$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e40953f-c6af-323c-8542-3c0a8a44329b.roa File: 8e40953f-c6af-323c-8542-3c0a8a44329b.roa (raw, json) Hash identifier: NlJWZzF7A5IbXN33n0AgUntjY4ZwfXyJs0dznbHo7JU= Subject key identifier: 17:B0:1D:9D:72:D4:59:36:13:B7:6E:F3:71:F4:80:58:D6:F7:FE:79 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F374D22C77A45653CDE205C00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e40953f-c6af-323c-8542-3c0a8a44329b.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 18779 IP address blocks: 172.120.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:22:c7:7a:45:65:3c:de:20:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=71b05118-8752-42f3-b8f4-e818469c6a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:09:6f:fe:ea:e7:d5:23:d0:f2:f8:b9:59:ef: 45:c6:3d:57:d2:3c:5a:6a:d9:49:a2:96:f3:76:07: c6:75:5b:f4:2f:58:e0:70:17:6f:ac:5e:4e:e5:ca: af:4d:56:f3:dd:97:f7:73:dd:e8:6b:4a:9b:aa:d2: 9a:66:1c:6a:f4:1a:00:a5:9d:d0:71:bd:fb:64:61: 9e:4b:d5:6f:d7:b7:22:1c:c0:b5:2a:37:a4:92:5f: dd:74:9a:94:8d:68:27:e1:a0:93:14:fd:d5:6a:26: 83:af:1e:85:be:90:50:ab:ee:86:12:1f:a9:e7:4a: e2:bf:d9:eb:3f:8f:f5:03:69:f3:5d:81:03:9d:97: 67:e6:02:95:fb:49:9d:3d:2f:e3:85:0c:d3:87:9e: 03:a4:56:bc:9f:0f:90:07:ba:ee:77:45:41:20:0d: 3a:61:3d:a3:fe:a0:bc:3a:db:85:05:56:a9:1d:a6: a3:dc:29:67:09:ab:f9:9a:68:d2:8a:0b:bc:5b:38: f1:46:9b:a6:02:2c:5f:ec:e1:fb:bb:fe:ee:24:90: d7:43:51:16:39:a2:7f:8e:94:47:77:2d:f9:4e:05: 34:0b:08:a9:15:d1:e9:c0:89:7a:fe:65:bd:3e:58: de:a5:bd:92:eb:c0:b7:d0:4d:48:8c:72:4b:1a:5b: fa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B0:1D:9D:72:D4:59:36:13:B7:6E:F3:71:F4:80:58:D6:F7:FE:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e40953f-c6af-323c-8542-3c0a8a44329b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ab:24:b0:d1:bf:d4:de:14:2d:e8:2f:eb:a9:d7:ca:6b:6a: fd:62:05:43:9a:75:1e:5c:90:b4:aa:41:73:28:e8:a8:12:f9: fd:3a:01:25:fb:61:95:7e:8b:77:01:81:61:20:9a:c7:95:a4: 02:3b:82:df:5c:91:0d:76:f3:9a:cd:8b:60:6f:39:ff:1d:59: 49:d6:04:94:c6:40:91:94:e4:06:d1:fb:6e:45:c5:fa:8b:9d: 4d:e8:48:38:1a:5e:41:1b:4f:f7:37:20:a5:45:db:ab:ca:41: f0:c2:bc:3e:8f:b6:aa:02:95:be:28:e5:6a:9e:62:cf:4f:2d: 38:2b:b7:32:7f:0b:6e:35:1a:5e:91:74:c9:65:82:45:16:2a: 7c:34:bf:07:b0:83:9e:d6:24:9a:6a:e3:d7:4f:5e:94:c7:63: 93:f6:0e:02:6b:cc:e0:9b:09:b4:fc:22:d6:9d:b8:20:c1:3f: d4:e1:e1:d9:b5:34:92:97:c2:ee:1a:04:e4:bd:28:15:1b:ed: e4:ac:ff:d1:22:75:7a:49:76:d9:53:5a:d5:09:bb:9d:99:26: ca:bc:47:72:c2:c6:93:42:25:a0:f6:77:dc:de:ab:0f:01:31: f0:c4:2e:c5:b0:4d:e5:b1:e6:02:5f:9d:23:f4:1c:ac:f9:ab: b6:6d:f7:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSLHekVlPN4gXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NzFiMDUxMTgtODc1Mi00MmYzLWI4ZjQtZTgxODQ2OWM2YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wlv/urn1SPQ8vi5We9Fxj1X0jxaatlJopbz dgfGdVv0L1jgcBdvrF5O5cqvTVbz3Zf3c93oa0qbqtKaZhxq9BoApZ3Qcb37ZGGe S9Vv17ciHMC1Kjekkl/ddJqUjWgn4aCTFP3VaiaDrx6FvpBQq+6GEh+p50riv9nr P4/1A2nzXYEDnZdn5gKV+0mdPS/jhQzTh54DpFa8nw+QB7rud0VBIA06YT2j/qC8 OtuFBVapHaaj3ClnCav5mmjSigu8WzjxRpumAixf7OH7u/7uJJDXQ1EWOaJ/jpRH dy35TgU0CwipFdHpwIl6/mW9Pljepb2S68C30E1IjHJLGlv63wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBewHZ1y1Fk2E7du83H0gFjW9/55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGU0MDk1M2YtYzZhZi0z MjNjLTg1NDItM2MwYThhNDQzMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWrJLDRv9TeFC3oL+up18prav1iBUOadR5ckLSqQXMo6KgS+f06ASX7 YZV+i3cBgWEgmseVpAI7gt9ckQ1285rNi2BvOf8dWUnWBJTGQJGU5AbR+25FxfqL nU3oSDgaXkEbT/c3IKVF26vKQfDCvD6PtqoClb4o5WqeYs9PLTgrtzJ/C241Gl6R dMllgkUWKnw0vwewg57WJJpq49dPXpTHY5P2DgJrzOCbCbT8ItaduCDBP9Th4dm1 NJKXwu4aBOS9KBUb7eSs/9EidXpJdtlTWtUJu52ZJsq8R3LCxpNCJaD2d9zeqw8B MfDELsWwTeWx5gJfnSP0HKz5q7Zt9yU= -----END CERTIFICATE-----Generated at Sun Oct 11 07:10:11 2026 by rpki-client