$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/57ac171f-5d8c-352f-a98b-212e9ba86ee5.roa File: 57ac171f-5d8c-352f-a98b-212e9ba86ee5.roa (raw, json) Hash identifier: 3waBZpTlFrCQ1ULoefLit1BQrhy5ST38XpkIy4NchSg= Subject key identifier: 48:C8:FE:25:FF:53:EB:73:60:53:E8:A1:10:28:B0:0E:DB:C1:6A:B2 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F4974F6F42B38C85BE523F880 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/57ac171f-5d8c-352f-a98b-212e9ba86ee5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 172.120.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f6:f4:2b:38:c8:5b:e5:23:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3c4d40dc-13ba-40e2-8d09-d100dba97aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e9:43:1d:0a:67:d6:79:11:57:66:56:fc:7e: 9b:0c:01:1a:87:b0:87:a4:21:23:d0:93:6f:71:26: 38:2d:c1:25:91:b0:50:78:03:43:46:93:74:69:78: 95:1c:1f:f3:9a:ce:1f:9a:c3:7e:bd:0d:1f:60:2f: b8:fd:33:69:6c:fa:d0:37:f2:21:7c:c2:a1:5c:5c: bb:5f:89:2a:86:c0:53:a3:27:84:4a:88:4e:7a:1e: 68:8c:9d:42:4a:88:de:56:25:91:99:d9:5d:14:dc: a6:f5:03:b5:b9:5a:7f:16:7c:ba:f8:7a:12:79:d9: d3:c5:7f:dd:99:c4:63:82:1d:e7:0d:c6:ef:29:ef: 26:f2:30:4d:f8:f6:b3:bf:b2:13:06:69:84:46:26: 6e:aa:70:47:13:ee:be:99:d4:30:b1:83:a7:41:2a: d0:9c:6a:65:f2:99:eb:a5:42:6e:a5:4b:62:92:3d: 55:27:34:c8:1c:92:ab:76:6e:9b:c8:79:ab:6a:35: 12:3d:86:db:40:ae:9e:25:f9:6f:5d:26:be:47:5f: 4b:03:79:e1:59:ab:64:17:4b:21:d2:94:80:db:3b: f2:84:54:cf:71:ba:bd:7e:95:a3:91:37:07:a5:c0: 7b:c3:78:d1:12:e7:85:98:45:68:f7:e9:4d:87:4c: 97:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C8:FE:25:FF:53:EB:73:60:53:E8:A1:10:28:B0:0E:DB:C1:6A:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/57ac171f-5d8c-352f-a98b-212e9ba86ee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5f:6c:82:35:67:b8:53:8b:e6:68:fa:de:11:e7:50:04:31: de:36:27:9f:d7:82:fd:0a:3b:1c:9d:10:c0:eb:6d:34:f2:ea: 97:b2:ff:9d:dd:6c:33:ce:5c:a6:1f:c7:f3:8b:86:db:23:33: 9b:97:2e:43:7f:2d:e6:24:36:1d:04:70:76:75:94:7b:c5:0c: 6d:5c:f8:b6:01:48:aa:e9:d7:1d:1e:aa:93:ac:0d:f3:bf:00: 1d:9e:67:6c:a0:0d:17:22:f8:23:26:89:9f:6e:c1:b6:3b:c4: b2:b7:17:10:1a:f3:5c:c7:c2:17:a0:ab:70:84:f8:18:76:aa: 77:c6:3e:c7:ce:6d:a3:17:85:3a:5f:46:4d:64:ea:ef:8e:71: 1a:45:99:17:29:eb:8f:64:c3:7c:e3:ce:63:b4:e2:7c:c4:27: 18:c5:54:c9:f4:5a:0e:8a:78:51:d8:0f:47:73:c6:ce:09:06: 59:7c:da:6f:ee:b0:f0:05:6c:35:43:b8:d4:66:57:dc:f8:a3: ef:88:fb:66:f3:bb:0d:14:c0:6f:46:4d:49:aa:d7:75:52:af: a5:56:2a:7a:49:13:73:a9:72:0d:d3:31:59:6f:4a:8b:40:01: ce:1f:9f:bb:a9:1e:c2:52:11:0b:15:b4:e8:8c:ec:0e:c3:41: dd:b5:23:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPb0KzjIW+Uj+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2M0ZDQwZGMtMTNiYS00MGUyLThkMDktZDEwMGRiYTk3YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOlDHQpn1nkRV2ZW/H6bDAEah7CHpCEj0JNv cSY4LcElkbBQeANDRpN0aXiVHB/zms4fmsN+vQ0fYC+4/TNpbPrQN/IhfMKhXFy7 X4kqhsBToyeESohOeh5ojJ1CSojeViWRmdldFNym9QO1uVp/Fny6+HoSednTxX/d mcRjgh3nDcbvKe8m8jBN+Pazv7ITBmmERiZuqnBHE+6+mdQwsYOnQSrQnGpl8pnr pUJupUtikj1VJzTIHJKrdm6byHmrajUSPYbbQK6eJflvXSa+R19LA3nhWatkF0sh 0pSA2zvyhFTPcbq9fpWjkTcHpcB7w3jREueFmEVo9+lNh0yXFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjI/iX/U+tzYFPooRAosA7bwWqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTdhYzE3MWYtNWQ4Yy0z NTJmLWE5OGItMjEyZTliYTg2ZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdfbII1Z7hTi+Zo+t4R51AEMd42J5/Xgv0KOxydEMDrbTTy6pey/53d bDPOXKYfx/OLhtsjM5uXLkN/LeYkNh0EcHZ1lHvFDG1c+LYBSKrp1x0eqpOsDfO/ AB2eZ2ygDRci+CMmiZ9uwbY7xLK3FxAa81zHwhegq3CE+Bh2qnfGPsfObaMXhTpf Rk1k6u+OcRpFmRcp649kw3zjzmO04nzEJxjFVMn0Wg6KeFHYD0dzxs4JBll82m/u sPAFbDVDuNRmV9z4o++I+2bzuw0UwG9GTUmq13VSr6VWKnpJE3Opcg3TMVlvSotA Ac4fn7upHsJSEQsVtOiM7A7DQd21I+Y= -----END CERTIFICATE-----Generated at Sun Oct 11 09:33:59 2026 by rpki-client