$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09ca74f3-89b9-3432-b887-9997f3730a52.roa File: 09ca74f3-89b9-3432-b887-9997f3730a52.roa (raw, json) Hash identifier: hStCpeVgIKEbqZ/Hunr6Z2J8zbQTpqu2uy6yz4Wooyo= Subject key identifier: 43:94:74:9B:46:E5:98:21:DF:60:AF:87:4C:CD:C2:9A:83:48:E4:F5 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F4973118346B6696330308D80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09ca74f3-89b9-3432-b887-9997f3730a52.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398781 IP address blocks: 172.120.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:11:83:46:b6:69:63:30:30:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ef1750ef-2d68-404a-8fb5-324e540d33b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:85:1d:8a:6e:05:f9:a1:f7:83:c4:9b:d8: 64:39:58:72:95:22:84:9d:99:5a:5f:0b:a5:a5:2b: 29:08:fc:d2:58:bf:70:71:c6:52:ba:1f:44:ec:f8: 09:d3:f3:b2:a5:79:b2:81:c3:16:8c:3c:cb:d0:71: 29:af:db:98:a7:fb:cb:2f:77:c9:e7:99:ce:b5:33: f0:cc:9f:17:9b:6c:7f:be:2c:00:f1:d9:c3:a3:37: 9d:96:9e:ea:83:8f:f9:9b:25:31:e7:b2:b1:e6:88: fc:44:9f:01:c1:89:5d:0a:af:3d:10:2d:78:45:19: 64:21:23:26:1b:5a:60:96:d6:48:0c:4a:28:84:61: 23:41:55:79:e4:29:79:16:e7:a7:7f:27:64:09:95: c2:48:41:c4:2b:de:c3:ee:d9:90:a9:62:a5:6a:01: 11:8b:a6:6e:6f:0c:6c:91:c4:e7:6b:d6:74:cf:6d: 5c:c9:76:11:b2:1f:2d:51:c0:1a:b6:25:26:48:91: 4f:92:bc:6d:be:cf:81:7b:76:40:b6:0f:f9:d6:af: f8:2e:11:06:c6:f2:ef:e1:9a:1c:78:1d:59:31:01: 12:df:ca:89:2d:52:38:4f:33:91:d3:51:77:9d:be: b5:71:1b:e6:bb:f8:7e:96:29:f6:b3:2f:01:4f:ba: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:94:74:9B:46:E5:98:21:DF:60:AF:87:4C:CD:C2:9A:83:48:E4:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09ca74f3-89b9-3432-b887-9997f3730a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:40:43:cb:46:c0:18:9e:a9:d2:f1:b1:21:6e:06:13:2d:cc: 4a:77:23:6c:de:78:6e:d1:be:fa:f4:8d:35:5d:0e:19:8b:78: 35:18:57:c8:46:cd:ab:be:21:d8:e7:83:b9:be:74:e8:87:e6: d4:a0:8e:86:9c:c1:d1:61:96:2a:2f:20:83:70:c4:93:1f:5d: bf:e6:2c:48:c2:29:4a:23:13:0a:ca:8e:11:f7:53:22:a1:35: 44:29:9e:29:35:e5:dd:cc:83:42:93:c6:a2:f2:e8:2b:ad:5a: 5e:3c:17:1a:a2:2d:ca:74:36:83:50:bb:ce:27:be:7e:f5:c0: 73:b0:1f:f8:6c:0d:e8:91:3e:a6:60:b1:b9:f0:b5:03:1d:a1: aa:17:44:a4:9d:17:c9:76:58:d9:63:c5:79:16:70:0c:ae:47: fa:b1:23:06:8a:a8:53:c2:11:c2:43:75:03:59:ab:ee:cf:dd: ae:a2:99:c0:ee:b6:91:dd:23:bc:c2:71:9e:fa:03:b6:b9:1b: 96:16:94:56:7b:2b:66:5d:7a:42:fc:e2:f4:c7:a5:47:38:ab: 46:f8:8b:61:41:6a:a1:a5:97:b7:59:84:bc:1e:7e:f3:6a:fe: 0d:26:c0:8e:78:bc:20:63:27:91:e2:73:f6:67:10:b6:56:ac: 4f:04:b7:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcxGDRrZpYzAwjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWYxNzUwZWYtMmQ2OC00MDRhLThmYjUtMzI0ZTU0MGQzM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXmFHYpuBfmh94PEm9hkOVhylSKEnZlaXwul pSspCPzSWL9wccZSuh9E7PgJ0/OypXmygcMWjDzL0HEpr9uYp/vLL3fJ55nOtTPw zJ8Xm2x/viwA8dnDozedlp7qg4/5myUx57Kx5oj8RJ8BwYldCq89EC14RRlkISMm G1pgltZIDEoohGEjQVV55Cl5FuenfydkCZXCSEHEK97D7tmQqWKlagERi6Zubwxs kcTna9Z0z21cyXYRsh8tUcAatiUmSJFPkrxtvs+Be3ZAtg/51q/4LhEGxvLv4Zoc eB1ZMQES38qJLVI4TzOR01F3nb61cRvmu/h+lin2sy8BT7oySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOUdJtG5Zgh32Cvh0zNwpqDSOT1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDljYTc0ZjMtODliOS0z NDMyLWI4ODctOTk5N2YzNzMwYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhAQ8tGwBieqdLxsSFuBhMtzEp3I2zeeG7Rvvr0jTVdDhmLeDUYV8hG zau+Idjng7m+dOiH5tSgjoacwdFhliovIINwxJMfXb/mLEjCKUojEwrKjhH3UyKh NUQpnik15d3Mg0KTxqLy6CutWl48FxqiLcp0NoNQu84nvn71wHOwH/hsDeiRPqZg sbnwtQMdoaoXRKSdF8l2WNljxXkWcAyuR/qxIwaKqFPCEcJDdQNZq+7P3a6imcDu tpHdI7zCcZ76A7a5G5YWlFZ7K2ZdekL84vTHpUc4q0b4i2FBaqGll7dZhLwefvNq /g0mwI54vCBjJ5Hic/ZnELZWrE8Etxg= -----END CERTIFICATE-----Generated at Fri Oct 9 21:51:42 2026 by rpki-client