$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/068e8863-e6cd-3feb-80a5-65a9b52ae390.roa File: 068e8863-e6cd-3feb-80a5-65a9b52ae390.roa (raw, json) Hash identifier: YUex72LDxhrTzWyzZ9/fx2+JXJ5muqUT2gYHcXIJ1+Y= Subject key identifier: 53:78:3E:95:A0:A8:20:BC:0C:2C:94:06:AE:0B:B1:19:CD:BF:E7:70 Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584D1B1A671C00204DCB5B3CC780 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/068e8863-e6cd-3feb-80a5-65a9b52ae390.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 49 IP address blocks: 129.6.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:67:1c:00:20:4d:cb:5b:3c:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=c1661473-f1b7-4eed-a5b9-cfe0b8375be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:59:9c:a4:2a:e8:87:48:15:0b:9e:3d:96: 11:b3:6b:d3:fa:5b:03:53:18:2b:f0:21:e8:09:09: b3:28:39:c3:26:5c:69:78:cb:98:81:c3:22:bb:91: 32:e6:b0:61:17:66:2e:9e:01:79:2b:6a:35:2d:70: 56:8a:16:12:9e:41:90:c9:d6:3e:e6:3a:5e:af:3a: 36:fc:3a:96:f5:b9:2a:14:55:5d:32:02:ee:dc:d4: b5:f2:06:da:74:e5:00:bb:a8:a7:ae:b5:36:9d:8f: 02:f3:18:2c:89:1b:ab:5a:ae:61:27:97:4a:e4:07: e1:cb:d4:50:a5:3f:a8:37:05:36:47:49:16:c1:91: 78:4e:7a:b9:0a:23:55:97:71:0f:75:7c:b5:1b:a9: 45:5f:3c:54:a3:ee:f1:81:63:3a:fa:2b:76:14:71: 36:33:21:6c:cb:61:f7:b3:b2:9e:42:41:fe:fb:7e: 47:4d:fe:a4:c9:d4:bb:d9:06:83:c9:b4:9c:97:39: 3b:91:98:f0:e6:1e:e1:45:a9:8e:7b:6b:ec:85:05: ba:7c:80:22:20:6e:bb:c8:9f:a1:6a:19:e5:fe:1b: 65:c7:4f:3c:16:00:6d:fc:35:8a:9f:42:60:15:22: 2d:3f:f4:22:63:8c:7e:4d:a7:73:ac:0f:df:9a:ac: 0f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:78:3E:95:A0:A8:20:BC:0C:2C:94:06:AE:0B:B1:19:CD:BF:E7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/068e8863-e6cd-3feb-80a5-65a9b52ae390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 129.6.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:76:70:12:a7:c4:c8:b1:eb:4c:76:41:29:07:91:d8:da:c9: e5:51:63:4d:a2:84:13:af:9a:1b:78:52:44:e9:75:da:49:62: b4:7a:f5:fd:5f:74:72:0f:ee:5d:88:ee:89:4f:76:b2:27:f6: 4c:0e:8d:a8:6c:3a:c8:8d:3c:c9:a8:4a:a6:a3:25:23:66:76: d3:a6:53:f8:74:34:c6:37:45:fd:d7:86:d2:14:c8:64:91:1e: 2d:6b:3b:46:19:16:68:aa:a0:b1:4a:63:39:2e:ad:11:85:28: 54:95:0c:9c:c1:d0:d9:05:4b:77:76:15:35:1d:69:c4:23:a6: f6:f3:43:5c:e9:b0:51:7d:9f:a1:25:68:65:ca:a5:9d:7b:46: 50:a5:80:9f:23:a0:03:94:72:3f:5c:b8:2d:89:7a:50:39:1c: b8:c5:03:51:95:58:ac:c5:72:ae:7e:92:7f:a4:e8:a0:94:8b: 1b:d7:79:d2:c2:46:3d:37:91:22:04:7d:a1:61:fb:5c:be:1f: 36:c0:8e:d9:f8:70:25:55:7e:15:cd:07:9b:26:9e:a4:77:b4: c4:b2:80:04:a9:b4:6a:4b:be:93:1c:99:1b:ee:f1:1a:7a:8b: 8d:c1:1f:4b:48:1a:c8:e1:d2:5d:2b:fc:96:40:59:39:5e:4e: 46:e5:b9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmccACBNy1s8x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YzE2NjE0NzMtZjFiNy00ZWVkLWE1YjktY2ZlMGI4Mzc1YmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh19ZnKQq6IdIFQuePZYRs2vT+lsDUxgr8CHo CQmzKDnDJlxpeMuYgcMiu5Ey5rBhF2YungF5K2o1LXBWihYSnkGQydY+5jperzo2 /DqW9bkqFFVdMgLu3NS18gbadOUAu6inrrU2nY8C8xgsiRurWq5hJ5dK5Afhy9RQ pT+oNwU2R0kWwZF4Tnq5CiNVl3EPdXy1G6lFXzxUo+7xgWM6+it2FHE2MyFsy2H3 s7KeQkH++35HTf6kydS72QaDybSclzk7kZjw5h7hRamOe2vshQW6fIAiIG67yJ+h ahnl/htlx088FgBt/DWKn0JgFSItP/QiY4x+TadzrA/fmqwPDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFN4PpWgqCC8DCyUBq4LsRnNv+dwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvMDY4ZTg4NjMtZTZjZC0z ZmViLTgwYTUtNjVhOWI1MmFlMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgQY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG12cBKnxMix60x2QSkHkdjayeVRY02ihBOvmht4UkTpddpJYrR69f1f dHIP7l2I7olPdrIn9kwOjahsOsiNPMmoSqajJSNmdtOmU/h0NMY3Rf3XhtIUyGSR Hi1rO0YZFmiqoLFKYzkurRGFKFSVDJzB0NkFS3d2FTUdacQjpvbzQ1zpsFF9n6El aGXKpZ17RlClgJ8joAOUcj9cuC2JelA5HLjFA1GVWKzFcq5+kn+k6KCUixvXedLC Rj03kSIEfaFh+1y+HzbAjtn4cCVVfhXNB5smnqR3tMSygASptGpLvpMcmRvu8Rp6 i43BH0tIGsjh0l0r/JZAWTleTkbluYY= -----END CERTIFICATE-----Generated at Sun Mar 22 14:31:51 2026 by rpki-client