:80: 43:10:2b:04:10:5b:87:3e:02:ff:77:14:ad:fc:90: 8d:34:4c:8d:ce:d3:12:99:8c:e9:70:6a:96:f0:7c: 2c:49:a5:43:81:fe:a6:2e:f2:db:ea:0f:53:ea:7d: 28:ec:5f:64:f6:2a:2e:cb:85:ed:7e:48:3b:3f:24: 32:ae:53:fb:4c:72:7e:3f:57:ff:b4:40:57:c7:a4: 73:24:df:52:b0:9d:11:7c:7d:42:e2:c7:1f:00:f2: d7:c6:20:ad:c4:0f:cd:b5:71:46:23:58:f0:61:41: 66:3e:a3:a5:08:9b:86:2f:78:65:46:d3:25:44:71: 15:20:10:d2:4a:d5:f7:45:c7:3d:fc:74:0c:b8:ad: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:55:03:9F:FA:26:C4:71:43:7B:5F:25:01:F6:50:73:83:89:43:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/c7a9d36a-13b0-38ff-ba3a-7176806b8a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 129.6.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:eb:8b:35:04:16:71:ae:1b:39:59:d3:2d:06:0c:c9:e2:3e: fa:96:5b:40:71:28:e7:66:b4:d6:49:37:19:3f:3d:f5:57:f7: 6f:4a:8d:99:db:aa:78:b1:4a:ba:5b:45:88:bd:e3:35:97:42: 65:a6:3f:b4:8f:47:cb:a8:ed:ec:5e:a2:c7:5c:8d:9f:b6:0b: 7c:d7:df:bd:be:a6:bf:a5:68:cf:24:cb:6b:07:ce:04:3b:b4: c9:c5:ae:de:51:a2:7f:d6:46:68:0f:e9:55:fb:08:96:19:85: 54:2c:4f:00:29:0f:f9:67:43:c5:28:8f:5d:1c:69:23:3c:a5: c8:11:2c:6d:bb:de:e4:a8:47:77:dd:af:fe:f4:6f:f0:5b:e2: bb:bb:80:42:6c:3c:71:ad:62:ec:57:e2:a5:42:82:d7:d5:4b: 39:1f:ee:8e:c8:05:ae:0f:42:7c:31:c0:2b:72:26:0a:25:43: 63:15:38:5e:ce:07:ba:70:7c:3f:15:67:88:cc:cd:fd:e5:18: e3:5d:2e:6a:7e:0f:0f:96:cf:11:84:57:da:9a:d0:0a:f4:8c: 4c:96:ae:f4:36:74:ba:f5:de:93:fd:4d:1e:0f:9e:e9:6d:68: ae:32:4c:4b:c4:cb:1e:cc:51:5b:af:b1:8f:f1:0c:ff:a7:59: 70:e7:cb:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnn+eQWwIgqso3LmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI1MDUxOTEyMDc0NFoXDTI1MDgxNzEyMDc0NFowLzEtMCsGA1UEAxMk YzM3Zjc5NGYtMTQwZC00OTUzLTg5NTAtZWYxY2E4NzllZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq7olKSbwLzh6EXoWf7AJZ7CinnHNtFA3oo7 lsIek5ny8iAvaKdrdcJZfSjIonaIAC74FX3k6VSpQM23lKayEfxxH4c4bGKK8wpi UnAiE3y7+6EMjRJYvz/6aH1dQP0ibMWsSl1sQyno2WDkHtvjL3ptHBhbjIBDECsE EFuHPgL/dxSt/JCNNEyNztMSmYzpcGqW8HwsSaVDgf6mLvLb6g9T6n0o7F9k9iou y4Xtfkg7PyQyrlP7THJ+P1f/tEBXx6RzJN9SsJ0RfH1C4scfAPLXxiCtxA/NtXFG I1jwYUFmPqOlCJuGL3hlRtMlRHEVIBDSStX3Rcc9/HQMuK3hqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpVA5/6JsRxQ3tfJQH2UHODiUPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvYzdhOWQzNmEtMTNiMC0z OGZmLWJhM2EtNzE3NjgwNmI4YTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgQZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjrizUEFnGuGzlZ0y0GDMniPvqWW0BxKOdmtNZJNxk/PfVX929KjZnb qnixSrpbRYi94zWXQmWmP7SPR8uo7exeosdcjZ+2C3zX372+pr+laM8ky2sHzgQ7 tMnFrt5Ron/WRmgP6VX7CJYZhVQsTwApD/lnQ8Uoj10caSM8pcgRLG273uSoR3fd r/70b/Bb4ru7gEJsPHGtYuxX4qVCgtfVSzkf7o7IBa4PQnwxwCtyJgolQ2MVOF7O B7pwfD8VZ4jMzf3lGONdLmp+Dw+WzxGEV9qa0Ar0jEyWrvQ2dLr13pP9TR4Pnult aK4yTEvEyx7MUVuvsY/xDP+nWXDny+U= -----END CERTIFICATE-----Generated at Mon Jun 16 21:04:16 2025 by rpki-client