$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2af24184-1aa9-3692-a71e-22b6a7e6af2b.roa File: 2af24184-1aa9-3692-a71e-22b6a7e6af2b.roa (raw, json) Hash identifier: yg3vZ3w6riqVWI3ATtjbUPuz6Yw6g7uRg7R9t1jV7L8= Subject key identifier: 2D:81:3A:65:9D:4B:6D:CB:4F:CA:54:E0:70:1F:F7:1E:21:96:19:4F Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584D67DFC1DFED63641C2967CA00 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2af24184-1aa9-3692-a71e-22b6a7e6af2b.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 49 IP address blocks: 129.6.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:c1:df:ed:63:64:1c:29:67:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=7f256bca-286b-499a-8d4f-26c808f08e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:56:85:86:ea:63:04:c6:df:a5:a9:fc:d5: cd:ec:c9:b7:ec:05:a0:04:21:23:28:f7:fd:8e:a4: 6a:6d:34:3d:3a:d8:51:8c:2f:b6:16:a9:86:25:e6: 2e:38:1b:b5:57:69:b3:83:37:f6:2b:38:ca:b5:d9: ac:ce:29:e0:c0:e0:14:81:c0:67:47:31:19:e1:32: 7e:e9:cc:ca:0a:ee:6c:0f:e4:a5:52:b9:2d:ab:ae: 64:cc:09:13:c8:a7:bd:52:99:e2:96:44:07:08:6e: 0a:37:11:22:8e:19:10:a7:8f:cf:28:ae:d0:7f:fc: 05:31:1d:92:2a:f2:7c:25:b4:c1:5f:d4:80:5e:1a: 15:cd:4a:da:24:77:89:55:47:87:10:49:76:be:2a: d3:fd:33:c4:c2:9a:fd:5c:65:6d:88:b6:a1:05:24: c9:02:79:2b:06:93:e7:26:e8:b2:00:d5:d6:f4:d8: 0c:c3:97:a7:50:45:76:1b:8a:d4:a2:05:db:09:e8: 4a:72:e1:e6:62:84:e4:68:93:c0:c8:d5:d6:63:63: 7e:ed:cd:4b:94:a8:ac:5d:70:84:90:14:62:06:9e: c7:08:f6:9c:fb:d0:ac:fa:25:42:df:bd:b3:f1:6b: a2:59:e6:13:da:f7:22:f2:ee:71:73:c7:4f:cc:61: e8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:81:3A:65:9D:4B:6D:CB:4F:CA:54:E0:70:1F:F7:1E:21:96:19:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2af24184-1aa9-3692-a71e-22b6a7e6af2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 129.6.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4b:7b:52:61:df:d2:39:9f:36:d1:49:38:62:1f:2e:66:0f: 93:c6:19:bb:5a:cb:b5:cd:0c:21:9b:fc:15:a9:ff:85:e2:82: 55:2c:96:bc:eb:9c:9e:62:08:00:b4:50:52:00:3d:59:7e:52: e6:36:02:c6:82:25:ec:38:93:7c:97:80:a7:e9:58:49:aa:d3: 7c:7c:7a:cd:e0:07:72:92:ea:da:ee:99:4f:56:c1:f4:70:d3: 20:4d:68:d4:49:df:69:f7:ce:35:8c:64:5a:b5:f4:89:4d:08: e1:1e:8e:39:25:1b:20:91:25:d3:97:24:bd:51:20:d9:c7:fc: 57:f2:7d:67:f8:f9:d9:4f:34:65:e7:39:e6:da:ba:35:9f:04: cd:43:40:b7:42:30:b8:bf:ec:ed:b3:3d:92:b4:7d:93:4d:52: a5:8e:50:96:99:72:ce:b2:3c:ce:3b:e2:79:b1:31:3c:c9:83: 41:60:0d:44:9d:d0:95:43:7a:a1:9d:6f:90:a1:d1:61:0a:fb: 70:2f:3c:27:42:3c:53:22:0e:c0:f8:ca:5b:a5:c1:76:e3:c0: cd:5a:1d:a1:a0:b2:be:e4:52:7f:63:bf:f4:f5:7d:b8:11:2a: c3:3f:b3:98:d3:07:94:d3:ac:b2:95:14:43:a3:47:e6:03:a7: f2:fd:9c:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38Hf7WNkHClnygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk N2YyNTZiY2EtMjg2Yi00OTlhLThkNGYtMjZjODA4ZjA4ZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqtWhYbqYwTG36Wp/NXN7Mm37AWgBCEjKPf9 jqRqbTQ9OthRjC+2FqmGJeYuOBu1V2mzgzf2KzjKtdmszingwOAUgcBnRzEZ4TJ+ 6czKCu5sD+SlUrktq65kzAkTyKe9UpnilkQHCG4KNxEijhkQp4/PKK7Qf/wFMR2S KvJ8JbTBX9SAXhoVzUraJHeJVUeHEEl2virT/TPEwpr9XGVtiLahBSTJAnkrBpPn JuiyANXW9NgMw5enUEV2G4rUogXbCehKcuHmYoTkaJPAyNXWY2N+7c1LlKisXXCE kBRiBp7HCPac+9Cs+iVC372z8WuiWeYT2vci8u5xc8dPzGHorwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2BOmWdS23LT8pU4HAf9x4hlhlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvMmFmMjQxODQtMWFhOS0z NjkyLWE3MWUtMjJiNmE3ZTZhZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgQYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxLe1Jh39I5nzbRSThiHy5mD5PGGbtay7XNDCGb/BWp/4XiglUslrzr nJ5iCAC0UFIAPVl+UuY2AsaCJew4k3yXgKfpWEmq03x8es3gB3KS6trumU9WwfRw 0yBNaNRJ32n3zjWMZFq19IlNCOEejjklGyCRJdOXJL1RINnH/FfyfWf4+dlPNGXn OebaujWfBM1DQLdCMLi/7O2zPZK0fZNNUqWOUJaZcs6yPM474nmxMTzJg0FgDUSd 0JVDeqGdb5Ch0WEK+3AvPCdCPFMiDsD4ylulwXbjwM1aHaGgsr7kUn9jv/T1fbgR KsM/s5jTB5TTrLKVFEOjR+YDp/L9nMY= -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:30 2026 by rpki-client