$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2085c6f8-633f-3c59-a73f-c4624fc22745.roa File: 2085c6f8-633f-3c59-a73f-c4624fc22745.roa (raw, json) Hash identifier: NFuItr0PU5UCB+brfNqdDz5JPyi5f9LFLo1l7m35l9U= Subject key identifier: 64:53:5D:71:8A:C1:EE:AA:2E:DB:AB:A6:F9:35:92:74:EE:DC:43:13 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584E059B525FD3F67367ACD5BE80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2085c6f8-633f-3c59-a73f-c4624fc22745.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 44559 IP address blocks: 172.120.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:52:5f:d3:f6:73:67:ac:d5:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=6acd76d8-2c2e-40ba-9f95-7336a79c68c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:59:c8:bf:27:2f:89:c2:0b:e5:f4:46:02:42: 0a:b4:1f:7f:c9:1c:8b:0f:a1:68:0e:2b:ea:03:aa: 54:98:c8:4f:a7:d5:7d:a8:44:08:a9:6b:61:eb:e8: 1b:60:a9:66:04:2c:31:ea:a9:90:10:61:81:fc:f8: 60:3e:88:7f:da:ec:21:a2:5d:f0:87:ff:9b:8b:15: 71:d8:90:f5:a6:09:d9:ad:87:1e:8f:df:15:81:6f: d7:b9:18:a1:90:5a:74:14:db:d3:1d:80:1e:e5:a7: 4d:db:9c:28:88:77:a0:fe:eb:93:a0:8a:a3:59:0d: 3c:47:ac:50:00:9f:6d:50:23:96:90:dd:32:44:f3: 48:4d:64:b5:40:97:3b:31:11:53:32:66:f7:a5:b8: 8a:ef:72:42:8f:de:a6:87:c1:9f:30:c5:71:a8:ba: de:0d:74:70:ae:ae:1f:75:c3:93:b2:4c:49:14:fc: e9:52:4c:dc:cb:95:96:40:c1:a7:31:f5:51:c1:1e: 95:63:ad:65:2c:77:23:b5:a1:ec:78:e3:18:f6:86: ba:7e:42:5f:d2:3f:85:01:de:b8:e2:ed:dd:04:fc: 1c:2b:93:16:8e:a6:80:87:c3:e4:67:aa:ce:50:53: 21:cd:63:42:b8:18:57:d7:93:13:09:95:0b:08:e3: e8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:53:5D:71:8A:C1:EE:AA:2E:DB:AB:A6:F9:35:92:74:EE:DC:43:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2085c6f8-633f-3c59-a73f-c4624fc22745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4c:f4:77:20:54:5f:b9:eb:70:bf:56:8e:51:27:51:50:9b: 8f:85:cc:2f:44:90:51:f7:a1:5e:7b:e6:93:db:e7:63:22:c2: b9:89:9a:e6:92:62:bc:f1:69:e9:e5:b0:52:eb:d5:82:1a:4a: e0:31:05:6c:96:23:c2:b7:97:3d:57:85:f8:c0:de:d2:03:6b: 0c:82:4b:ba:68:0f:25:98:ca:0e:5b:e1:be:bb:0d:f8:8a:13: 51:80:f2:9d:f3:c2:47:ea:11:b2:df:70:03:86:4e:f7:97:e5: bb:09:1a:c2:0e:9c:db:28:22:f9:a6:3f:a4:19:22:6b:d0:fb: 73:0b:7a:a8:87:b3:4f:45:ed:40:3b:6d:9e:d9:49:a6:55:7f: f3:94:94:ef:e1:36:a3:56:7d:98:09:9e:a4:a6:16:91:51:47: 26:8a:60:c2:c8:e5:5c:95:96:7b:5b:ee:16:41:02:af:92:da: b3:ec:5b:42:b3:73:28:5f:cf:d4:62:50:36:4c:2c:82:e0:91: ed:12:2c:45:8c:eb:a8:9a:65:d1:e2:82:db:ef:a7:19:0e:fa: 4d:e0:f1:dc:6a:b1:93:39:71:12:05:e8:a7:c0:9a:d1:fa:30: 3c:f2:9c:19:74:10:25:8f:39:81:01:f7:5c:2c:b8:00:6f:87: 8f:ce:0a:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm1Jf0/ZzZ6zVvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NmFjZDc2ZDgtMmMyZS00MGJhLTlmOTUtNzMzNmE3OWM2OGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVnIvycvicIL5fRGAkIKtB9/yRyLD6FoDivq A6pUmMhPp9V9qEQIqWth6+gbYKlmBCwx6qmQEGGB/PhgPoh/2uwhol3wh/+bixVx 2JD1pgnZrYcej98VgW/XuRihkFp0FNvTHYAe5adN25woiHeg/uuToIqjWQ08R6xQ AJ9tUCOWkN0yRPNITWS1QJc7MRFTMmb3pbiK73JCj96mh8GfMMVxqLreDXRwrq4f dcOTskxJFPzpUkzcy5WWQMGnMfVRwR6VY61lLHcjtaHseOMY9oa6fkJf0j+FAd64 4u3dBPwcK5MWjqaAh8PkZ6rOUFMhzWNCuBhX15MTCZULCOPo9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRTXXGKwe6qLturpvk1knTu3EMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjA4NWM2ZjgtNjMzZi0z YzU5LWE3M2YtYzQ2MjRmYzIyNzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJM9HcgVF+563C/Vo5RJ1FQm4+FzC9EkFH3oV575pPb52MiwrmJmuaS YrzxaenlsFLr1YIaSuAxBWyWI8K3lz1XhfjA3tIDawyCS7poDyWYyg5b4b67DfiK E1GA8p3zwkfqEbLfcAOGTveX5bsJGsIOnNsoIvmmP6QZImvQ+3MLeqiHs09F7UA7 bZ7ZSaZVf/OUlO/hNqNWfZgJnqSmFpFRRyaKYMLI5VyVlntb7hZBAq+S2rPsW0Kz cyhfz9RiUDZMLILgke0SLEWM66iaZdHigtvvpxkO+k3g8dxqsZM5cRIF6KfAmtH6 MDzynBl0ECWPOYEB91wsuABvh4/OCi0= -----END CERTIFICATE-----Generated at Sat Jun 6 10:40:09 2026 by rpki-client