$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/291f9ce5-b027-37b0-815f-4a1de26a4c8c.roa File: 291f9ce5-b027-37b0-815f-4a1de26a4c8c.roa (raw, json) Hash identifier: jHqnBn5qpLGH75h3t5mNWokNlTnEEJv2Sq4ytSqyRk8= Subject key identifier: B1:91:09:12:A4:85:83:92:5D:C2:71:D4:5A:5E:DB:A2:5C:F6:F2:B9 Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584D67DFB4AD915320B503FAAC00 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/291f9ce5-b027-37b0-815f-4a1de26a4c8c.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 49 IP address blocks: 129.6.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:b4:ad:91:53:20:b5:03:fa:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=802c3191-7f56-4b59-b200-89fc8f2d4980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:b0:ff:e4:00:68:20:df:c3:a2:67:a7:3f: ee:b1:5b:de:5f:48:6e:35:5a:24:d8:9b:0b:2f:70: 34:73:9f:83:fa:a2:ea:93:dd:3d:65:06:64:17:4d: 22:3b:fb:c2:66:9c:17:8c:03:6d:56:6d:63:71:c3: 87:ea:ed:35:75:fe:ad:7a:8c:e0:43:8f:c4:92:0a: 6b:79:d8:87:eb:20:83:17:64:68:82:d9:0d:40:76: 08:8b:5d:06:8e:9e:7a:b7:1f:3d:87:c0:67:6c:65: 0f:ba:dc:fd:c1:67:34:df:af:53:7e:86:68:dc:1f: 8f:14:dc:f3:51:86:da:c5:21:a7:3d:ae:29:42:ee: 2b:7b:02:97:32:21:13:0b:64:fc:8f:ec:6e:63:b1: b6:3f:7d:62:0e:83:68:5f:c1:15:87:eb:94:58:29: f7:29:69:2d:20:9a:cb:f9:e6:4e:17:6f:ad:e3:9d: 9e:d5:9e:25:2a:e0:f4:f8:5c:6d:3d:6d:2e:e2:48: b6:b1:99:7d:8f:d1:0b:76:36:21:a5:63:34:9e:74: cc:6c:8e:a7:f8:ee:c6:23:c6:14:a4:43:01:07:e4: 76:40:2a:80:ec:6e:df:40:ae:f7:15:80:6d:c2:e8: 02:5f:b6:d8:4b:65:a9:17:62:cf:1d:03:1c:ab:0b: 1e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:91:09:12:A4:85:83:92:5D:C2:71:D4:5A:5E:DB:A2:5C:F6:F2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/291f9ce5-b027-37b0-815f-4a1de26a4c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 129.6.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:22:c7:95:dc:ff:7d:01:6d:bf:bc:0a:42:7b:b9:76:10:a3: 9d:9e:bd:cc:93:80:76:56:61:00:eb:df:8c:0a:ed:8f:39:d4: 43:15:03:b5:9b:f7:9b:e4:9b:92:01:05:26:72:a3:45:6c:56: 8d:6f:20:c9:f7:14:e0:c0:81:47:41:32:4c:49:3b:cc:03:c6: d5:9a:f7:79:27:bf:50:54:28:ff:c4:b0:6e:4d:ad:ce:3c:7a: a7:ef:5c:a7:96:f5:3c:b7:11:98:db:a1:6f:1a:3b:58:e1:60: db:5b:3f:36:f6:cf:84:1d:70:29:79:93:b8:6f:3a:63:fe:1f: 82:2e:bf:f0:86:3f:ea:5a:23:51:80:84:43:26:18:02:c6:c9: 02:a3:fa:0e:74:44:77:37:e9:7a:42:06:78:59:05:2e:64:bc: 1d:c4:1f:83:70:ba:dd:47:4c:7f:43:20:9d:9d:3a:24:bb:b1: 22:2c:7d:57:5d:4a:e4:32:d8:b2:2d:06:2e:77:26:11:dd:67: 43:2f:f9:8a:21:f0:50:3f:7f:f7:b7:02:0b:7e:fe:b6:71:0c: 5f:f6:73:2a:c0:b1:a5:40:71:b8:44:8d:ea:b1:75:d4:93:ad: 80:c9:fb:3e:35:62:39:ea:c2:30:ea:6d:cf:73:d6:df:1b:be: f6:f5:3e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37StkVMgtQP6rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ODAyYzMxOTEtN2Y1Ni00YjU5LWIyMDAtODlmYzhmMmQ0OTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5aw/+QAaCDfw6Jnpz/usVveX0huNVok2JsL L3A0c5+D+qLqk909ZQZkF00iO/vCZpwXjANtVm1jccOH6u01df6teozgQ4/Ekgpr ediH6yCDF2RogtkNQHYIi10Gjp56tx89h8BnbGUPutz9wWc0369TfoZo3B+PFNzz UYbaxSGnPa4pQu4rewKXMiETC2T8j+xuY7G2P31iDoNoX8EVh+uUWCn3KWktIJrL +eZOF2+t452e1Z4lKuD0+FxtPW0u4ki2sZl9j9ELdjYhpWM0nnTMbI6n+O7GI8YU pEMBB+R2QCqA7G7fQK73FYBtwugCX7bYS2WpF2LPHQMcqwseRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGRCRKkhYOSXcJx1Fpe26Jc9vK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvMjkxZjljZTUtYjAyNy0z N2IwLTgxNWYtNGExZGUyNmE0YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgQYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwix5Xc/30Bbb+8CkJ7uXYQo52evcyTgHZWYQDr34wK7Y851EMVA7Wb 95vkm5IBBSZyo0VsVo1vIMn3FODAgUdBMkxJO8wDxtWa93knv1BUKP/EsG5Nrc48 eqfvXKeW9Ty3EZjboW8aO1jhYNtbPzb2z4QdcCl5k7hvOmP+H4Iuv/CGP+paI1GA hEMmGALGyQKj+g50RHc36XpCBnhZBS5kvB3EH4Nwut1HTH9DIJ2dOiS7sSIsfVdd SuQy2LItBi53JhHdZ0Mv+Yoh8FA/f/e3Agt+/rZxDF/2cyrAsaVAcbhEjeqxddST rYDJ+z41YjnqwjDqbc9z1t8bvvb1PiE= -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:26 2026 by rpki-client