$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa File: 4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa (raw, json) Hash identifier: /+eoeE9SU645Mm2PBY0lXLNF9WKqcLp6L9/2yho3Cvo= Subject key identifier: B8:BD:47:03:B1:C2:0A:A1:EA:DC:42:42:EF:8D:DA:80:E5:E5:4F:5F Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F4328584DFA70854FF2DC15247BBD1700 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 63303 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:85:4f:f2:dc:15:24:7b:bd:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=cbb2e888-67d5-45c7-9e2e-adc3b917a253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0e:ac:22:30:7d:9f:c7:19:10:96:d6:56:c8: a3:ed:63:b0:4f:29:52:f6:d2:39:29:f1:71:e9:13: c1:f7:5e:ea:41:31:34:8f:81:18:47:b8:db:a7:5b: 4b:e3:a7:16:33:07:18:b2:d5:b2:52:de:a6:54:94: d7:0c:2f:cf:a2:43:d8:ba:78:1f:54:80:78:4f:0e: 2c:bd:e9:82:c4:ec:93:74:fb:6a:d5:3e:4d:7c:5f: b1:f6:5c:f1:45:e2:11:74:ef:dc:63:cf:16:e2:c5: 3f:b3:48:4d:b8:a1:4f:5e:ff:48:91:aa:22:9d:de: 78:88:56:85:84:fd:f0:86:35:9f:f8:6a:e3:75:6d: 98:59:e2:71:6d:1a:6d:01:98:75:ce:7c:e9:60:36: 8e:52:76:9a:f7:cd:c0:b0:d5:85:48:a6:e2:03:db: c6:af:70:94:b0:df:ef:77:14:3e:83:fa:8c:02:75: 3d:07:b8:0f:83:31:88:70:1f:2b:2a:da:6e:3c:47: 53:70:0c:1c:a1:bd:ea:3a:53:d8:fd:49:54:8f:39: 7a:f9:86:f9:4d:3a:e3:2e:d1:b3:19:ae:d4:64:32: cb:c3:e7:31:54:4e:1b:76:37:be:5a:72:d7:54:5f: d3:44:9f:d6:df:95:26:a0:a9:04:75:6e:55:e3:47: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BD:47:03:B1:C2:0A:A1:EA:DC:42:42:EF:8D:DA:80:E5:E5:4F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e3:64:87:14:01:54:00:11:df:44:d8:b7:5a:a8:8b:86:e6: 40:db:91:d4:b0:33:3b:03:ea:e8:3b:07:ea:de:f7:9a:6f:98: dd:6d:46:fb:81:97:39:af:d3:ce:74:48:10:47:f0:5c:a6:44: 1d:1c:df:3a:ea:1d:3a:2a:e8:aa:bc:6d:12:0d:8a:39:f4:32: 24:12:6a:b3:34:99:0a:45:0b:1d:52:da:27:d2:16:85:be:25: ef:6c:cb:74:a6:b4:69:64:4b:27:e8:1d:00:1a:68:57:8a:7c: 65:99:ca:86:f6:43:0b:18:ea:8b:93:36:51:8a:f9:e2:63:1d: a1:c2:49:dc:40:09:8c:b2:c7:99:c4:89:43:cb:7e:1b:26:bb: 15:ba:8a:fd:6f:6a:d1:21:8c:eb:20:07:7b:44:16:c2:e1:96: fc:35:a4:f8:47:87:c9:57:b9:22:5a:0f:c0:f9:4e:73:f3:d5: 68:04:16:84:8b:e5:8c:b1:4b:55:89:02:f4:4b:f9:d0:12:4f: de:eb:73:23:fd:4e:9a:89:81:f1:3a:d1:3d:50:2b:1b:df:23: 94:7e:10:dd:7c:11:96:4a:fa:23:ac:29:20:2c:99:8d:37:04: dc:f7:d2:57:06:90:68:d8:10:81:3b:20:50:ca:00:4d:2f:c7: ee:93:14:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIVP8twVJHu9FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk Y2JiMmU4ODgtNjdkNS00NWM3LTllMmUtYWRjM2I5MTdhMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ6sIjB9n8cZEJbWVsij7WOwTylS9tI5KfFx 6RPB917qQTE0j4EYR7jbp1tL46cWMwcYstWyUt6mVJTXDC/PokPYungfVIB4Tw4s vemCxOyTdPtq1T5NfF+x9lzxReIRdO/cY88W4sU/s0hNuKFPXv9Ikaoind54iFaF hP3whjWf+GrjdW2YWeJxbRptAZh1znzpYDaOUnaa983AsNWFSKbiA9vGr3CUsN/v dxQ+g/qMAnU9B7gPgzGIcB8rKtpuPEdTcAwcob3qOlPY/UlUjzl6+Yb5TTrjLtGz Ga7UZDLLw+cxVE4bdje+WnLXVF/TRJ/W35UmoKkEdW5V40eRCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi9RwOxwgqh6txCQu+N2oDl5U9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvNGI3NjBjNjctNThiNS0z ZDhjLTk0MDYtMmQzYTBmMmNmZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvjZIcUAVQAEd9E2LdaqIuG5kDbkdSwMzsD6ug7B+re95pvmN1tRvuB lzmv0850SBBH8FymRB0c3zrqHToq6Kq8bRINijn0MiQSarM0mQpFCx1S2ifSFoW+ Je9sy3SmtGlkSyfoHQAaaFeKfGWZyob2QwsY6ouTNlGK+eJjHaHCSdxACYyyx5nE iUPLfhsmuxW6iv1vatEhjOsgB3tEFsLhlvw1pPhHh8lXuSJaD8D5TnPz1WgEFoSL 5YyxS1WJAvRL+dAST97rcyP9TpqJgfE60T1QKxvfI5R+EN18EZZK+iOsKSAsmY03 BNz30lcGkGjYEIE7IFDKAE0vx+6TFGc= -----END CERTIFICATE-----Generated at Sat Jun 13 13:16:08 2026 by rpki-client