$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/af4abd7c-5018-3182-921d-9e1e8fd38f16.roa File: af4abd7c-5018-3182-921d-9e1e8fd38f16.roa (raw, json) Hash identifier: xtAorahM1/s6DnX41IlZ9yiXkJCZo1TS2DqhAXMi8bg= Subject key identifier: 99:09:68:C0:2A:04:4E:73:D2:4C:F0:3F:B2:7C:09:48:DA:15:C5:E3 Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584EA798A4FF4D3931A043A2CD80 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/af4abd7c-5018-3182-921d-9e1e8fd38f16.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 49 IP address blocks: 129.6.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:a4:ff:4d:39:31:a0:43:a2:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c1787232-b34d-4048-9fea-3547ccec5e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:46:59:89:a2:02:c0:da:e4:42:d4:07:d8:a9: 1c:ae:63:ed:b9:79:2d:e8:64:12:e6:aa:1e:82:41: a3:99:58:34:06:f2:a2:ee:1a:dd:17:5d:ab:a9:95: 14:1a:52:7d:43:ec:52:42:89:ab:c7:de:f9:31:ee: bd:b1:86:21:82:3d:de:39:d9:4a:a2:aa:66:2f:4d: 6b:9b:dc:3a:d5:b2:dd:a5:18:7c:b9:c2:10:ac:e3: d9:67:e2:c9:0c:29:ac:e1:9e:83:91:f4:77:d4:ce: d5:03:9c:c9:ed:93:b0:6c:c0:e9:c0:a0:10:51:9b: e1:16:96:2e:4e:8c:2c:27:06:27:3c:f6:02:3f:6d: 39:d3:fe:82:21:01:c5:97:59:b4:0d:7c:eb:83:34: 8c:ea:47:7f:2a:d0:ff:ea:fa:7a:61:5a:9f:3d:52: fc:41:b6:c1:51:be:e5:27:f2:19:08:39:42:8c:d7: f4:ec:e1:17:e4:1d:78:e6:49:3c:3a:32:ec:da:d0: d1:84:44:05:bb:32:d1:e1:4b:66:3d:67:b1:e6:71: de:85:f4:b5:8c:ac:9d:97:54:74:22:75:ec:52:db: 5d:3a:f3:40:70:1a:06:ca:61:d7:41:6c:58:dc:02: c0:01:74:33:cf:69:42:67:bf:1d:94:25:08:19:7c: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:09:68:C0:2A:04:4E:73:D2:4C:F0:3F:B2:7C:09:48:DA:15:C5:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/af4abd7c-5018-3182-921d-9e1e8fd38f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 129.6.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f7:54:06:36:da:9f:9c:cf:58:5a:11:2f:22:3d:a9:a6:19: dd:d2:df:22:09:72:64:97:92:22:d4:4c:46:79:62:00:c0:61: b0:df:05:3e:8f:12:35:70:90:28:15:57:a5:69:64:37:cb:30: 2d:f7:76:66:6f:8c:0f:c5:f7:f0:9e:7a:21:6c:00:52:dd:51: 7b:78:02:22:a9:77:93:22:79:81:d6:53:71:39:08:28:04:c6: d4:6b:24:34:8d:d2:b2:e9:6d:ee:65:9a:0f:ae:b5:62:f6:85: bb:22:70:8c:f9:1c:13:76:18:dc:db:08:a2:f4:54:c1:da:91: 03:7d:0c:d4:a0:4b:b6:84:37:fd:1d:d7:8d:53:8a:5e:41:17: 92:2b:18:45:1a:58:23:13:97:ff:9c:8e:94:82:bb:cb:5e:2c: 36:9b:b8:e5:60:13:35:ef:bc:ed:86:85:9d:bb:a3:a5:b7:cc: e3:34:a2:6f:7b:30:e5:4d:15:a0:f5:cd:51:75:fa:7c:94:77: 48:d1:3b:ac:87:8b:06:e9:ea:5d:c1:38:b7:df:26:8c:41:b9: d2:cf:1e:ac:74:1b:c1:9f:e0:ae:a4:a9:1f:18:44:c5:58:45: 21:82:5e:ad:c8:be:41:44:83:58:d0:b8:14:41:39:84:04:09: 9d:f9:e9:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmKT/TTkxoEOizYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzE3ODcyMzItYjM0ZC00MDQ4LTlmZWEtMzU0N2NjZWM1ZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEZZiaICwNrkQtQH2KkcrmPtuXkt6GQS5qoe gkGjmVg0BvKi7hrdF12rqZUUGlJ9Q+xSQomrx975Me69sYYhgj3eOdlKoqpmL01r m9w61bLdpRh8ucIQrOPZZ+LJDCms4Z6DkfR31M7VA5zJ7ZOwbMDpwKAQUZvhFpYu TowsJwYnPPYCP2050/6CIQHFl1m0DXzrgzSM6kd/KtD/6vp6YVqfPVL8QbbBUb7l J/IZCDlCjNf07OEX5B145kk8OjLs2tDRhEQFuzLR4UtmPWex5nHehfS1jKydl1R0 InXsUttdOvNAcBoGymHXQWxY3ALAAXQzz2lCZ78dlCUIGXzwSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkJaMAqBE5z0kzwP7J8CUjaFcXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvYWY0YWJkN2MtNTAxOC0z MTgyLTkyMWQtOWUxZThmZDM4ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgQY0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv3VAY22p+cz1haES8iPammGd3S3yIJcmSXkiLUTEZ5YgDAYbDfBT6P EjVwkCgVV6VpZDfLMC33dmZvjA/F9/CeeiFsAFLdUXt4AiKpd5MieYHWU3E5CCgE xtRrJDSN0rLpbe5lmg+utWL2hbsicIz5HBN2GNzbCKL0VMHakQN9DNSgS7aEN/0d 141Til5BF5IrGEUaWCMTl/+cjpSCu8teLDabuOVgEzXvvO2GhZ27o6W3zOM0om97 MOVNFaD1zVF1+nyUd0jRO6yHiwbp6l3BOLffJoxBudLPHqx0G8Gf4K6kqR8YRMVY RSGCXq3IvkFEg1jQuBRBOYQECZ356b4= -----END CERTIFICATE-----Generated at Wed Jul 29 12:28:19 2026 by rpki-client