$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f85009c-c4c3-371d-8679-9f5e20ee3bd9.roa File: 2f85009c-c4c3-371d-8679-9f5e20ee3bd9.roa (raw, json) Hash identifier: KjJ+SN/sM40Pnm/R1PBWtTTNX3BmP3FeNWMkuYD3pRo= Subject key identifier: CE:AE:74:E5:43:59:D5:DD:7F:EC:40:FD:69:A3:AF:94:F7:BE:E5:DD Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584DF37E1CD26216B3C31DB5BD00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f85009c-c4c3-371d-8679-9f5e20ee3bd9.roa Signing time: Mon 25 May 2026 13:17:06 +0000 ROA not before: Mon 25 May 2026 13:17:06 +0000 ROA not after: Sun 23 Aug 2026 13:17:06 +0000 asID: 212238 IP address blocks: 172.120.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:7e:1c:d2:62:16:b3:c3:1d:b5:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 25 13:17:06 2026 GMT Not After : Aug 23 13:17:06 2026 GMT Subject: CN=0f32338e-773c-479e-8e4a-cdcf2a3bf87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a9:d3:95:8e:24:8f:96:19:76:11:d2:5f:8f: 70:6b:24:82:fd:fa:ba:15:cf:be:f8:86:3d:e4:57: 2a:21:ac:10:49:72:9d:26:d5:3f:05:72:e4:8c:f5: 38:e1:1d:12:61:d2:bf:c6:57:2c:50:05:eb:00:4d: fe:a8:94:82:0b:79:9d:c0:d2:c3:76:d9:0a:ec:0e: 91:5b:e7:ce:b1:55:c0:43:39:f5:51:6a:00:6e:92: ef:0e:96:6d:09:b2:3a:73:82:5d:f5:43:54:12:0e: b5:9e:f2:fe:e2:a4:18:1f:71:37:82:3f:f5:8f:a0: 74:67:97:a6:75:9f:f2:f9:27:74:67:de:31:15:48: 4b:61:43:4e:c8:2f:d2:5e:58:0e:d3:57:81:a2:3d: e2:a5:58:f3:72:6f:dc:2c:e2:1b:46:31:03:3d:b8: 02:0f:35:20:f5:32:91:3f:c3:ea:87:d1:c8:3f:53: 5e:ad:5a:e5:2e:d9:07:be:da:fd:90:64:05:78:2e: 46:bb:9e:ca:a9:6d:df:6f:24:7d:12:9a:8c:e1:a6: 72:89:0e:c4:57:a7:e9:3a:45:e8:53:b0:79:03:1b: 50:cd:9c:5f:ac:6e:4a:35:12:c0:7f:b7:9b:1a:39: 6a:3d:12:23:56:aa:bb:d4:dc:8e:2d:93:9d:65:e2: 63:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AE:74:E5:43:59:D5:DD:7F:EC:40:FD:69:A3:AF:94:F7:BE:E5:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f85009c-c4c3-371d-8679-9f5e20ee3bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4d:ff:36:b0:0b:8c:1b:b9:34:c3:04:ce:8a:02:58:93:3f: 02:04:9b:38:51:bc:ae:f3:a0:52:d2:4b:5c:98:f0:9e:0a:19: 3b:54:ba:90:ec:80:6a:ec:38:30:53:df:67:19:6b:a9:fd:32: b6:1d:e3:fb:78:32:66:09:55:57:cd:cd:0d:78:09:02:6f:2d: 74:31:44:54:bf:89:f4:45:9c:5b:de:ed:af:d8:1b:df:70:56: 2a:46:f8:db:28:0f:90:5f:2b:f3:09:d9:68:9a:2b:d4:38:91: ee:34:5f:6c:88:5c:2d:6f:b0:8d:97:c6:98:56:c6:c2:0d:55: 8a:85:68:58:8a:7a:47:af:da:f3:bc:1a:da:fc:89:b4:e8:30: 1f:8c:74:92:ff:a9:9d:96:4b:6a:e4:9c:d9:92:1f:e7:58:20: 19:89:f5:c7:0b:86:a4:3b:4a:16:1e:05:b1:ab:a1:06:0b:ef: db:47:27:aa:df:43:45:90:2a:d7:87:50:ac:4c:30:94:d4:a2: 56:dc:c9:23:02:d3:28:38:5a:44:41:56:7a:d8:76:ce:6c:cf: 18:94:ad:8e:94:ec:d5:ea:60:9f:fe:f6:43:eb:a5:7e:0f:eb: bb:e8:fe:75:45:a2:e9:1e:28:3a:17:b5:61:8b:19:02:9c:32: bc:1e:9b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zfhzSYhazwx21vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDUyNTEzMTcwNloXDTI2MDgyMzEzMTcwNlowLzEtMCsGA1UEAxMk MGYzMjMzOGUtNzczYy00NzllLThlNGEtY2RjZjJhM2JmODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqnTlY4kj5YZdhHSX49waySC/fq6Fc+++IY9 5FcqIawQSXKdJtU/BXLkjPU44R0SYdK/xlcsUAXrAE3+qJSCC3mdwNLDdtkK7A6R W+fOsVXAQzn1UWoAbpLvDpZtCbI6c4Jd9UNUEg61nvL+4qQYH3E3gj/1j6B0Z5em dZ/y+Sd0Z94xFUhLYUNOyC/SXlgO01eBoj3ipVjzcm/cLOIbRjEDPbgCDzUg9TKR P8Pqh9HIP1NerVrlLtkHvtr9kGQFeC5Gu57KqW3fbyR9EpqM4aZyiQ7EV6fpOkXo U7B5AxtQzZxfrG5KNRLAf7ebGjlqPRIjVqq71NyOLZOdZeJj4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6udOVDWdXdf+xA/Wmjr5T3vuXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmY4NTAwOWMtYzRjMy0z NzFkLTg2NzktOWY1ZTIwZWUzYmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVN/zawC4wbuTTDBM6KAliTPwIEmzhRvK7zoFLSS1yY8J4KGTtUupDs gGrsODBT32cZa6n9MrYd4/t4MmYJVVfNzQ14CQJvLXQxRFS/ifRFnFve7a/YG99w VipG+NsoD5BfK/MJ2WiaK9Q4ke40X2yIXC1vsI2XxphWxsINVYqFaFiKekev2vO8 Gtr8ibToMB+MdJL/qZ2WS2rknNmSH+dYIBmJ9ccLhqQ7ShYeBbGroQYL79tHJ6rf Q0WQKteHUKxMMJTUolbcySMC0yg4WkRBVnrYds5szxiUrY6U7NXqYJ/+9kPrpX4P 67vo/nVFoukeKDoXtWGLGQKcMrwem6k= -----END CERTIFICATE-----Generated at Tue May 26 05:31:47 2026 by rpki-client