$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df248ddf-04ee-393a-9dc6-1f22780e480c.roa File: df248ddf-04ee-393a-9dc6-1f22780e480c.roa (raw, json) Hash identifier: Q6r5vEEOtPt7ZnwHaUeX5iowBcW8mGw/6oZD5Z+2fRo= Subject key identifier: 34:F8:E7:38:EC:97:DC:44:13:A4:C9:62:B7:2A:34:83:91:7A:98:E0 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584E5A4EF31E50189A7CB02C6710 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df248ddf-04ee-393a-9dc6-1f22780e480c.roa Signing time: Wed 01 Jul 2026 09:10:20 +0000 ROA not before: Wed 01 Jul 2026 09:10:20 +0000 ROA not after: Tue 29 Sep 2026 09:10:20 +0000 asID: 64267 IP address blocks: 172.120.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4e:f3:1e:50:18:9a:7c:b0:2c:67:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 1 09:10:20 2026 GMT Not After : Sep 29 09:10:20 2026 GMT Subject: CN=91a9094e-1e33-4cc4-9607-a6b22ffc7beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b6:47:9d:5d:e5:1b:d0:3b:af:24:13:af:51: a1:f4:16:4a:ba:ed:86:2d:17:80:8c:25:24:c8:51: dd:ce:67:31:a2:9a:b8:8e:74:21:fd:d5:1d:a4:7d: e7:75:29:24:6a:72:e1:69:10:dc:aa:13:32:ba:b8: ba:d0:06:14:79:d7:da:3e:08:11:55:59:be:de:97: d1:cb:0a:41:ea:a9:bd:8d:21:18:59:a9:4f:d6:11: 05:69:ef:39:27:64:b8:87:cd:c3:a3:19:ef:81:b7: 81:03:ea:7d:05:e7:de:5b:da:ef:e1:40:dd:4b:97: 9e:01:3a:94:ef:71:b2:b4:89:8c:97:91:a2:93:83: 33:83:6b:79:aa:b2:31:b4:94:78:29:7f:19:0c:2c: 9d:2d:23:72:29:4a:3c:d7:76:29:e6:78:72:97:96: 14:b3:ff:26:9d:9d:be:4a:c2:fb:2a:3b:cb:e0:4d: 7d:58:c0:55:67:3e:5a:b7:a6:b4:4d:4b:b7:e9:73: ae:e7:78:06:14:37:b7:45:20:8c:83:5d:5f:79:07: 70:9c:29:0a:e4:75:25:b7:bb:39:cb:c9:68:18:43: c6:23:c4:16:60:3c:78:8b:ff:58:85:b2:7a:c2:c1: 7b:5f:e9:2d:7c:56:d9:01:6b:c5:26:af:2a:d3:b9: 05:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F8:E7:38:EC:97:DC:44:13:A4:C9:62:B7:2A:34:83:91:7A:98:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df248ddf-04ee-393a-9dc6-1f22780e480c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:df:9e:6c:50:fc:6f:7a:f0:d2:88:8b:b7:1c:f5:56:e4:f5: 86:0e:53:16:07:55:b0:58:f2:b2:02:c3:06:c5:ca:15:2d:e5: 8e:56:bc:13:62:8b:77:7f:7a:dd:e6:ca:1b:4d:3b:c9:ce:0e: a9:36:23:0e:a1:1f:8b:30:6f:27:ea:8c:c8:b5:71:fb:03:28: a3:d1:df:83:1a:eb:ba:da:47:74:be:f0:3a:ee:be:f6:ae:10: 7d:0f:f9:ef:ee:b6:1a:ed:f0:cb:11:ff:e8:02:d5:1a:19:8b: 5b:df:37:c5:6f:49:40:d1:90:b9:a3:89:34:ae:4c:8a:11:ae: 63:b4:9e:67:04:81:ae:14:61:8e:e4:3a:b5:d1:13:49:84:e4: 98:3d:a0:f1:54:99:c0:b0:f1:61:6f:6c:0f:2f:2e:f3:f9:aa: 5a:a6:0a:4f:f3:06:5c:3c:44:83:80:cd:6f:4c:46:54:fb:ef: e9:10:50:27:c0:70:2d:12:a2:de:10:2f:3b:1c:1b:8f:d5:33: 80:53:2c:cd:44:5a:27:35:f5:a9:45:9f:2a:c3:1f:64:c9:4e: 61:90:e6:7c:e4:14:45:d3:d1:e8:70:9f:42:3b:d0:11:94:26: c5:c7:4f:80:3b:48:dc:15:85:52:66:e4:40:1a:ed:32:2a:34: 88:91:12:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aTvMeUBiafLAsZxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDcwMTA5MTAyMFoXDTI2MDkyOTA5MTAyMFowLzEtMCsGA1UEAxMk OTFhOTA5NGUtMWUzMy00Y2M0LTk2MDctYTZiMjJmZmM3YmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LZHnV3lG9A7ryQTr1Gh9BZKuu2GLReAjCUk yFHdzmcxopq4jnQh/dUdpH3ndSkkanLhaRDcqhMyuri60AYUedfaPggRVVm+3pfR ywpB6qm9jSEYWalP1hEFae85J2S4h83DoxnvgbeBA+p9BefeW9rv4UDdS5eeATqU 73GytImMl5Gik4Mzg2t5qrIxtJR4KX8ZDCydLSNyKUo813Yp5nhyl5YUs/8mnZ2+ SsL7KjvL4E19WMBVZz5at6a0TUu36XOu53gGFDe3RSCMg11feQdwnCkK5HUlt7s5 y8loGEPGI8QWYDx4i/9YhbJ6wsF7X+ktfFbZAWvFJq8q07kFoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT45zjsl9xEE6TJYrcqNIORepjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGYyNDhkZGYtMDRlZS0z OTNhLTlkYzYtMWYyMjc4MGU0ODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHh9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXfnmxQ/G968NKIi7cc9Vbk9YYOUxYHVbBY8rICwwbFyhUt5Y5WvBNi i3d/et3myhtNO8nODqk2Iw6hH4swbyfqjMi1cfsDKKPR34Ma67raR3S+8Druvvau EH0P+e/uthrt8MsR/+gC1RoZi1vfN8VvSUDRkLmjiTSuTIoRrmO0nmcEga4UYY7k OrXRE0mE5Jg9oPFUmcCw8WFvbA8vLvP5qlqmCk/zBlw8RIOAzW9MRlT77+kQUCfA cC0Sot4QLzscG4/VM4BTLM1EWic19alFnyrDH2TJTmGQ5nzkFEXT0ehwn0I70BGU JsXHT4A7SNwVhVJm5EAa7TIqNIiREiI= -----END CERTIFICATE-----Generated at Fri Jul 10 17:22:02 2026 by rpki-client