$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa File: ae2d7c57-9385-33b3-8fce-32b111842f86.roa (raw, json) Hash identifier: 36+F6+WYxY5wvkqyoQF6vw2orOX3KdE1jaQKvGzReug= Subject key identifier: 51:9F:8A:2C:1A:82:FC:71:18:FC:36:CB:A0:88:24:8B:DB:F7:4B:42 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F4328584F4988A3A13BCFA192A34EB600 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2386 IP address blocks: 170.2.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:a3:a1:3b:cf:a1:92:a3:4e:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4cc9472-a344-46c3-96e9-5ed8052cb48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c9:6a:91:ec:6c:2d:84:9c:81:f2:83:cb:5e: 5b:9c:47:5d:e5:6d:10:13:3a:2c:a4:ef:c2:51:56: 79:23:11:ae:d1:d8:3b:0b:79:cf:ca:eb:34:37:c6: 61:55:84:ed:83:c0:eb:49:d5:de:32:25:4a:57:cd: 2f:7e:09:be:48:5e:6c:2c:90:d3:e3:f8:9b:b0:0a: d5:1f:2a:f9:fb:32:5e:bc:9f:b0:ef:8d:15:d0:44: b6:b8:ab:09:b5:a7:53:27:29:78:ef:d6:62:85:ba: fc:96:07:f7:04:d0:66:df:fc:b6:67:29:08:9e:21: 5a:0b:aa:c2:23:10:4b:e4:6e:7d:6c:43:96:d2:fd: 99:3d:b4:7e:d0:5e:c0:8a:b4:be:7c:a8:bc:17:01: 31:de:82:4c:34:53:6b:17:61:c8:5e:e0:f7:21:46: 06:d5:2e:d0:6d:07:2b:1f:f3:0c:1c:2e:8b:a3:90: 6f:05:0a:b0:23:5d:4a:41:c7:30:9b:20:88:9e:bd: bb:b9:4a:f3:1e:56:41:9d:92:ed:eb:2e:a1:b0:9a: a1:c0:d9:e1:be:29:93:1d:2d:76:54:83:55:8d:75: 05:82:e5:b9:8a:6b:04:c4:89:b8:85:2a:b2:1e:f0: 8b:41:68:d4:20:12:84:cd:90:5d:98:40:5c:f2:68: ef:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9F:8A:2C:1A:82:FC:71:18:FC:36:CB:A0:88:24:8B:DB:F7:4B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:27:ae:d4:e3:9e:35:8f:07:ab:8b:6b:ae:e8:5b:70:cd:4a: 7d:95:06:4a:ec:a5:f7:31:55:ba:80:e0:c3:70:77:81:d9:10: e5:d3:36:71:4e:92:10:8e:ba:10:dd:24:3e:2f:e9:24:32:2e: df:6d:4d:8a:af:d6:fe:c9:b9:f3:e4:be:d3:05:48:0a:4d:05: 0a:69:2b:38:9b:f7:0a:c2:da:56:84:eb:23:35:59:e4:ec:60: 44:63:e6:96:5a:4b:88:dc:7c:cf:21:6c:1d:a0:30:bb:6d:4f: 5e:00:43:df:18:24:07:10:0f:5b:58:0c:20:23:e7:38:92:64: cd:bc:ee:bf:24:a4:c0:cb:8d:d0:fa:11:ff:cf:6c:ed:5c:93: 6b:73:45:f8:9f:c9:dc:b1:f2:9f:de:46:e8:40:14:1e:d7:b0: f2:23:dc:83:e6:1d:65:df:b4:5d:d6:80:c0:2c:ef:c5:4c:0e: ea:80:d0:5e:b0:7f:3b:0b:3d:58:bf:e7:91:c8:ed:f0:1b:95: 31:5b:f9:7f:3d:fc:e6:5f:ac:0e:d1:ed:9c:ee:7e:cb:9d:b2: 05:c6:d2:19:04:a5:e9:11:c3:71:cf:26:5c:7a:5e:e7:81:92: 32:82:d6:36:2c:d9:f1:c2:03:e3:ed:b1:ec:06:0b:69:53:d2: 75:08:21:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiKOhO8+hkqNOtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjRjYzk0NzItYTM0NC00NmMzLTk2ZTktNWVkODA1MmNiNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgslqkexsLYScgfKDy15bnEdd5W0QEzospO/C UVZ5IxGu0dg7C3nPyus0N8ZhVYTtg8DrSdXeMiVKV80vfgm+SF5sLJDT4/ibsArV Hyr5+zJevJ+w740V0ES2uKsJtadTJyl479Zihbr8lgf3BNBm3/y2ZykIniFaC6rC IxBL5G59bEOW0v2ZPbR+0F7AirS+fKi8FwEx3oJMNFNrF2HIXuD3IUYG1S7QbQcr H/MMHC6Lo5BvBQqwI11KQccwmyCInr27uUrzHlZBnZLt6y6hsJqhwNnhvimTHS12 VINVjXUFguW5imsExIm4hSqyHvCLQWjUIBKEzZBdmEBc8mjv7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGfiiwagvxxGPw2y6CIJIvb90tCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYWUyZDdjNTctOTM4NS0z M2IzLThmY2UtMzJiMTExODQyZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAnrtTjnjWPB6uLa67oW3DNSn2VBkrspfcxVbqA4MNwd4HZEOXTNnFO khCOuhDdJD4v6SQyLt9tTYqv1v7JufPkvtMFSApNBQppKzib9wrC2laE6yM1WeTs YERj5pZaS4jcfM8hbB2gMLttT14AQ98YJAcQD1tYDCAj5ziSZM287r8kpMDLjdD6 Ef/PbO1ck2tzRfifydyx8p/eRuhAFB7XsPIj3IPmHWXftF3WgMAs78VMDuqA0F6w fzsLPVi/55HI7fAblTFb+X89/OZfrA7R7ZzufsudsgXG0hkEpekRw3HPJlx6XueB kjKC1jYs2fHCA+PtsewGC2lT0nUIIcs= -----END CERTIFICATE-----Generated at Sat Sep 26 03:23:59 2026 by rpki-client