$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa File: ae2d7c57-9385-33b3-8fce-32b111842f86.roa (raw, json) Hash identifier: rkrlhvz60u+YvnEP5T3IaFgCRWlqq01Duih2qYs/YEY= Subject key identifier: A2:99:70:00:FE:E3:67:EB:18:14:CE:88:49:96:D2:1E:BC:25:06:55 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F4328584DCF2B1A64EDC16095C4182EC0 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 2386 IP address blocks: 170.2.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:1a:64:ed:c1:60:95:c4:18:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=58bab84b-3948-480f-92ea-1f9f06a9d942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:83:ed:ac:ff:0b:f8:40:4f:09:17:7f:dc: 03:b6:18:c9:b4:1c:af:87:75:8b:44:e1:40:58:c4: 0f:ea:15:a7:5c:ba:55:75:ed:25:fc:dd:49:8a:5c: 06:f7:99:18:dd:eb:2f:68:59:c5:fe:8b:d0:03:75: 50:69:9e:72:88:b0:21:e4:a8:87:bd:ae:ba:24:33: 33:1c:e2:b7:b3:96:c5:c0:49:5f:df:ee:67:f1:02: 36:ad:1c:12:b9:f1:bb:4f:51:db:ab:34:29:a6:af: 92:e7:da:d3:c9:ec:2b:17:c4:58:67:6e:89:6f:fb: 96:43:05:a5:88:f5:2b:c7:ec:ad:fe:63:2a:19:df: 82:27:4d:4f:c8:31:ba:6a:cb:e4:23:5f:03:40:e2: d1:a6:d9:f7:40:5d:7c:04:65:52:bc:a3:b2:30:27: c7:b1:eb:01:84:62:3d:92:46:c0:14:98:40:9a:4c: c9:b3:d0:3c:98:6a:0a:5b:40:7a:e7:14:c2:00:eb: 5d:77:eb:c7:19:3a:73:dd:1a:fc:e1:7d:0a:0c:d3: 94:3c:1b:38:a9:49:07:2d:31:2e:81:e0:7c:d7:37: 43:2b:19:3d:01:f4:15:78:0a:8c:10:16:36:69:1c: 3b:cd:09:d0:4e:b8:99:c3:26:d0:ac:46:9e:3f:3f: 20:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:99:70:00:FE:E3:67:EB:18:14:CE:88:49:96:D2:1E:BC:25:06:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ae2d7c57-9385-33b3-8fce-32b111842f86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: 170.2.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:54:91:cc:63:06:a5:4e:20:d5:76:24:f3:3a:b8:05:67:37: ca:93:73:87:ff:c7:12:26:70:63:01:62:ee:cc:27:e8:4b:02: 87:33:23:b9:e8:f0:39:0b:53:9c:e3:70:06:7c:26:0e:ca:0d: a4:60:c4:73:ef:bb:3a:67:70:36:ca:20:b3:2f:f1:85:79:a7: af:80:fe:db:24:34:e5:d2:09:2a:1f:92:7d:83:69:79:37:06: e5:45:02:df:1d:f2:55:52:e6:34:f1:30:f9:64:c6:b1:92:48: b8:77:d1:26:39:da:0e:46:d6:8f:ca:04:88:97:7c:19:7d:14: 07:83:73:45:49:56:74:18:74:98:e4:18:1a:26:b3:08:84:8a: 85:2a:9c:fa:d0:f8:2d:cc:14:f5:87:1b:27:86:30:66:a0:a6: 42:6e:6d:48:71:80:a4:7a:3b:3a:20:2d:b0:d9:73:06:27:47: db:16:1e:3d:03:aa:43:97:a5:8f:1c:2c:3f:9f:20:a2:1d:8e: 28:35:a7:60:76:9a:ed:07:28:1c:22:a3:00:4e:b0:5d:4e:d0: ac:ed:74:7c:de:6c:5e:87:da:3e:25:27:af:cd:be:24:65:ca: 3c:59:f3:87:a6:bc:c8:5d:be:ff:62:4f:98:12:35:18:f9:32: fd:14:1e:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKxpk7cFglcQYLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk NThiYWI4NGItMzk0OC00ODBmLTkyZWEtMWY5ZjA2YTlkOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpOD7az/C/hATwkXf9wDthjJtByvh3WLROFA WMQP6hWnXLpVde0l/N1JilwG95kY3esvaFnF/ovQA3VQaZ5yiLAh5KiHva66JDMz HOK3s5bFwElf3+5n8QI2rRwSufG7T1HbqzQppq+S59rTyewrF8RYZ26Jb/uWQwWl iPUrx+yt/mMqGd+CJ01PyDG6asvkI18DQOLRptn3QF18BGVSvKOyMCfHsesBhGI9 kkbAFJhAmkzJs9A8mGoKW0B65xTCAOtdd+vHGTpz3Rr84X0KDNOUPBs4qUkHLTEu geB81zdDKxk9AfQVeAqMEBY2aRw7zQnQTriZwybQrEaePz8gXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKZcAD+42frGBTOiEmW0h68JQZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYWUyZDdjNTctOTM4NS0z M2IzLThmY2UtMzJiMTExODQyZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5UkcxjBqVOINV2JPM6uAVnN8qTc4f/xxImcGMBYu7MJ+hLAoczI7no 8DkLU5zjcAZ8Jg7KDaRgxHPvuzpncDbKILMv8YV5p6+A/tskNOXSCSofkn2DaXk3 BuVFAt8d8lVS5jTxMPlkxrGSSLh30SY52g5G1o/KBIiXfBl9FAeDc0VJVnQYdJjk GBomswiEioUqnPrQ+C3MFPWHGyeGMGagpkJubUhxgKR6OzogLbDZcwYnR9sWHj0D qkOXpY8cLD+fIKIdjig1p2B2mu0HKBwiowBOsF1O0KztdHzebF6H2j4lJ6/NviRl yjxZ84emvMhdvv9iT5gSNRj5Mv0UHoU= -----END CERTIFICATE-----Generated at Wed May 13 05:39:35 2026 by rpki-client