$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e23863d-10c6-3c5c-b917-075cfec682cc.roa File: 4e23863d-10c6-3c5c-b917-075cfec682cc.roa (raw, json) Hash identifier: oTwA1Lmj9LMvLTVvjZcP8xjCHPYskAMh9AE7StF0fLI= Subject key identifier: EB:25:F3:BC:59:4C:AC:49:76:AA:6A:0E:03:D4:47:14:FB:93:8F:F8 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584ED1672B33F52E5ACCD3204F40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e23863d-10c6-3c5c-b917-075cfec682cc.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 18779 IP address blocks: 172.120.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:2b:33:f5:2e:5a:cc:d3:20:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=733f8c05-2df9-4de4-b48f-b1e961e32ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:4d:81:09:05:98:ec:96:b1:69:7f:e6:a8: ed:91:90:fb:ac:38:1d:74:87:6b:3a:8b:a6:e7:bb: 69:74:1f:3a:10:ce:38:5b:64:c6:be:45:6a:76:9f: a1:0b:37:0f:9c:36:33:a1:86:5b:c4:b4:8c:ca:22: de:54:f7:72:72:75:ec:97:ba:e7:05:d8:7f:89:4d: e2:f2:23:e8:4e:fd:60:00:ef:9d:5a:7f:7e:fd:35: b8:93:da:0a:de:ae:21:d3:73:ed:64:59:dc:d9:d4: cf:1c:aa:cc:5e:6f:bc:07:ab:86:00:33:04:79:60: 05:a3:aa:0f:ef:22:16:a3:ee:72:75:b1:37:15:18: 18:3f:99:bb:a4:e9:03:f6:46:10:dc:81:c9:37:66: 01:5c:0f:58:3e:b2:2f:64:50:d4:8e:35:d8:08:51: 5c:3d:98:6a:fc:a9:fd:de:80:32:3e:00:bf:ed:a3: 50:eb:96:44:f7:ba:e1:a7:60:75:f6:9a:cb:0c:cb: 77:26:10:8c:b4:fe:de:d1:a1:aa:3f:85:28:05:6d: 93:29:b0:9a:76:db:a9:62:3b:8e:f9:77:e3:5c:94: 59:93:25:5c:d4:fc:8a:72:d1:cc:49:b2:61:52:fd: b6:81:62:b6:86:64:ec:c6:27:fc:5d:b5:e5:86:a9: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:25:F3:BC:59:4C:AC:49:76:AA:6A:0E:03:D4:47:14:FB:93:8F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e23863d-10c6-3c5c-b917-075cfec682cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ba:f9:6e:b7:39:e7:5d:c5:ec:e5:28:c1:6d:9d:74:6b:5e: 8b:53:c1:eb:66:ee:4f:1c:b5:36:47:0b:b6:88:2a:cc:d3:3e: 69:92:9d:09:f4:05:79:f6:94:5e:33:b3:25:51:e7:d2:e2:21: 1e:9a:ff:ed:a0:02:b3:09:20:d6:1c:ec:23:37:f9:14:a4:fa: 42:37:a4:22:77:9e:c6:ef:50:4b:dc:d0:b8:df:3f:74:30:17: d4:58:6e:67:91:b8:ee:71:64:16:7a:65:56:99:ba:dc:4a:77: 2e:5c:bb:e4:7f:25:99:a1:c5:d6:3e:ed:88:2e:3d:1b:85:9c: c3:7b:03:12:91:29:1c:aa:41:1c:f6:88:67:df:d3:f4:92:63: bb:64:12:40:83:ee:66:1c:9e:04:f5:13:13:5c:88:c7:0d:41: ee:d0:a7:a9:62:d3:35:93:9d:e8:ad:6e:13:8e:51:26:8c:89: 6a:dc:6c:2a:9f:10:07:94:2b:69:63:53:47:e2:f2:77:78:4d: 42:75:a4:16:02:f4:17:3c:50:16:da:d3:26:04:4b:67:8c:98: 66:b6:46:64:2c:3e:70:9f:16:4c:41:4e:14:d2:bf:4a:1f:9f: 59:c9:cc:c4:d9:84:8c:e7:2d:f0:9f:55:5c:f4:d6:ea:00:a8: 3e:52:c8:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZysz9S5azNMgT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk NzMzZjhjMDUtMmRmOS00ZGU0LWI0OGYtYjFlOTYxZTMyYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSBNgQkFmOyWsWl/5qjtkZD7rDgddIdrOoum 57tpdB86EM44W2TGvkVqdp+hCzcPnDYzoYZbxLSMyiLeVPdycnXsl7rnBdh/iU3i 8iPoTv1gAO+dWn9+/TW4k9oK3q4h03PtZFnc2dTPHKrMXm+8B6uGADMEeWAFo6oP 7yIWo+5ydbE3FRgYP5m7pOkD9kYQ3IHJN2YBXA9YPrIvZFDUjjXYCFFcPZhq/Kn9 3oAyPgC/7aNQ65ZE97rhp2B19prLDMt3JhCMtP7e0aGqP4UoBW2TKbCadtupYjuO +XfjXJRZkyVc1PyKctHMSbJhUv22gWK2hmTsxif8XbXlhqlkVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsl87xZTKxJdqpqDgPURxT7k4/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGUyMzg2M2QtMTBjNi0z YzVjLWI5MTctMDc1Y2ZlYzY4MmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq6+W63OeddxezlKMFtnXRrXotTwetm7k8ctTZHC7aIKszTPmmSnQn0 BXn2lF4zsyVR59LiIR6a/+2gArMJINYc7CM3+RSk+kI3pCJ3nsbvUEvc0LjfP3Qw F9RYbmeRuO5xZBZ6ZVaZutxKdy5cu+R/JZmhxdY+7YguPRuFnMN7AxKRKRyqQRz2 iGff0/SSY7tkEkCD7mYcngT1ExNciMcNQe7Qp6li0zWTneitbhOOUSaMiWrcbCqf EAeUK2ljU0fi8nd4TUJ1pBYC9Bc8UBba0yYES2eMmGa2RmQsPnCfFkxBThTSv0of n1nJzMTZhIznLfCfVVz01uoAqD5SyHU= -----END CERTIFICATE-----Generated at Sun Sep 13 08:51:11 2026 by rpki-client