$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa File: b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa (raw, json) Hash identifier: 7/mMRosOuepTtLy1wOv2kCBcd/sh87jMC8qdA0vGgco= Subject key identifier: 08:F8:EF:C1:53:6E:53:EE:E1:AD:1E:85:2D:CF:70:2C:14:81:DA:B9 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F4328584DFA707E22BEE8B1BD165D93C0 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 32799 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:7e:22:be:e8:b1:bd:16:5d:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=3d00049d-9024-42e5-a6d9-e948c4d4845e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:b8:4c:62:50:47:1e:42:74:ba:43:e9:80: ac:a6:42:1e:a1:16:4f:dc:73:73:2b:78:54:75:1e: 29:6b:ce:04:af:48:6c:b5:6e:27:98:99:b1:9c:ef: 25:93:86:2e:25:b5:e1:54:bb:28:00:3c:c5:9e:d0: 90:64:f8:b3:c4:64:e6:c2:15:2c:d1:b7:e6:b6:ee: e0:a9:7b:4c:34:3c:43:16:51:da:d0:d7:6b:3a:c0: 82:71:45:b5:15:ee:a1:61:20:8a:72:8b:55:6c:0e: 7b:10:55:8c:24:fa:7e:7f:65:60:db:30:41:a9:a1: a7:93:21:1a:13:86:5b:9f:34:b3:2b:a8:02:11:b1: 3a:d6:0e:a4:1a:bb:0b:de:49:e3:09:c9:8a:ef:10: d7:94:18:57:85:8d:a3:52:e2:22:17:3f:51:7c:e9: 33:d9:ff:d2:e4:a6:1a:b3:43:83:ef:65:a6:b6:69: ec:9b:b5:db:55:fb:a5:40:42:ba:79:13:14:f3:ab: af:70:98:08:ef:ef:8c:d9:67:2d:a2:45:db:de:22: 48:e2:b4:7a:4c:c1:b8:2d:8a:7f:42:48:24:39:f0: d6:34:91:8c:78:22:65:a6:79:75:6e:c3:1e:9b:7f: bf:c2:01:78:51:d1:7b:14:8b:f1:d9:92:b6:dd:e4: 9b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F8:EF:C1:53:6E:53:EE:E1:AD:1E:85:2D:CF:70:2C:14:81:DA:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4c:aa:c2:d7:d2:09:ba:17:79:5f:71:dd:72:79:39:1d:1b: b0:22:c0:22:85:d6:a8:e9:8f:3b:64:1d:37:17:93:4d:30:2d: 7b:bd:35:27:d9:a4:1b:30:db:97:b7:3e:23:d2:ea:24:b1:d3: ee:5f:6b:fb:48:d7:ac:5d:f2:f4:ca:99:e2:e6:bf:3e:b5:2f: 5c:1f:26:22:e4:59:62:86:03:a2:27:75:1a:a9:8c:1d:9a:c0: 3e:79:86:52:74:f2:52:85:97:ba:91:ae:37:74:b2:61:59:d7: bf:b6:22:37:24:cf:1b:04:7d:09:f2:3f:af:67:6a:04:34:4e: 64:cb:0f:94:ca:b7:ba:01:d5:1e:82:20:b7:29:1b:31:62:75: 84:cf:9c:c4:d6:57:e4:9f:30:3d:fb:ce:59:2e:c8:81:55:74: 53:d4:07:86:2c:19:8a:cc:d1:6a:a9:97:b8:fd:ef:5d:f3:82: f7:79:f0:ce:01:de:3c:78:ea:42:60:4e:91:87:31:8d:39:87: 07:1a:1e:3c:35:2e:aa:89:a1:a7:5b:19:dc:b2:e3:f3:6e:b0: db:e0:66:69:f8:e5:1c:c5:9f:52:e2:cf:0d:fa:12:5a:f0:49: 5f:83:b9:40:97:a2:8a:e6:7e:dc:2a:72:9a:18:aa:4f:7c:04: da:87:72:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cH4ivuixvRZdk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk M2QwMDA0OWQtOTAyNC00MmU1LWE2ZDktZTk0OGM0ZDQ4NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IG4TGJQRx5CdLpD6YCspkIeoRZP3HNzK3hU dR4pa84Er0hstW4nmJmxnO8lk4YuJbXhVLsoADzFntCQZPizxGTmwhUs0bfmtu7g qXtMNDxDFlHa0NdrOsCCcUW1Fe6hYSCKcotVbA57EFWMJPp+f2Vg2zBBqaGnkyEa E4ZbnzSzK6gCEbE61g6kGrsL3knjCcmK7xDXlBhXhY2jUuIiFz9RfOkz2f/S5KYa s0OD72Wmtmnsm7XbVfulQEK6eRMU86uvcJgI7++M2WctokXb3iJI4rR6TMG4LYp/ QkgkOfDWNJGMeCJlpnl1bsMem3+/wgF4UdF7FIvx2ZK23eSbdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAj478FTblPu4a0ehS3PcCwUgdq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvYjVkYzhhN2EtODFkYy0z ZWY3LTg0ZTktMmQ5YTM2ODhmYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJMqsLX0gm6F3lfcd1yeTkdG7AiwCKF1qjpjztkHTcXk00wLXu9NSfZ pBsw25e3PiPS6iSx0+5fa/tI16xd8vTKmeLmvz61L1wfJiLkWWKGA6IndRqpjB2a wD55hlJ08lKFl7qRrjd0smFZ17+2IjckzxsEfQnyP69nagQ0TmTLD5TKt7oB1R6C ILcpGzFidYTPnMTWV+SfMD37zlkuyIFVdFPUB4YsGYrM0Wqpl7j9713zgvd58M4B 3jx46kJgTpGHMY05hwcaHjw1LqqJoadbGdyy4/NusNvgZmn45RzFn1Lizw36Elrw SV+DuUCXoormftwqcpoYqk98BNqHcpM= -----END CERTIFICATE-----Generated at Sat Jun 13 14:34:08 2026 by rpki-client