$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/b35b9af9-ab06-31e9-ab20-b11ea5e36170.roa File: b35b9af9-ab06-31e9-ab20-b11ea5e36170.roa (raw, json) Hash identifier: YtQZmfGqA5YUzFPujlAWEkHGfRzw8nEo/8IsVAJ9Epg= Subject key identifier: 3E:22:C6:CF:34:04:8B:56:41:25:71:D0:DA:65:BE:2A:71:EE:E7:2B Certificate issuer: /CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Certificate serial: 010D0C9F4328584E4824845F09D7425519E86720 Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/b35b9af9-ab06-31e9-ab20-b11ea5e36170.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 49 IP address blocks: 129.6.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:84:5f:09:d7:42:55:19:e8:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=f3fd252d-1193-4a78-be7a-a28e67be063c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:4e:ff:d8:79:28:15:f2:20:d5:8f:8f:a2: df:32:d3:63:93:19:86:a0:15:5a:38:df:ef:82:09: be:bf:3e:44:39:c2:29:79:cc:9f:ee:9f:5e:c0:1e: d0:bd:ff:8e:2e:6f:24:35:d1:6f:82:87:ec:bb:1e: 6c:2b:dd:e3:55:e1:5d:56:4f:be:9d:5f:0b:6f:2c: a7:8e:6f:2a:78:85:11:d0:b4:c1:d0:d8:61:2e:5f: f1:46:e6:d4:05:d2:bc:91:11:eb:eb:08:3f:ec:df: fe:0f:2f:d5:ad:c7:61:0d:97:07:01:4c:97:f6:2c: ad:50:5e:f7:6e:d9:e3:e8:a2:49:4d:c2:56:59:25: 3e:33:c5:a0:a4:63:97:79:6f:bb:d1:0e:89:c9:d2: cd:bf:43:b0:01:88:0f:42:9d:1b:2e:d1:29:d4:75: f4:c2:59:a9:c2:6d:b3:0b:31:b0:65:66:5c:93:99: c9:00:da:f5:bb:f3:c5:a6:63:1c:96:9e:72:41:6a: c7:87:3d:b1:3b:06:29:c8:8e:5b:49:c0:92:dd:43: dc:cc:a7:84:ab:15:09:96:75:27:95:3e:0c:f0:c8: 58:59:3e:c7:40:a6:dd:d7:07:d1:08:ef:6e:c3:d4: 10:b6:7e:3f:27:30:81:60:22:20:7c:9b:6e:33:6c: cb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:22:C6:CF:34:04:8B:56:41:25:71:D0:DA:65:BE:2A:71:EE:E7:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/b35b9af9-ab06-31e9-ab20-b11ea5e36170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl X509v3 Authority Key Identifier: keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer sbgp-ipAddrBlock: critical IPv4: 129.6.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8f:af:cf:f7:8c:a5:2e:a7:e1:ac:bc:b3:6a:b9:28:73:4f: 91:cd:95:33:11:50:bd:23:9a:16:a4:cd:4d:f4:95:4f:5c:98: d6:6f:ae:ba:b1:0a:bf:88:1a:f9:72:2a:92:04:50:90:b8:51: a8:2e:5c:58:2c:6b:9d:53:46:96:a3:cd:33:81:6d:b1:10:78: e6:52:94:56:c0:3a:3e:06:41:64:3d:71:2f:02:3f:88:b5:ac: d3:74:f7:d7:5b:c5:aa:c5:60:21:0e:78:5f:da:bd:72:a0:06: 63:80:7d:5b:a9:2b:6e:8b:b2:0a:22:cb:79:6a:82:78:66:03: 0d:40:06:bc:4a:aa:99:66:3b:8b:23:f2:cf:66:52:e8:60:48: b0:aa:12:73:87:f5:6e:5d:69:f6:15:39:16:be:1f:c2:88:15: 40:49:cd:01:ad:4f:9a:6a:f3:bc:8d:fe:87:f5:b8:63:7d:9a: 40:9e:a4:cf:55:c9:01:7a:88:db:3a:4e:30:1d:b7:f7:6e:d7: c3:20:43:12:58:cd:de:b1:c8:b8:a6:c8:3f:2b:72:0c:ff:67: 98:61:fd:a0:35:16:2d:5f:98:21:50:cf:07:af:31:d1:75:bd: 42:fb:e9:82:31:e0:d3:f5:6e:2c:f7:0c:49:10:d1:07:cd:29: c5:da:a2:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJIRfCddCVRnoZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAyNmI5MjEtMmQ4My00ZjQ3LWEyNGUtZGI5YTNjNDUx YzcyMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZjNmZDI1MmQtMTE5My00YTc4LWJlN2EtYTI4ZTY3YmUwNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleZO/9h5KBXyINWPj6LfMtNjkxmGoBVaON/v ggm+vz5EOcIpecyf7p9ewB7Qvf+OLm8kNdFvgofsux5sK93jVeFdVk++nV8Lbyyn jm8qeIUR0LTB0NhhLl/xRubUBdK8kRHr6wg/7N/+Dy/VrcdhDZcHAUyX9iytUF73 btnj6KJJTcJWWSU+M8WgpGOXeW+70Q6JydLNv0OwAYgPQp0bLtEp1HX0wlmpwm2z CzGwZWZck5nJANr1u/PFpmMclp5yQWrHhz2xOwYpyI5bScCS3UPczKeEqxUJlnUn lT4M8MhYWT7HQKbd1wfRCO9uw9QQtn4/JzCBYCIgfJtuM2zLGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4ixs80BItWQSVx0Nplvipx7ucrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2 YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlhM2M0NTFjNzIvYjM1YjlhZjktYWIwNi0z MWU5LWFiMjAtYjExZWE1ZTM2MTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjAyNmI5MjEtMmQ4My00ZjQ3LWEy NGUtZGI5YTNjNDUxYzcyLzIwMjZiOTIxLTJkODMtNGY0Ny1hMjRlLWRiOWEzYzQ1 MWM3Mi5jcmwwHwYDVR0jBBgwFoAUENGlJYMMmJF8ba+R1WwuX/ctfWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMDI2YjkyMS0yZDgzLTRmNDctYTI0ZS1kYjlh M2M0NTFjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgQZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKPr8/3jKUup+GsvLNquShzT5HNlTMRUL0jmhakzU30lU9cmNZvrrqx Cr+IGvlyKpIEUJC4UaguXFgsa51TRpajzTOBbbEQeOZSlFbAOj4GQWQ9cS8CP4i1 rNN099dbxarFYCEOeF/avXKgBmOAfVupK26Lsgoiy3lqgnhmAw1ABrxKqplmO4sj 8s9mUuhgSLCqEnOH9W5dafYVORa+H8KIFUBJzQGtT5pq87yN/of1uGN9mkCepM9V yQF6iNs6TjAdt/du18MgQxJYzd6xyLimyD8rcgz/Z5hh/aA1Fi1fmCFQzwevMdF1 vUL76YIx4NP1biz3DEkQ0QfNKcXaot0= -----END CERTIFICATE-----Generated at Fri Jul 24 12:53:12 2026 by rpki-client