$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f820cfaf-1435-31e5-8ca9-2d327e2fa484.roa File: f820cfaf-1435-31e5-8ca9-2d327e2fa484.roa (raw, json) Hash identifier: Y7BmK0mwEAKm0XQ28MW3T4KLNi0i58e0eYvlDxLT/Dc= Subject key identifier: 10:B4:BE:E8:EB:84:7C:0F:2E:EE:25:AE:20:4E:F3:51:4F:17:4D:7E Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584EA7923C84DB8356998608F480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f820cfaf-1435-31e5-8ca9-2d327e2fa484.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9009 IP address blocks: 172.120.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:3c:84:db:83:56:99:86:08:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bf57c7bf-5606-43ed-b635-960c7935f6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d8:77:b8:c9:5e:0b:f0:cc:1c:dc:ef:0c:09: 33:f6:94:07:4c:74:23:b7:53:41:a0:c8:61:28:75: 00:08:29:ca:34:15:40:0e:97:b8:ed:ef:ad:dd:c3: 42:68:88:49:8a:15:d4:d9:4d:66:1b:a8:20:bf:c7: 2b:ba:c5:54:cc:d6:8b:15:38:10:08:cf:8c:76:c3: 3e:13:50:1c:4e:57:15:5c:c8:37:04:91:48:84:88: 99:06:0c:5f:70:d2:70:2e:47:a0:c9:b7:9d:97:9d: c8:d4:91:22:e1:6b:d6:89:e9:e6:ae:07:ce:22:07: 55:8b:7b:6c:09:cd:cb:66:8e:e9:45:46:1f:c8:8f: bf:41:16:af:8e:d9:08:8a:ff:3f:09:3f:5b:aa:6b: 7e:b3:24:9f:9c:a1:36:6d:0c:ca:11:37:df:f5:a2: 7b:eb:0a:8d:40:cf:39:06:14:ea:45:7a:dc:5f:bd: d8:69:dd:68:56:b3:e9:3f:ee:31:91:c6:7a:98:6c: 97:2a:87:80:5a:64:43:ba:74:82:05:46:4c:1a:dd: 01:22:58:09:03:c3:67:d3:cf:b6:ed:46:cd:78:22: a0:b8:d8:c7:cd:18:48:0f:60:5e:30:23:78:75:3c: e9:79:84:e9:c6:96:4f:0c:66:98:c2:56:95:36:31: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B4:BE:E8:EB:84:7C:0F:2E:EE:25:AE:20:4E:F3:51:4F:17:4D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f820cfaf-1435-31e5-8ca9-2d327e2fa484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:74:2e:c1:ed:0b:43:0e:91:be:f9:e9:9f:44:9e:4c:05:32: 83:34:79:4d:c5:ff:68:81:56:4b:7e:a9:f4:11:e5:10:2d:d1: 43:11:22:20:86:b2:91:c2:e6:f4:af:42:41:96:b2:ac:3c:12: e9:4f:b3:4c:01:c3:02:86:fe:56:60:84:62:14:01:eb:98:a4: c5:0f:bf:99:41:6c:0b:e3:1b:ee:a7:8a:5b:eb:c3:c4:82:1f: 66:3f:61:d8:7d:9c:2d:b4:be:c3:30:e1:d1:46:2a:d0:78:22: 8e:d5:87:1c:9a:8a:15:3f:3c:e3:6d:cb:3c:43:41:66:30:62: 90:3d:d4:f4:b2:15:85:b0:b9:50:13:26:41:bc:04:89:95:2e: b8:d2:2a:d7:8b:ed:74:f4:b0:a3:f4:a9:04:3c:dd:93:6c:fd: c0:47:98:65:4f:43:77:af:25:2e:78:7e:4f:d8:4e:57:49:02: e4:ce:7f:24:d8:68:1e:9c:a8:88:70:25:42:95:a6:32:5e:fb: 66:3f:a2:e0:84:ad:10:05:90:3b:35:7c:bd:0a:92:98:12:ab: ea:36:f8:ad:c2:5a:15:07:64:ef:06:14:74:99:fe:b0:92:b2: 3f:7d:e4:7e:b5:98:ad:7f:55:3c:79:fb:8c:c8:8e:db:2e:e4: be:00:63:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkjyE24NWmYYI9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmY1N2M3YmYtNTYwNi00M2VkLWI2MzUtOTYwYzc5MzVmNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidh3uMleC/DMHNzvDAkz9pQHTHQjt1NBoMhh KHUACCnKNBVADpe47e+t3cNCaIhJihXU2U1mG6ggv8crusVUzNaLFTgQCM+MdsM+ E1AcTlcVXMg3BJFIhIiZBgxfcNJwLkegybedl53I1JEi4WvWienmrgfOIgdVi3ts Cc3LZo7pRUYfyI+/QRavjtkIiv8/CT9bqmt+sySfnKE2bQzKETff9aJ76wqNQM85 BhTqRXrcX73Yad1oVrPpP+4xkcZ6mGyXKoeAWmRDunSCBUZMGt0BIlgJA8Nn08+2 7UbNeCKguNjHzRhID2BeMCN4dTzpeYTpxpZPDGaYwlaVNjEbXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBC0vujrhHwPLu4lriBO81FPF01+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjgyMGNmYWYtMTQzNS0z MWU1LThjYTktMmQzMjdlMmZhNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHinMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV0LsHtC0MOkb756Z9EnkwFMoM0eU3F/2iBVkt+qfQR5RAt0UMRIiCG spHC5vSvQkGWsqw8EulPs0wBwwKG/lZghGIUAeuYpMUPv5lBbAvjG+6nilvrw8SC H2Y/Ydh9nC20vsMw4dFGKtB4Io7VhxyaihU/PONtyzxDQWYwYpA91PSyFYWwuVAT JkG8BImVLrjSKteL7XT0sKP0qQQ83ZNs/cBHmGVPQ3evJS54fk/YTldJAuTOfyTY aB6cqIhwJUKVpjJe+2Y/ouCErRAFkDs1fL0KkpgSq+o2+K3CWhUHZO8GFHSZ/rCS sj995H61mK1/VTx5+4zIjtsu5L4AYwo= -----END CERTIFICATE-----Generated at Tue Aug 25 10:59:58 2026 by rpki-client