$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b7a140f-1bff-3d40-8ab7-e7b5f7b06c7a.roa File: 0b7a140f-1bff-3d40-8ab7-e7b5f7b06c7a.roa (raw, json) Hash identifier: xq98iOLlOkRmB+wrsCib26yc9SnllfJ9LnumL8t8Qac= Subject key identifier: F4:92:DC:A2:BC:CB:11:77:46:53:CF:C3:76:76:14:21:AF:68:38:D9 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584EC9071D407A1CD45033A63100 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b7a140f-1bff-3d40-8ab7-e7b5f7b06c7a.roa Signing time: Mon 10 Aug 2026 01:00:12 +0000 ROA not before: Mon 10 Aug 2026 01:00:12 +0000 ROA not after: Sun 08 Nov 2026 02:00:12 +0000 asID: 27176 IP address blocks: 172.120.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c9:07:1d:40:7a:1c:d4:50:33:a6:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 10 01:00:12 2026 GMT Not After : Nov 8 02:00:12 2026 GMT Subject: CN=0a5c5293-4026-459f-9b32-90e9768123a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c2:07:71:c3:f3:99:12:d6:93:8f:18:19:14: 47:05:5a:79:ff:5d:94:c4:1d:a2:5a:fb:f7:36:48: 7f:02:4e:9d:91:6b:00:fa:60:f1:ec:3c:2b:62:bc: 1c:40:1f:5a:76:bf:df:8a:95:78:c6:08:e5:92:ec: 1c:d6:50:1a:74:ea:21:1a:a1:f6:60:2c:97:c0:3e: a1:55:78:29:56:ca:8f:e8:f8:8a:f9:ca:04:e2:3c: df:b2:e8:11:23:96:33:59:24:6c:64:7f:b4:6c:34: 9b:ed:ed:e1:41:c4:21:56:52:07:f1:73:5d:45:f5: 2a:fe:6c:39:88:be:f7:6a:bb:6f:02:b8:d5:49:ef: df:ea:fb:8b:2d:78:e9:20:01:76:c9:ae:cf:35:ca: 63:3e:c8:1d:e9:99:23:43:85:01:c1:6f:af:b1:3a: 16:db:19:d5:35:ec:29:5b:98:ce:d2:5a:34:8f:86: 01:dc:b9:6e:00:a9:a2:31:54:a1:43:2d:04:0c:7d: fc:84:2a:37:43:9f:14:5e:d1:e1:7a:84:d3:03:44: 60:95:21:86:d4:91:d6:c8:0f:a2:7f:d2:d1:5f:28: dd:82:30:32:63:04:1e:fd:22:35:90:8c:b1:3a:71: 83:f3:96:56:46:1a:f9:17:b2:ba:c7:8b:b6:cd:25: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:92:DC:A2:BC:CB:11:77:46:53:CF:C3:76:76:14:21:AF:68:38:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b7a140f-1bff-3d40-8ab7-e7b5f7b06c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:db:f1:52:29:4e:aa:83:f7:17:ae:0f:e7:35:e5:db:37:0b: a0:7e:7f:94:af:58:73:a5:1a:0d:d8:72:15:eb:b1:96:0d:01: e8:5f:17:7d:c3:e2:10:1d:c6:4b:72:de:ad:39:22:1e:74:e0: 4f:e7:57:d5:1e:fc:6d:ba:de:41:5d:02:ab:0d:1b:26:95:61: 9a:b6:6b:f6:b0:a5:04:01:f1:34:67:f4:8f:35:cf:47:00:bb: 7d:d6:27:51:bc:8c:6d:de:55:f6:25:be:2a:af:45:08:52:14: 3f:02:ef:72:38:69:19:cd:c9:ae:70:9f:fc:bb:71:c5:63:29: 94:b5:25:8c:bc:89:00:39:8c:b3:c3:75:61:ee:27:79:06:17: a5:c9:f4:a3:21:95:17:9d:0e:0d:2a:fe:a7:42:68:a1:ef:91: ec:bf:c5:8e:63:bf:2f:be:2c:92:e0:ff:9d:67:4f:60:64:1c: ae:73:98:c3:2e:cd:69:4d:0f:23:12:84:bd:8a:83:85:81:9f: 09:3a:16:5d:ec:d5:cf:06:eb:40:6a:d2:57:6a:02:1c:d1:3b: 1e:cd:1c:7d:5a:bd:7f:b2:4a:17:06:4d:f4:d7:34:d0:cb:4e: d4:fd:e0:88:e0:8e:cd:c4:7f:30:e3:ab:a4:6f:58:6d:87:7c: 64:a5:28:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7JBx1AehzUUDOmMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk MGE1YzUyOTMtNDAyNi00NTlmLTliMzItOTBlOTc2ODEyM2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcIHccPzmRLWk48YGRRHBVp5/12UxB2iWvv3 Nkh/Ak6dkWsA+mDx7DwrYrwcQB9adr/fipV4xgjlkuwc1lAadOohGqH2YCyXwD6h VXgpVsqP6PiK+coE4jzfsugRI5YzWSRsZH+0bDSb7e3hQcQhVlIH8XNdRfUq/mw5 iL73artvArjVSe/f6vuLLXjpIAF2ya7PNcpjPsgd6ZkjQ4UBwW+vsToW2xnVNewp W5jO0lo0j4YB3LluAKmiMVShQy0EDH38hCo3Q58UXtHheoTTA0RglSGG1JHWyA+i f9LRXyjdgjAyYwQe/SI1kIyxOnGD85ZWRhr5F7K6x4u2zSVg0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSS3KK8yxF3RlPPw3Z2FCGvaDjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGI3YTE0MGYtMWJmZi0z ZDQwLThhYjctZTdiNWY3YjA2YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3b8VIpTqqD9xeuD+c15ds3C6B+f5SvWHOlGg3YchXrsZYNAehfF33D 4hAdxkty3q05Ih504E/nV9Ue/G263kFdAqsNGyaVYZq2a/awpQQB8TRn9I81z0cA u33WJ1G8jG3eVfYlviqvRQhSFD8C73I4aRnNya5wn/y7ccVjKZS1JYy8iQA5jLPD dWHuJ3kGF6XJ9KMhlRedDg0q/qdCaKHvkey/xY5jvy++LJLg/51nT2BkHK5zmMMu zWlNDyMShL2Kg4WBnwk6Fl3s1c8G60Bq0ldqAhzROx7NHH1avX+yShcGTfTXNNDL TtT94Ijgjs3EfzDjq6RvWG2HfGSlKIQ= -----END CERTIFICATE-----Generated at Tue Aug 25 10:59:33 2026 by rpki-client