$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/52ec2324-f385-3a19-8b95-dda4d478db3c.roa File: 52ec2324-f385-3a19-8b95-dda4d478db3c.roa (raw, json) Hash identifier: F1dVd3zkWdGZKvWlvpD4yBqx0mfwteJ9k92kdTxoP6I= Subject key identifier: 27:AD:1C:BF:60:A5:8C:13:09:09:A5:0B:7A:51:40:96:98:6C:97:7B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F4972B0E81C27889E68E85480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/52ec2324-f385-3a19-8b95-dda4d478db3c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 172.121.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b0:e8:1c:27:88:9e:68:e8:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2fd6f7ad-b6e5-4fbd-9dc1-4734f3822dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9b:32:3d:6a:fe:35:00:52:8c:b9:e2:3b:51: 9d:f1:20:03:ce:90:48:2e:e1:06:ed:4b:6d:71:72: ff:a2:6e:a9:22:3c:18:f0:84:2c:76:3f:7d:f9:d8: 25:c6:d7:9c:48:9d:cb:8e:92:41:42:1b:f1:d0:b4: 9f:92:f5:d7:3a:2c:c0:59:ee:e9:48:fa:d3:b0:70: 60:98:f8:8f:b7:5a:c4:f2:a9:4b:3e:46:d3:f8:6a: 45:d4:94:24:9c:28:ae:72:6b:9d:75:d6:e8:bf:c1: 0b:48:c2:9c:06:7b:63:03:4f:f4:6c:0c:1c:81:5e: 31:2b:8f:18:b4:30:b0:df:98:01:6c:1b:7a:73:c1: d8:fa:ec:0f:5b:38:eb:9b:94:8f:24:91:ca:21:e6: fa:93:ee:d0:68:3b:2a:b3:c7:25:da:82:0d:84:25: ad:2d:51:74:1b:fa:78:f1:0a:42:ed:39:c9:c7:d8: cc:e5:bd:da:6a:e6:4d:d0:af:fa:1b:a8:e1:3a:14: 2e:63:9a:02:bd:32:3a:b2:e1:14:6d:26:b5:66:7e: c9:4e:c0:16:c3:d8:b9:0d:4d:5b:73:40:14:8d:bb: 01:ad:bb:5a:d9:bc:99:0a:60:40:93:79:e8:49:80: 65:e1:4e:d6:49:34:2d:fb:cd:0b:6d:54:27:a3:4d: f9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AD:1C:BF:60:A5:8C:13:09:09:A5:0B:7A:51:40:96:98:6C:97:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/52ec2324-f385-3a19-8b95-dda4d478db3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:85:13:fc:ac:0e:b9:7a:60:b8:01:81:e7:88:dd:57:34:22: d0:8d:2a:cb:ca:a0:ef:ab:13:45:5a:d7:7e:ce:27:91:6d:0e: fe:94:01:df:cc:5f:9a:96:0c:60:ab:e7:15:6e:24:fd:c5:06: a0:c3:aa:c9:2f:85:59:7a:51:09:92:b2:2d:06:0f:a0:db:f5: 75:ce:8d:66:be:36:55:e9:71:d8:5c:9b:72:59:e4:b5:95:00: 42:3e:ef:53:cf:d5:09:bc:f0:26:50:0b:2f:d9:39:be:64:3f: 2d:75:65:64:53:c2:77:15:45:e4:bc:c6:b3:94:9c:56:63:f4: 18:90:da:1f:e8:79:92:d0:d3:6b:91:72:b8:11:e4:88:74:3a: ae:8c:e4:5a:2e:67:1b:b5:37:a9:27:c1:94:09:65:b8:ad:26: 49:71:45:b8:52:e6:f0:05:55:1a:14:72:f2:01:6f:63:66:82: 06:2c:b5:f2:b7:f2:5e:c4:21:56:94:ff:31:6c:f5:bb:7d:dc: 1e:44:d2:e0:e2:8b:d1:ca:41:7e:34:40:19:8d:aa:df:e8:22: 77:25:72:08:da:4a:79:bb:0e:d5:8c:b9:75:25:67:e3:36:0b: 27:be:e7:94:92:b6:fc:7a:ee:c7:85:43:8a:6c:aa:21:ac:ba: 4e:e2:0f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcrDoHCeInmjoVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmZkNmY3YWQtYjZlNS00ZmJkLTlkYzEtNDczNGYzODIyZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5syPWr+NQBSjLniO1Gd8SADzpBILuEG7Utt cXL/om6pIjwY8IQsdj99+dglxtecSJ3LjpJBQhvx0LSfkvXXOizAWe7pSPrTsHBg mPiPt1rE8qlLPkbT+GpF1JQknCiucmudddbov8ELSMKcBntjA0/0bAwcgV4xK48Y tDCw35gBbBt6c8HY+uwPWzjrm5SPJJHKIeb6k+7QaDsqs8cl2oINhCWtLVF0G/p4 8QpC7TnJx9jM5b3aauZN0K/6G6jhOhQuY5oCvTI6suEUbSa1Zn7JTsAWw9i5DU1b c0AUjbsBrbta2byZCmBAk3noSYBl4U7WSTQt+80LbVQno035QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCetHL9gpYwTCQmlC3pRQJaYbJd7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTJlYzIzMjQtZjM4NS0z YTE5LThiOTUtZGRhNGQ0NzhkYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqFE/ysDrl6YLgBgeeI3Vc0ItCNKsvKoO+rE0Va137OJ5FtDv6UAd/M X5qWDGCr5xVuJP3FBqDDqskvhVl6UQmSsi0GD6Db9XXOjWa+NlXpcdhcm3JZ5LWV AEI+71PP1Qm88CZQCy/ZOb5kPy11ZWRTwncVReS8xrOUnFZj9BiQ2h/oeZLQ02uR crgR5Ih0Oq6M5FouZxu1N6knwZQJZbitJklxRbhS5vAFVRoUcvIBb2NmggYstfK3 8l7EIVaU/zFs9bt93B5E0uDii9HKQX40QBmNqt/oInclcgjaSnm7DtWMuXUlZ+M2 Cye+55SStvx67seFQ4psqiGsuk7iD8Q= -----END CERTIFICATE-----Generated at Sun Oct 11 15:03:35 2026 by rpki-client