$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa File: ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa (raw, json) Hash identifier: ZegAktVzIZPH6sNJrDJwrSGrMz6YcHfHDnLS112V2r8= Subject key identifier: 68:BE:A8:A4:12:EE:D7:BB:39:92:F4:89:CA:73:7C:CA:46:5F:84:AB Certificate issuer: /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Certificate serial: 010D0C9F4328584F497410ADF07513BE37E12800 Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394470 IP address blocks: 172.83.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:10:ad:f0:75:13:be:37:e1:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2fba6126-2eca-4d9f-adc4-2ce43ecb0712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:d8:6e:c5:a3:f1:d4:33:32:12:a7:9b:d0: af:64:e8:fd:a2:87:6e:45:55:1b:1a:09:8a:fa:d0: 96:0c:83:26:bc:f7:e2:23:87:fd:10:d8:5b:5a:ff: d1:b7:78:39:a6:02:f0:43:ea:d4:10:f9:20:8a:cb: 94:5c:5d:18:71:dc:28:a2:6e:65:6a:a8:34:2b:53: 0b:ae:33:13:56:57:18:0e:5b:14:7e:0a:74:42:91: c9:97:fd:19:b1:73:b5:79:7f:85:e6:e9:ce:43:0d: 5f:a7:84:e9:2b:5e:23:a5:df:8d:93:fa:f3:29:4b: 47:cc:f8:09:c5:1a:0e:ca:5b:37:c0:7a:b7:a3:4a: a2:b4:f7:f8:9a:48:c3:e3:08:fa:1a:4a:11:7b:19: 3b:bc:99:8d:de:54:ce:1a:ed:d2:fb:02:44:56:e0: 5d:27:85:3b:13:6f:a9:9c:5a:aa:6e:2c:43:c3:a0: 67:69:99:16:f4:34:30:67:75:7a:3c:37:ba:20:39: 1c:eb:79:9b:99:07:f1:5c:d7:1a:bb:5e:94:e0:da: f4:30:69:a8:bf:94:71:ae:14:04:f6:de:ef:87:48: 0a:47:fb:82:ef:7d:32:cd:f0:81:76:42:f0:de:9d: 64:ee:88:fb:21:4e:16:f0:c9:30:84:7e:c4:0e:68: 4e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BE:A8:A4:12:EE:D7:BB:39:92:F4:89:CA:73:7C:CA:46:5F:84:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl X509v3 Authority Key Identifier: keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer sbgp-ipAddrBlock: critical IPv4: 172.83.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c2:21:66:71:05:fd:36:21:99:9a:63:e6:44:05:50:18:ef: 19:be:09:09:da:55:3f:2b:5a:07:b0:bf:47:b7:9e:a9:a6:53: c2:f5:d5:04:4d:88:29:b7:69:e7:28:a9:af:98:fe:89:82:6c: da:8d:29:0c:d6:66:5f:28:82:fd:b3:91:de:45:d8:af:0e:42: 04:89:8e:33:dc:ea:00:72:33:8d:64:e1:3a:0f:08:c2:ae:e7: 52:75:e8:fb:78:3e:e2:25:8c:7b:c0:5a:09:d4:34:df:15:ec: dd:3c:bd:79:56:3e:4a:5d:9a:ae:0b:55:d5:20:ab:d3:37:b3: bc:03:6b:3f:98:68:63:f9:e6:33:b0:d5:6c:28:55:5d:52:f3: fd:d7:e8:e9:e0:fc:34:22:f8:74:42:9a:76:82:9f:4f:95:c3: fd:97:2b:45:94:63:1d:a8:86:ad:4a:b4:5d:74:bf:dc:34:1e: 65:09:7b:81:5d:27:3d:6a:df:f1:eb:e5:e3:a4:fe:45:76:dc: 71:25:8b:46:43:fa:28:39:f5:21:dc:a8:32:4e:2c:b3:b8:6c: d1:8c:0b:ba:f9:13:65:d5:b1:8c:a8:28:e4:a5:c5:7c:3f:2e: a1:23:a9:70:ff:45:d6:fa:61:59:74:90:bd:9e:d5:64:9c:66: cb:6b:f4:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBCt8HUTvjfhKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIyMTI0YTgtZDZiNi00ODNlLTkyZGUtNjdmOGQ3OTc1 Y2M0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmZiYTYxMjYtMmVjYS00ZDlmLWFkYzQtMmNlNDNlY2IwNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvfYbsWj8dQzMhKnm9CvZOj9ooduRVUbGgmK +tCWDIMmvPfiI4f9ENhbWv/Rt3g5pgLwQ+rUEPkgisuUXF0Ycdwoom5laqg0K1ML rjMTVlcYDlsUfgp0QpHJl/0ZsXO1eX+F5unOQw1fp4TpK14jpd+Nk/rzKUtHzPgJ xRoOyls3wHq3o0qitPf4mkjD4wj6GkoRexk7vJmN3lTOGu3S+wJEVuBdJ4U7E2+p nFqqbixDw6BnaZkW9DQwZ3V6PDe6IDkc63mbmQfxXNcau16U4Nr0MGmov5RxrhQE 9t7vh0gKR/uC730yzfCBdkLw3p1k7oj7IU4W8MkwhH7EDmhOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGi+qKQS7te7OZL0icpzfMpGX4SrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjIx MjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4ZDc5NzVjYzQvYWI3YWNhZTAtYjM2My0z NGI1LWFjZDEtMWNlYTdjOTM0YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGIyMTI0YTgtZDZiNi00ODNlLTky ZGUtNjdmOGQ3OTc1Y2M0LzhiMjEyNGE4LWQ2YjYtNDgzZS05MmRlLTY3ZjhkNzk3 NWNjNC5jcmwwHwYDVR0jBBgwFoAUKVokfqKJm+K6LEmBT1XmY0qa+ugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YjIxMjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4 ZDc5NzVjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFOWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7CIWZxBf02IZmaY+ZEBVAY7xm+CQnaVT8rWgewv0e3nqmmU8L11QRN iCm3aecoqa+Y/omCbNqNKQzWZl8ogv2zkd5F2K8OQgSJjjPc6gByM41k4ToPCMKu 51J16Pt4PuIljHvAWgnUNN8V7N08vXlWPkpdmq4LVdUgq9M3s7wDaz+YaGP55jOw 1WwoVV1S8/3X6Ong/DQi+HRCmnaCn0+Vw/2XK0WUYx2ohq1KtF10v9w0HmUJe4Fd Jz1q3/Hr5eOk/kV23HEli0ZD+ig59SHcqDJOLLO4bNGMC7r5E2XVsYyoKOSlxXw/ LqEjqXD/Rdb6YVl0kL2e1WScZstr9Og= -----END CERTIFICATE-----Generated at Sat Sep 26 08:00:02 2026 by rpki-client