$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa File: 9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa (raw, json) Hash identifier: onvsbgisBeWE3g8BYqAipmOnRcd2sJmW9dQmBjJGA3I= Subject key identifier: D6:ED:35:51:0D:DB:F6:15:72:67:96:51:50:07:3B:AC:C9:D8:94:58 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F4328584F49763BDF0F2892E36E87D920 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63306 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:3b:df:0f:28:92:e3:6e:87:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b5beb883-fe0d-4dc4-98d8-00d2bac04e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:8e:22:6e:62:21:cc:0f:d4:bf:5d:62:b7: 6c:3c:20:b1:df:83:3f:d5:c9:ff:a0:41:21:43:7e: a2:85:e5:72:5a:b3:43:d7:1b:b4:b2:89:b8:dc:de: 28:d3:d2:7c:ff:4a:7a:40:5a:eb:25:68:db:87:fa: 85:bc:32:56:64:04:69:65:9f:17:f2:03:3b:06:d9: 1d:c9:ad:53:88:85:83:03:75:cc:7c:8a:4d:40:a5: eb:4a:9e:92:55:62:fd:47:fd:0c:9a:97:51:36:39: d0:e2:9a:67:77:29:6c:a7:58:11:74:39:04:f8:08: 1b:47:4e:5d:2d:63:1d:8f:fb:a8:6e:ad:79:aa:b2: f3:c4:1e:3c:cb:3c:a2:50:59:61:4a:3a:47:05:6c: 3f:43:01:a0:6f:c3:29:6d:bd:9a:08:73:50:79:40: 58:67:02:60:f3:97:29:b5:9e:5a:f3:36:0a:9f:71: 63:41:1f:29:fb:ae:cb:09:af:17:d7:43:92:f7:e9: b8:2a:d2:07:bb:ad:13:41:33:67:05:7e:19:01:9b: 55:1e:63:40:84:f3:b1:67:8e:81:47:98:29:8f:d3: 2b:bf:f0:40:a2:7b:c9:d0:32:fe:15:9e:ca:8c:4f: 92:82:cc:5b:8d:11:43:34:ce:08:3d:6c:e4:05:c5: b1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:ED:35:51:0D:DB:F6:15:72:67:96:51:50:07:3B:AC:C9:D8:94:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:80:a7:c9:b5:69:0f:c2:dc:a1:f6:6f:ac:9a:32:1e:51:57: 5a:3a:0a:6c:40:43:3b:84:42:94:6a:b4:41:36:4e:44:f0:0e: 40:a4:28:72:23:50:df:34:72:1f:f6:9d:70:83:8e:09:08:85: 69:68:75:17:aa:c0:32:af:5f:43:7b:15:0e:1c:55:89:cc:80: 89:07:25:2e:2a:98:40:70:f9:e1:23:fb:48:8d:35:90:1d:37: d8:4b:b1:c4:c5:d1:b0:dc:35:01:63:32:e4:51:16:da:d3:09: 28:c5:93:ef:5f:70:7c:08:e9:74:54:77:c5:29:46:71:e6:89: 43:dc:b8:58:78:2d:5b:31:3e:93:33:9c:65:3b:cb:2a:fa:64: 23:4e:e2:c8:9d:04:42:6c:fe:27:de:4c:5a:25:45:61:8e:95: f7:26:02:b5:5b:c3:3c:5f:13:26:66:78:00:82:25:19:29:05: d4:e9:a8:16:01:3e:1a:d4:c2:33:d2:ff:ec:69:eb:44:4c:00: 54:3b:2d:6a:b3:a5:53:86:98:63:ee:c5:fd:ec:60:be:0f:1f: b4:72:d6:83:28:86:16:3a:ff:d5:b6:ab:9e:1b:1f:c4:70:8f: ef:b2:8f:a6:5c:cb:4d:a1:43:84:f0:d6:3a:94:a8:66:43:0b: e1:d5:4a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdjvfDyiS426H2SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjViZWI4ODMtZmUwZC00ZGM0LTk4ZDgtMDBkMmJhYzA0ZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGSOIm5iIcwP1L9dYrdsPCCx34M/1cn/oEEh Q36iheVyWrND1xu0som43N4o09J8/0p6QFrrJWjbh/qFvDJWZARpZZ8X8gM7Btkd ya1TiIWDA3XMfIpNQKXrSp6SVWL9R/0MmpdRNjnQ4ppndylsp1gRdDkE+AgbR05d LWMdj/uobq15qrLzxB48yzyiUFlhSjpHBWw/QwGgb8Mpbb2aCHNQeUBYZwJg85cp tZ5a8zYKn3FjQR8p+67LCa8X10OS9+m4KtIHu60TQTNnBX4ZAZtVHmNAhPOxZ46B R5gpj9Mrv/BAonvJ0DL+FZ7KjE+SgsxbjRFDNM4IPWzkBcWxAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbtNVEN2/YVcmeWUVAHO6zJ2JRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvOWJhZTQ1YWUtY2JjMy0z ZDgxLTg3MmMtN2Q2NTU4ZDAxNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeAp8m1aQ/C3KH2b6yaMh5RV1o6CmxAQzuEQpRqtEE2TkTwDkCkKHIj UN80ch/2nXCDjgkIhWlodReqwDKvX0N7FQ4cVYnMgIkHJS4qmEBw+eEj+0iNNZAd N9hLscTF0bDcNQFjMuRRFtrTCSjFk+9fcHwI6XRUd8UpRnHmiUPcuFh4LVsxPpMz nGU7yyr6ZCNO4sidBEJs/ifeTFolRWGOlfcmArVbwzxfEyZmeACCJRkpBdTpqBYB PhrUwjPS/+xp60RMAFQ7LWqzpVOGmGPuxf3sYL4PH7Ry1oMohhY6/9W2q54bH8Rw j++yj6Zcy02hQ4Tw1jqUqGZDC+HVSkE= -----END CERTIFICATE-----Generated at Sat Oct 31 15:22:43 2026 by rpki-client