$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/b35b9af9-ab06-31e9-ab20-b11ea5e36170.roa File: b35b9af9-ab06-31e9-ab20-b11ea5e36170.roa (raw, json) Hash identifier: AMgB4DiAZIdtLwPXE6PqxKNIe/gu7sfq4vXlOzHuslA= Subject key identifier: 91:CE:8B:51:19:64:43:8D:2C:2C:34:5D:AD:51:CF:90:40:A7:23:C6 Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584EEA87538FC5B34B646B6A8D40 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/b35b9af9-ab06-31e9-ab20-b11ea5e36170.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 49 IP address blocks: 129.6.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:53:8f:c5:b3:4b:64:6b:6a:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=597c44ba-3c01-4472-95f7-c0ac1a9bdc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:fa:04:75:5d:43:db:69:38:5e:33:d5:a1: dd:73:b6:d9:95:b4:18:19:10:75:a0:e1:f3:f2:6d: f6:80:d8:80:87:19:a2:2c:a0:fd:70:07:a9:b4:5e: 64:62:ef:5f:69:74:ca:8b:76:e3:39:56:34:93:e9: 86:28:44:d7:fd:1b:93:71:d8:cb:8d:b2:a8:03:11: 76:7f:01:30:d0:21:b4:3a:8a:7d:1b:68:26:6a:9e: 15:b5:5f:69:a8:ed:c9:89:bc:34:f6:4b:2c:69:71: b3:e5:d5:97:ea:29:37:ff:ee:d3:3e:b3:41:1a:00: 68:22:0b:f8:6b:cb:a1:75:4c:20:59:f9:e9:fc:a5: 40:03:4b:aa:6b:f1:aa:ad:74:d1:15:ba:f7:32:8b: 66:9b:d7:06:8c:44:23:4c:d3:10:a3:b2:47:c2:bd: 4a:0c:99:c2:1e:4f:21:78:a3:dc:60:d9:9a:ac:ad: a9:80:1d:5d:47:97:9b:61:19:d5:98:95:2e:d1:d4: ee:62:b0:02:61:dd:99:89:ad:c4:e0:e0:fd:95:23: 6c:97:79:e6:d0:b3:99:44:f6:e7:4a:ce:5c:d6:e1: a2:3d:b7:f2:9d:22:c7:17:5a:5d:10:ed:39:fa:89: b5:c9:48:f0:e1:75:01:b7:3f:5b:a4:76:b6:50:70: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CE:8B:51:19:64:43:8D:2C:2C:34:5D:AD:51:CF:90:40:A7:23:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/b35b9af9-ab06-31e9-ab20-b11ea5e36170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 129.6.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:42:49:65:41:ce:fa:4b:31:b4:11:14:0f:ba:b6:09:49:15: cd:bb:e1:ac:1d:22:c0:3a:4a:e3:a7:b2:47:43:bf:86:ca:49: 99:d3:43:43:9a:42:4f:8e:af:61:81:9d:32:1e:f6:f1:f1:d9: a0:7a:49:4f:ab:07:69:f3:93:65:da:cd:0e:40:62:15:7a:e7: 51:1b:6e:70:4f:c3:87:0c:2f:fb:80:2a:60:6b:fd:ad:f3:55: 5c:19:4c:45:de:c4:9f:31:a1:fb:23:d3:b6:71:fe:b0:7e:2f: 9e:ee:1b:26:2e:64:9e:db:f3:d0:1e:72:e1:ea:05:e5:bf:27: 2b:ea:1c:ca:df:eb:19:cf:78:be:5c:f5:d5:24:ad:56:12:be: 7b:bb:8a:76:56:89:6e:af:b6:10:84:e8:d4:bd:23:c6:21:e9: e9:a6:cc:7a:e1:6c:7e:6c:d5:05:31:a3:c7:79:45:84:85:bc: 19:d9:13:d8:ed:20:bc:3a:d8:d1:b8:70:32:17:38:2f:81:29: a7:a2:89:ac:68:63:a3:e8:35:3d:1d:8d:01:84:e9:1d:c9:cb: e1:21:b5:3b:bf:69:64:2b:76:dd:6b:ee:41:b1:01:d7:15:bc: 7d:fa:ab:2d:d6:4a:45:2c:a0:45:19:b7:ab:53:b8:02:72:55: 25:da:84:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1OPxbNLZGtqjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NTk3YzQ0YmEtM2MwMS00NDcyLTk1ZjctYzBhYzFhOWJkYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwD6BHVdQ9tpOF4z1aHdc7bZlbQYGRB1oOHz 8m32gNiAhxmiLKD9cAeptF5kYu9faXTKi3bjOVY0k+mGKETX/RuTcdjLjbKoAxF2 fwEw0CG0Oop9G2gmap4VtV9pqO3Jibw09kssaXGz5dWX6ik3/+7TPrNBGgBoIgv4 a8uhdUwgWfnp/KVAA0uqa/GqrXTRFbr3Motmm9cGjEQjTNMQo7JHwr1KDJnCHk8h eKPcYNmarK2pgB1dR5ebYRnVmJUu0dTuYrACYd2Zia3E4OD9lSNsl3nm0LOZRPbn Ss5c1uGiPbfynSLHF1pdEO05+om1yUjw4XUBtz9bpHa2UHAByQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHOi1EZZEONLCw0Xa1Rz5BApyPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvYjM1YjlhZjktYWIwNi0z MWU5LWFiMjAtYjExZWE1ZTM2MTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgQZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdCSWVBzvpLMbQRFA+6tglJFc274awdIsA6SuOnskdDv4bKSZnTQ0Oa Qk+Or2GBnTIe9vHx2aB6SU+rB2nzk2XazQ5AYhV651EbbnBPw4cML/uAKmBr/a3z VVwZTEXexJ8xofsj07Zx/rB+L57uGyYuZJ7b89AecuHqBeW/JyvqHMrf6xnPeL5c 9dUkrVYSvnu7inZWiW6vthCE6NS9I8Yh6emmzHrhbH5s1QUxo8d5RYSFvBnZE9jt ILw62NG4cDIXOC+BKaeiiaxoY6PoNT0djQGE6R3Jy+EhtTu/aWQrdt1r7kGxAdcV vH36qy3WSkUsoEUZt6tTuAJyVSXahIk= -----END CERTIFICATE-----Generated at Sat Sep 26 05:56:57 2026 by rpki-client