$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/211d7af8-cf56-34a6-bf40-8a64f84fb1e6.roa File: 211d7af8-cf56-34a6-bf40-8a64f84fb1e6.roa (raw, json) Hash identifier: 22dVojcUJbGb1nUTYETRZHiuI6d8Bn+6t+fpBZY7yQI= Subject key identifier: DA:14:49:AA:F0:59:21:6E:BB:7C:29:22:4B:3A:77:92:60:BF:98:DE Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F49884DC5BA5F241B93E64640 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/211d7af8-cf56-34a6-bf40-8a64f84fb1e6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18779 IP address blocks: 172.120.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:4d:c5:ba:5f:24:1b:93:e6:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3c9cd5e3-c645-436f-805d-30747a012d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:55:bc:ca:27:ab:58:d8:e6:c9:34:df:89:03: 48:3e:98:aa:ae:01:5f:fa:39:47:da:0b:e0:1f:14: 13:e5:96:cc:cf:bf:0f:2a:68:3a:ba:85:82:38:34: 7a:98:5c:d9:75:b0:f4:8d:b8:45:2c:ff:ab:ab:9a: 08:f9:0c:80:b1:2c:1c:57:36:9a:49:a2:58:f4:fa: 6c:0e:70:06:a6:55:f5:48:ec:54:38:27:e0:80:b6: ee:ff:8a:bc:90:f6:dd:eb:00:be:70:ce:e9:22:5f: e7:8c:83:53:ee:e6:a7:2d:57:c1:c9:ff:42:54:fc: e7:f4:12:ef:d2:7f:0c:d7:c5:0f:01:85:c7:34:af: 91:b2:ba:ca:51:4b:18:05:e2:8e:d2:6e:a2:6e:68: 31:c1:f4:de:5e:53:27:1b:90:e0:e5:aa:75:7b:86: 59:e9:74:0e:3d:ea:0f:66:55:18:7c:68:b4:7e:af: cf:a0:f7:6d:06:c0:12:9d:b1:29:cc:02:29:68:35: 04:f5:5c:91:1a:e0:fd:67:b7:66:a2:bd:a5:e5:b7: 2e:53:f0:6b:30:03:d4:da:5a:73:7d:25:f6:1f:3b: 15:d5:a3:a4:fd:e0:17:07:29:fc:b7:96:b6:09:60: 6c:0d:3d:ae:a3:23:fb:7d:d9:fa:9e:cf:a1:a1:64: e4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:14:49:AA:F0:59:21:6E:BB:7C:29:22:4B:3A:77:92:60:BF:98:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/211d7af8-cf56-34a6-bf40-8a64f84fb1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d1:59:68:d6:18:b6:e7:e5:8c:17:ec:f6:78:cf:e4:52:5d: ba:67:1f:b4:c0:aa:93:c7:02:fd:87:d8:54:79:bf:9d:37:80: 66:35:75:ce:65:18:a9:74:83:c8:78:1d:48:ac:1d:24:40:3a: f0:65:e3:16:f2:aa:0e:61:38:1e:d9:52:f5:b1:9e:f1:b9:11: 42:b3:18:a0:7e:6e:d5:c6:93:fd:ee:c8:77:9b:b6:b3:00:0e: d9:28:2d:f3:f6:73:2d:18:d1:1e:8f:26:53:48:6d:5e:55:54: 1f:1f:16:71:c7:63:f8:e8:a1:af:dc:dc:a8:3b:db:fd:e5:5f: e2:35:cb:a7:63:f3:d0:0b:d7:ca:91:a2:8a:59:d1:53:b3:ce: a0:b1:03:6e:31:29:30:34:7d:a5:41:11:38:bd:9e:30:91:03: 3b:8e:5d:39:91:73:51:50:1f:15:27:38:20:b6:99:9e:3b:60: 2e:76:7e:24:c6:51:0a:a0:fc:c7:8f:83:a7:07:72:09:84:ef: 87:54:45:31:2d:9e:0b:96:36:8f:52:be:84:d1:4b:38:92:e0: ed:0f:3e:6d:54:bf:23:8c:63:e9:0c:08:1f:7b:ee:4c:da:94: 73:e3:03:86:12:88:9f:ba:9d:34:72:6b:69:f9:5a:79:8b:bf: a7:65:e3:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiE3Ful8kG5PmRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2M5Y2Q1ZTMtYzY0NS00MzZmLTgwNWQtMzA3NDdhMDEyZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VW8yierWNjmyTTfiQNIPpiqrgFf+jlH2gvg HxQT5ZbMz78PKmg6uoWCODR6mFzZdbD0jbhFLP+rq5oI+QyAsSwcVzaaSaJY9Pps DnAGplX1SOxUOCfggLbu/4q8kPbd6wC+cM7pIl/njINT7uanLVfByf9CVPzn9BLv 0n8M18UPAYXHNK+RsrrKUUsYBeKO0m6ibmgxwfTeXlMnG5Dg5ap1e4ZZ6XQOPeoP ZlUYfGi0fq/PoPdtBsASnbEpzAIpaDUE9VyRGuD9Z7dmor2l5bcuU/BrMAPU2lpz fSX2HzsV1aOk/eAXByn8t5a2CWBsDT2uoyP7fdn6ns+hoWTkdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoUSarwWSFuu3wpIks6d5Jgv5jeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjExZDdhZjgtY2Y1Ni0z NGE2LWJmNDAtOGE2NGY4NGZiMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzRWWjWGLbn5YwX7PZ4z+RSXbpnH7TAqpPHAv2H2FR5v503gGY1dc5l GKl0g8h4HUisHSRAOvBl4xbyqg5hOB7ZUvWxnvG5EUKzGKB+btXGk/3uyHebtrMA DtkoLfP2cy0Y0R6PJlNIbV5VVB8fFnHHY/jooa/c3Kg72/3lX+I1y6dj89AL18qR oopZ0VOzzqCxA24xKTA0faVBETi9njCRAzuOXTmRc1FQHxUnOCC2mZ47YC52fiTG UQqg/MePg6cHcgmE74dURTEtnguWNo9SvoTRSziS4O0PPm1UvyOMY+kMCB977kza lHPjA4YSiJ+6nTRya2n5WnmLv6dl4/s= -----END CERTIFICATE-----Generated at Sat Oct 3 10:55:49 2026 by rpki-client