$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09843e7b-0454-32be-aec5-632a487360e8.roa File: 09843e7b-0454-32be-aec5-632a487360e8.roa (raw, json) Hash identifier: 3bK+D3TJNRRuaKudWGyuRpSIPSer8qACqws7vTl6j6E= Subject key identifier: CE:CE:B8:D5:08:2A:C2:85:5E:A9:B9:A8:D5:A9:73:F1:E6:76:52:50 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584DEF3BB32365B38AAD44EB1900 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09843e7b-0454-32be-aec5-632a487360e8.roa Signing time: Sun 24 May 2026 00:40:03 +0000 ROA not before: Sun 24 May 2026 00:40:03 +0000 ROA not after: Sat 22 Aug 2026 00:40:03 +0000 asID: 44559 IP address blocks: 172.120.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:3b:b3:23:65:b3:8a:ad:44:eb:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 24 00:40:03 2026 GMT Not After : Aug 22 00:40:03 2026 GMT Subject: CN=3c9b40ab-fd13-4b6a-97f8-335183e8a8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4e:cb:33:f8:f4:44:31:d8:d8:16:b6:af:f9: 0f:2e:00:6f:f8:95:08:65:f7:b1:cc:c0:be:54:d7: e7:61:bb:1c:4d:9f:e7:9e:03:b6:97:45:45:12:34: be:ab:22:1f:9f:48:f9:c8:73:42:ed:44:02:f5:3e: 2e:f9:5f:26:b4:42:bc:55:b2:d2:04:a5:fe:ff:2f: 5b:e3:58:77:d5:37:83:c9:93:64:5c:dc:f6:ee:2f: 62:c7:9d:b7:94:78:ee:36:18:36:a1:d0:6c:d3:2d: de:f7:d5:f1:d7:6e:70:3e:0f:9e:61:17:dc:c0:34: 11:89:20:09:26:c2:28:49:cc:16:11:92:3d:23:85: f5:5f:09:b8:63:99:41:ed:b9:df:3f:40:2d:c4:8c: 02:79:2c:ba:af:2b:8c:82:0e:2a:14:fc:f7:20:74: 07:40:08:7d:70:93:c7:7a:70:c2:89:4a:c4:32:cf: 7e:f5:f0:a3:1c:39:2f:61:60:ab:79:4b:d3:45:c0: 01:cd:62:71:f7:be:09:29:86:43:b4:c7:eb:b8:40: 2a:81:e6:2e:6e:1a:55:f1:d3:90:1f:d3:9a:51:0a: 31:8b:88:20:01:20:a7:c2:a6:d8:c5:c9:c8:e5:f9: a4:96:dc:8c:c9:b6:54:f4:9c:50:02:a9:7b:09:1e: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CE:B8:D5:08:2A:C2:85:5E:A9:B9:A8:D5:A9:73:F1:E6:76:52:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09843e7b-0454-32be-aec5-632a487360e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:28:bd:d7:0c:bb:3d:97:12:12:f4:b8:fa:e5:41:59:23:cd: b0:3a:f5:6b:63:a7:6b:40:58:8e:d5:3c:58:69:02:5d:eb:af: 02:16:36:b5:3d:07:9c:65:56:c4:4a:41:01:80:19:a6:8f:31: 5f:8b:c4:d4:44:33:d8:bc:9c:f8:51:a5:48:86:da:67:5f:49: 1e:9d:52:3e:66:3e:2c:44:a9:dd:39:18:32:57:24:89:4c:79: 19:3a:d8:cf:a7:24:86:14:61:ef:fa:c7:a9:19:97:c8:85:ab: 26:cc:47:3b:84:27:19:2a:d5:6b:41:7d:ec:06:a7:ad:68:20: 31:15:0e:d0:34:60:b9:6f:b2:6a:c5:61:c9:61:dc:6a:43:26: 03:e8:0e:b4:3d:c0:bb:3f:5c:18:9f:0e:7c:82:f7:00:2c:a9: 70:bc:77:59:f9:ba:6e:03:5a:c8:20:87:03:2d:67:b8:d9:d8: 8e:d4:59:56:57:a0:4e:fb:63:f1:5c:76:60:95:a1:d1:b4:e8: 4d:8b:f4:74:65:20:68:cc:a5:8b:1b:be:8a:fe:e2:df:99:4f: 5a:60:41:9c:48:95:16:3a:b5:d5:54:a7:d0:68:e7:8d:76:19: b3:72:5d:96:46:18:a3:89:ae:2f:d4:95:94:87:a4:7f:a4:e8: 2b:8d:6c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vO7MjZbOKrUTrGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDUyNDAwNDAwM1oXDTI2MDgyMjAwNDAwM1owLzEtMCsGA1UEAxMk M2M5YjQwYWItZmQxMy00YjZhLTk3ZjgtMzM1MTgzZThhOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7k7LM/j0RDHY2Ba2r/kPLgBv+JUIZfexzMC+ VNfnYbscTZ/nngO2l0VFEjS+qyIfn0j5yHNC7UQC9T4u+V8mtEK8VbLSBKX+/y9b 41h31TeDyZNkXNz27i9ix523lHjuNhg2odBs0y3e99Xx125wPg+eYRfcwDQRiSAJ JsIoScwWEZI9I4X1Xwm4Y5lB7bnfP0AtxIwCeSy6ryuMgg4qFPz3IHQHQAh9cJPH enDCiUrEMs9+9fCjHDkvYWCreUvTRcABzWJx974JKYZDtMfruEAqgeYubhpV8dOQ H9OaUQoxi4ggASCnwqbYxcnI5fmkltyMybZU9JxQAql7CR7gnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7OuNUIKsKFXqm5qNWpc/HmdlJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDk4NDNlN2ItMDQ1NC0z MmJlLWFlYzUtNjMyYTQ4NzM2MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsovdcMuz2XEhL0uPrlQVkjzbA69Wtjp2tAWI7VPFhpAl3rrwIWNrU9 B5xlVsRKQQGAGaaPMV+LxNREM9i8nPhRpUiG2mdfSR6dUj5mPixEqd05GDJXJIlM eRk62M+nJIYUYe/6x6kZl8iFqybMRzuEJxkq1WtBfewGp61oIDEVDtA0YLlvsmrF Yclh3GpDJgPoDrQ9wLs/XBifDnyC9wAsqXC8d1n5um4DWsgghwMtZ7jZ2I7UWVZX oE77Y/FcdmCVodG06E2L9HRlIGjMpYsbvor+4t+ZT1pgQZxIlRY6tdVUp9Bo5412 GbNyXZZGGKOJri/UlZSHpH+k6CuNbFo= -----END CERTIFICATE-----Generated at Tue May 26 05:32:15 2026 by rpki-client