$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/daec5d0c-7ff1-3c58-b0e1-592da100de7d.roa File: daec5d0c-7ff1-3c58-b0e1-592da100de7d.roa (raw, json) Hash identifier: wDjc1A2UkJAgKurf8MZiXkg2brBEXahorGo0kmt4LRU= Subject key identifier: 33:10:4A:2E:48:A8:69:10:0E:6D:20:9B:1D:E4:BD:85:4F:C9:B1:7F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584EB57C667B2BA91E0EE55B4600 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/daec5d0c-7ff1-3c58-b0e1-592da100de7d.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 44559 IP address blocks: 172.120.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:66:7b:2b:a9:1e:0e:e5:5b:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=368591fb-9875-4733-b9c8-1276f413607d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:26:b8:c0:34:e9:c0:06:ca:47:a4:42:b2:93: 44:2c:51:fb:1c:86:77:8c:43:30:92:ce:30:0d:33: 66:7d:77:fb:97:60:9a:f9:9b:6d:4a:20:20:3d:16: 36:c9:54:c2:1a:cd:0e:a0:51:ab:00:93:9f:f0:86: df:1c:50:db:6f:67:da:a3:a2:0f:7a:f7:f6:bd:7b: b5:32:d6:e2:ba:7c:44:80:78:97:49:9a:c4:7a:d6: 2c:1a:f1:48:ac:36:d5:be:9e:be:0b:06:c0:0d:84: 33:28:55:76:e2:37:12:76:63:e9:07:ba:55:8e:01: e8:0f:f4:64:cc:fe:48:73:ea:29:df:aa:7b:f0:48: e6:df:76:b4:43:cc:71:a1:27:92:fb:5e:0a:bf:30: 67:bf:80:13:06:c5:2a:0b:61:c5:38:33:7c:a4:35: 2f:70:15:28:5b:76:8b:2d:ea:3d:36:7d:71:18:20: 78:7b:93:28:2a:23:1c:92:f4:87:56:66:db:62:96: ae:b8:0b:6f:d9:66:1b:39:4e:92:8b:2e:df:91:6f: 67:04:07:04:43:5e:77:e7:f0:ed:1a:68:e7:7d:56: 65:97:14:10:61:5c:18:0f:bb:b9:43:d1:8e:4c:83: 69:c1:11:e5:9d:35:e3:86:82:e9:5b:e2:8a:bd:5a: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:10:4A:2E:48:A8:69:10:0E:6D:20:9B:1D:E4:BD:85:4F:C9:B1:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/daec5d0c-7ff1-3c58-b0e1-592da100de7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:de:a8:33:7d:5c:7d:97:a1:dc:a3:8c:35:32:45:de:16:b4: cc:e6:3d:0d:64:b5:c2:dd:45:5a:ea:12:19:85:2a:53:c3:70: 6d:cd:01:9d:27:45:84:ac:a1:f2:3f:c3:5f:12:95:16:01:db: 5b:d8:1d:45:21:d5:dd:fd:bc:21:a0:a3:b8:92:0c:8b:c8:3f: 4e:9e:5e:cb:ec:4d:e8:11:af:67:93:1b:d4:40:c8:4d:b2:03: 75:70:c0:c1:c2:85:79:39:44:44:d3:d5:80:58:46:f5:33:99: dc:32:73:e8:1a:c9:81:70:08:8d:ce:87:7c:8e:ff:6e:af:0c: 22:58:42:6b:8e:2f:b3:bb:1a:cc:d7:57:8e:9f:97:21:b3:10: d7:0d:0a:3c:61:90:39:31:dd:01:8b:ca:12:d0:fc:e6:de:81: 00:68:17:c9:60:b0:4b:a3:a5:f6:15:85:fa:02:86:0e:1a:11: e6:a5:1f:bd:03:97:51:96:74:09:29:98:17:14:0c:d0:72:25: ee:0a:02:f9:38:23:19:6c:c4:d1:a6:63:52:87:08:c2:38:e0: fd:af:eb:bb:2b:da:83:0f:c7:71:e9:6d:79:4c:54:97:93:09: c3:ee:28:7d:9d:a4:d8:0f:3e:e5:c9:d3:14:42:21:85:d3:c5: d2:6b:41:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61fGZ7K6keDuVbRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk MzY4NTkxZmItOTg3NS00NzMzLWI5YzgtMTI3NmY0MTM2MDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySa4wDTpwAbKR6RCspNELFH7HIZ3jEMwks4w DTNmfXf7l2Ca+ZttSiAgPRY2yVTCGs0OoFGrAJOf8IbfHFDbb2fao6IPevf2vXu1 MtbiunxEgHiXSZrEetYsGvFIrDbVvp6+CwbADYQzKFV24jcSdmPpB7pVjgHoD/Rk zP5Ic+op36p78Ejm33a0Q8xxoSeS+14KvzBnv4ATBsUqC2HFODN8pDUvcBUoW3aL Leo9Nn1xGCB4e5MoKiMckvSHVmbbYpauuAtv2WYbOU6Siy7fkW9nBAcEQ1535/Dt GmjnfVZllxQQYVwYD7u5Q9GOTINpwRHlnTXjhoLpW+KKvVoNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMQSi5IqGkQDm0gmx3kvYVPybF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGFlYzVkMGMtN2ZmMS0z YzU4LWIwZTEtNTkyZGExMDBkZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHj/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjeqDN9XH2XodyjjDUyRd4WtMzmPQ1ktcLdRVrqEhmFKlPDcG3NAZ0n RYSsofI/w18SlRYB21vYHUUh1d39vCGgo7iSDIvIP06eXsvsTegRr2eTG9RAyE2y A3VwwMHChXk5RETT1YBYRvUzmdwyc+gayYFwCI3Oh3yO/26vDCJYQmuOL7O7GszX V46flyGzENcNCjxhkDkx3QGLyhLQ/ObegQBoF8lgsEujpfYVhfoChg4aEealH70D l1GWdAkpmBcUDNByJe4KAvk4IxlsxNGmY1KHCMI44P2v67sr2oMPx3HpbXlMVJeT CcPuKH2dpNgPPuXJ0xRCIYXTxdJrQd4= -----END CERTIFICATE-----Generated at Fri Sep 4 21:09:19 2026 by rpki-client