$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/85d2d882-50ee-3f0b-b191-7803ca3df9a3.roa File: 85d2d882-50ee-3f0b-b191-7803ca3df9a3.roa (raw, json) Hash identifier: oUKBbG0acTSPngzAMPAYChF+H9rRrXaLpfg0p2zQmz0= Subject key identifier: 37:64:98:18:4C:82:52:5A:9D:70:BD:C7:68:AE:24:89:05:6E:70:31 Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584AC711211A7B043D0F4B20D080 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/85d2d882-50ee-3f0b-b191-7803ca3df9a3.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 49 IP address blocks: 129.6.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:21:1a:7b:04:3d:0f:4b:20:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=e5dc0b90-7031-43e5-82f8-fd8f03594acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9b:f3:5c:7b:4e:a0:21:33:c7:bb:63:b1:ad: 82:b8:10:62:e0:a8:2c:d1:a3:c5:d0:38:68:59:44: 62:c3:be:cd:1e:66:56:1c:16:c0:5d:74:9d:2d:af: 54:6a:d8:c2:89:ed:de:b5:8f:e5:08:5a:92:28:67: 24:f3:36:4d:83:64:d2:6e:8b:ad:7a:10:f8:75:9c: 0f:05:b1:0f:12:8d:43:3a:fd:da:db:99:5e:ad:5e: 89:78:35:34:45:c0:73:e6:c8:26:74:e2:3e:c2:cc: 66:87:5e:46:d8:23:51:7d:1e:37:88:7b:26:59:c6: 85:c6:80:03:69:6c:ca:dc:1a:ea:e9:d0:40:23:4a: de:14:e2:f4:e9:0b:59:ee:46:3f:42:2a:16:64:8a: 36:db:c6:bf:51:d6:b8:7c:12:00:cd:00:e9:9d:b6: dc:c0:83:ac:65:95:90:a9:de:0c:46:a3:42:a0:11: 90:3b:ad:1f:8e:aa:25:42:9b:b1:66:04:d5:6d:7a: 03:eb:ec:dc:88:c3:93:ad:7d:16:08:82:b6:28:02: 18:85:fd:82:30:fe:07:a3:d9:35:bb:46:b4:ac:8e: d9:51:60:14:ae:0a:d5:b3:9d:6a:54:a4:6f:87:9e: ae:58:0e:77:6b:ce:65:cc:0a:9e:f2:a5:5d:f3:43: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:64:98:18:4C:82:52:5A:9D:70:BD:C7:68:AE:24:89:05:6E:70:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/85d2d882-50ee-3f0b-b191-7803ca3df9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 129.6.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:af:2d:89:c2:7d:fa:5c:bb:47:e3:51:3f:1c:fe:74:9b:68: a7:82:45:96:55:3b:b8:6f:91:6e:ca:cd:e5:1c:65:0b:b8:4b: b2:46:4d:d3:e7:69:ea:d5:b6:fc:7c:f0:0d:df:26:bc:7f:f3: 29:07:df:dc:e3:a3:68:4e:f5:9c:26:71:ea:11:29:31:fd:8c: 1a:88:5c:6a:59:cc:91:81:75:18:9b:f0:88:36:24:fe:cb:dc: 7e:a2:c0:e5:93:25:62:19:4d:b5:a6:f5:e1:21:37:06:3a:7e: 3a:04:35:4d:e0:f5:38:a3:6f:37:59:77:4a:6d:ce:57:cf:57: 1c:36:57:e2:8b:be:85:ef:66:7f:b6:bd:d3:6d:91:b3:3c:3a: 2e:c0:c6:bf:6f:7c:28:64:80:90:8b:13:0a:22:48:91:ac:7f: 1b:93:39:09:a4:1f:e1:c7:16:22:f1:4d:ea:62:fb:f1:62:b9: 11:3e:e9:a7:e3:a4:d8:4b:cf:b0:30:f9:50:0a:47:14:61:a4: 8e:c4:7b:41:f4:9d:57:26:33:ce:e5:2e:ff:0f:4f:4e:26:48: a2:48:7c:e6:81:15:5e:79:09:db:aa:c9:d0:ad:21:69:6d:09: 7c:23:5a:8c:f1:ae:ea:59:69:07:aa:a9:98:4e:f2:20:58:fa: 33:42:1a:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHESEaewQ9D0sg0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZTVkYzBiOTAtNzAzMS00M2U1LTgyZjgtZmQ4ZjAzNTk0YWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZvzXHtOoCEzx7tjsa2CuBBi4Kgs0aPF0Dho WURiw77NHmZWHBbAXXSdLa9UatjCie3etY/lCFqSKGck8zZNg2TSboutehD4dZwP BbEPEo1DOv3a25lerV6JeDU0RcBz5sgmdOI+wsxmh15G2CNRfR43iHsmWcaFxoAD aWzK3Brq6dBAI0reFOL06QtZ7kY/QioWZIo228a/Uda4fBIAzQDpnbbcwIOsZZWQ qd4MRqNCoBGQO60fjqolQpuxZgTVbXoD6+zciMOTrX0WCIK2KAIYhf2CMP4Ho9k1 u0a0rI7ZUWAUrgrVs51qVKRvh56uWA53a85lzAqe8qVd80PzgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdkmBhMglJanXC9x2iuJIkFbnAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvODVkMmQ4ODItNTBlZS0z ZjBiLWIxOTEtNzgwM2NhM2RmOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgQZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEivLYnCffpcu0fjUT8c/nSbaKeCRZZVO7hvkW7KzeUcZQu4S7JGTdPn aerVtvx88A3fJrx/8ykH39zjo2hO9ZwmceoRKTH9jBqIXGpZzJGBdRib8Ig2JP7L 3H6iwOWTJWIZTbWm9eEhNwY6fjoENU3g9TijbzdZd0ptzlfPVxw2V+KLvoXvZn+2 vdNtkbM8Oi7Axr9vfChkgJCLEwoiSJGsfxuTOQmkH+HHFiLxTepi+/FiuRE+6afj pNhLz7Aw+VAKRxRhpI7Ee0H0nVcmM87lLv8PT04mSKJIfOaBFV55CduqydCtIWlt CXwjWozxrupZaQeqqZhO8iBY+jNCGmk= -----END CERTIFICATE-----Generated at Sun Aug 24 05:31:50 2025 by rpki-client