$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e1bec778-7efe-3789-8f15-9906df1b6073.roa File: e1bec778-7efe-3789-8f15-9906df1b6073.roa (raw, json) Hash identifier: nq+8qLeTPUC6NEo+vkbfTnMCuwuw4q86Jx+12hUWiNk= Subject key identifier: 5A:22:62:BA:C0:38:80:95:2D:28:94:A4:86:44:2F:92:25:73:38:D9 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584EC0A763DED5FF11E98A847B40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e1bec778-7efe-3789-8f15-9906df1b6073.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 7018 IP address blocks: 172.121.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:63:de:d5:ff:11:e9:8a:84:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=6852f144-dc80-47cc-9874-dc76a45ceff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:1e:e6:29:06:41:3e:c2:48:3e:ee:97:8c: 9d:59:c8:5c:dd:f6:d6:2a:eb:da:40:b3:9e:86:b1: 25:cc:19:72:aa:0f:f1:46:f9:20:59:44:81:05:3c: c6:3e:bc:14:01:a1:95:71:87:64:ed:c4:8e:23:3d: 9a:db:86:65:de:ab:ae:30:5e:be:f6:39:66:f2:3c: 73:84:36:5b:31:62:5c:14:0a:37:6f:95:1b:ec:4f: 54:fd:82:83:d6:24:ca:a7:35:8b:81:df:08:d6:43: c2:e5:cc:86:58:0b:05:47:b2:8c:86:ee:05:d1:ce: dc:4e:2a:bb:8d:0f:8b:2e:81:f8:df:36:d9:10:30: d5:7f:4f:10:28:19:89:4e:a2:d6:2b:a5:e7:14:04: bd:4b:b9:19:ba:66:5e:25:b8:3a:bb:19:d3:6c:b4: 32:c6:d3:42:85:7e:12:8b:80:55:a4:56:82:91:bb: 80:ac:18:63:c8:b6:23:17:4d:e6:c2:af:2f:7f:da: a4:6c:1f:d0:aa:02:68:a2:a3:0a:58:de:ce:45:25: d9:3a:15:b7:5c:6a:c7:fb:e8:1c:be:14:75:dc:66: 96:bd:d0:24:66:87:88:3c:80:87:47:24:87:cb:96: 4f:ea:f0:db:de:8e:b3:9a:f4:d5:f3:51:1d:cb:2a: 13:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:22:62:BA:C0:38:80:95:2D:28:94:A4:86:44:2F:92:25:73:38:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e1bec778-7efe-3789-8f15-9906df1b6073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ce:58:46:00:eb:d9:15:4c:96:43:e5:05:50:67:4b:48:4d: a5:a0:d1:83:a0:a5:00:71:1c:72:94:50:b3:5f:86:77:ec:12: 22:77:ff:ab:0d:32:c0:e8:e0:71:98:30:a0:89:dc:aa:53:8f: ba:89:c1:81:37:41:e7:dc:d2:13:74:8c:bd:29:0f:8b:f9:d5: a0:6f:0f:58:ec:5c:e4:84:e8:52:d1:f5:12:8f:93:07:2e:40: 82:f7:60:1b:ac:eb:e9:d0:15:62:6e:42:2a:33:91:67:a4:47: ed:9e:82:ef:e2:be:36:4b:98:af:51:bb:1a:e0:91:78:e9:90: 2b:38:47:d5:e3:14:6f:0f:3d:11:9f:5c:9f:b5:c5:07:ea:45: 4d:c9:20:cb:ec:77:78:8d:ee:5c:6e:f7:9a:fc:e1:33:24:41: 4f:9f:4f:2d:e1:ed:ea:80:a4:49:f6:98:73:f1:ec:c9:5c:be: a2:a2:00:3b:b0:9c:65:95:c7:53:dd:36:64:8a:87:4f:b7:ba: 94:3b:92:59:19:91:15:a8:45:f3:c3:75:00:23:5f:b8:0b:d0: e5:7b:f5:52:2f:d3:30:e2:5f:ee:0b:cf:93:d3:48:01:35:a4: e1:c0:ea:83:53:c5:f3:45:9d:08:63:36:91:64:00:a7:a4:9b: 80:04:a7:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap2Pe1f8R6YqEe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk Njg1MmYxNDQtZGM4MC00N2NjLTk4NzQtZGM3NmE0NWNlZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh4e5ikGQT7CSD7ul4ydWchc3fbWKuvaQLOe hrElzBlyqg/xRvkgWUSBBTzGPrwUAaGVcYdk7cSOIz2a24Zl3quuMF6+9jlm8jxz hDZbMWJcFAo3b5Ub7E9U/YKD1iTKpzWLgd8I1kPC5cyGWAsFR7KMhu4F0c7cTiq7 jQ+LLoH43zbZEDDVf08QKBmJTqLWK6XnFAS9S7kZumZeJbg6uxnTbLQyxtNChX4S i4BVpFaCkbuArBhjyLYjF03mwq8vf9qkbB/QqgJooqMKWN7ORSXZOhW3XGrH++gc vhR13GaWvdAkZoeIPICHRySHy5ZP6vDb3o6zmvTV81EdyyoT/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoiYrrAOICVLSiUpIZEL5IlczjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTFiZWM3NzgtN2VmZS0z Nzg5LThmMTUtOTkwNmRmMWI2MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrOWEYA69kVTJZD5QVQZ0tITaWg0YOgpQBxHHKUULNfhnfsEiJ3/6sN MsDo4HGYMKCJ3KpTj7qJwYE3Qefc0hN0jL0pD4v51aBvD1jsXOSE6FLR9RKPkwcu QIL3YBus6+nQFWJuQiozkWekR+2egu/ivjZLmK9RuxrgkXjpkCs4R9XjFG8PPRGf XJ+1xQfqRU3JIMvsd3iN7lxu95r84TMkQU+fTy3h7eqApEn2mHPx7MlcvqKiADuw nGWVx1PdNmSKh0+3upQ7klkZkRWoRfPDdQAjX7gL0OV79VIv0zDiX+4Lz5PTSAE1 pOHA6oNTxfNFnQhjNpFkAKekm4AEp8A= -----END CERTIFICATE-----Generated at Tue Sep 1 02:39:35 2026 by rpki-client