$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89c6f32b-7a75-3220-9cd0-f3eb85b32a5f.roa File: 89c6f32b-7a75-3220-9cd0-f3eb85b32a5f.roa (raw, json) Hash identifier: 2ScC0yeEpWarw4DT9V6VagpCkJzPWNpAlJxO5fYzTvQ= Subject key identifier: EB:18:8A:5E:38:ED:60:35:72:92:31:58:2E:6A:1C:90:6C:40:C1:99 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584EA7923DD57E2268144869EB80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89c6f32b-7a75-3220-9cd0-f3eb85b32a5f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9009 IP address blocks: 172.121.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:3d:d5:7e:22:68:14:48:69:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6c1aca26-b532-4a2b-9aa0-fdbd54fe1cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:1e:89:db:32:08:8f:bc:1d:6a:2c:3f:5f: eb:18:85:29:1d:c8:9d:4c:f3:0d:f9:90:93:6f:b1: bb:e6:68:c4:d4:86:c5:d2:38:87:6e:92:56:73:b8: 6e:41:58:7c:1e:99:10:10:a0:4f:ac:4a:e8:55:8c: dc:8e:12:6a:b8:34:96:bb:c9:f3:a0:55:30:a4:c9: e8:ce:0d:a3:ef:f9:55:ea:07:7e:df:9c:b8:e9:6b: f6:10:48:8b:28:84:d7:ae:74:33:3e:82:3a:23:9e: 47:5e:94:ee:2f:32:f7:a4:dc:62:0c:83:c2:9e:24: 72:82:00:38:3b:c1:20:1f:54:7a:6b:b1:a3:ed:f7: 97:8e:67:f3:31:22:08:94:29:d5:34:e8:29:d2:be: 16:4e:ff:95:43:02:d3:d0:56:5d:b0:72:0e:ae:a4: 85:a8:1b:f2:26:bf:c7:3c:2b:cb:b9:29:ab:30:7a: 37:c2:90:6d:9f:57:80:fb:c6:95:fa:23:9f:6e:e9: 39:10:58:68:10:d0:12:60:6e:24:83:13:0f:61:11: 48:78:95:06:6a:15:db:4a:4f:55:a4:f6:54:05:cc: 1f:99:97:a3:85:a4:0a:c4:5c:29:aa:bd:8f:87:8d: 99:7d:b2:11:9a:4b:52:e4:c4:46:53:33:b5:36:78: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:18:8A:5E:38:ED:60:35:72:92:31:58:2E:6A:1C:90:6C:40:C1:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89c6f32b-7a75-3220-9cd0-f3eb85b32a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8a:68:59:4f:e8:7c:89:70:d9:c9:45:41:c5:2f:c4:e0:53: 8c:cc:c4:2f:4a:d1:67:60:7d:33:cd:e0:cd:75:8d:3c:47:78: 01:e2:fa:79:b3:49:c0:ab:03:92:50:63:ec:a6:14:7e:16:1a: 30:7a:67:36:b4:d7:2c:a4:09:b9:f1:00:ce:55:e9:10:fb:8e: f8:20:20:ff:04:70:a8:0f:05:f7:a0:7f:fb:f1:b6:7e:1f:9e: 1b:50:d4:57:72:5b:8d:3b:fa:54:df:63:8d:22:d7:96:eb:d6: 98:04:41:0b:58:0b:3a:9c:fe:ce:79:84:46:75:3f:ef:1c:07: c9:6b:83:88:be:ec:83:6d:d8:b1:64:80:a6:97:41:b6:67:18: 0e:40:ef:7c:e4:d7:00:c2:69:1f:d3:2f:2b:62:f2:ac:eb:5a: 0f:a5:32:02:b7:c4:07:ca:95:ae:97:f4:3a:00:a0:fa:be:67: ff:aa:e5:5d:85:cb:aa:dc:67:1d:1a:fc:7a:ca:75:85:66:86: 86:6c:dd:90:d3:38:c6:83:b7:74:4e:3c:7f:f7:5d:66:95:5a: 52:c1:41:22:86:21:c5:65:74:9c:ec:96:54:70:60:f0:fd:c3: 14:b8:9c:c2:e9:0c:39:e1:52:d0:fa:5a:73:f7:f0:14:c0:b1: 0f:31:e0:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkj3VfiJoFEhp64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmMxYWNhMjYtYjUzMi00YTJiLTlhYTAtZmRiZDU0ZmUxY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2AeidsyCI+8HWosP1/rGIUpHcidTPMN+ZCT b7G75mjE1IbF0jiHbpJWc7huQVh8HpkQEKBPrEroVYzcjhJquDSWu8nzoFUwpMno zg2j7/lV6gd+35y46Wv2EEiLKITXrnQzPoI6I55HXpTuLzL3pNxiDIPCniRyggA4 O8EgH1R6a7Gj7feXjmfzMSIIlCnVNOgp0r4WTv+VQwLT0FZdsHIOrqSFqBvyJr/H PCvLuSmrMHo3wpBtn1eA+8aV+iOfbuk5EFhoENASYG4kgxMPYRFIeJUGahXbSk9V pPZUBcwfmZejhaQKxFwpqr2Ph42ZfbIRmktS5MRGUzO1Nnj87QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsYil447WA1cpIxWC5qHJBsQMGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODljNmYzMmItN2E3NS0z MjIwLTljZDAtZjNlYjg1YjMyYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGKaFlP6HyJcNnJRUHFL8TgU4zMxC9K0WdgfTPN4M11jTxHeAHi+nmz ScCrA5JQY+ymFH4WGjB6Zza01yykCbnxAM5V6RD7jvggIP8EcKgPBfegf/vxtn4f nhtQ1FdyW407+lTfY40i15br1pgEQQtYCzqc/s55hEZ1P+8cB8lrg4i+7INt2LFk gKaXQbZnGA5A73zk1wDCaR/TLyti8qzrWg+lMgK3xAfKla6X9DoAoPq+Z/+q5V2F y6rcZx0a/HrKdYVmhoZs3ZDTOMaDt3ROPH/3XWaVWlLBQSKGIcVldJzsllRwYPD9 wxS4nMLpDDnhUtD6WnP38BTAsQ8x4HU= -----END CERTIFICATE-----Generated at Tue Aug 25 11:04:39 2026 by rpki-client