$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b1bc125-2296-3d11-9115-45e364d5e775.roa File: 2b1bc125-2296-3d11-9115-45e364d5e775.roa (raw, json) Hash identifier: 8d5C6rBuh76LVxt1HnK9F0EWy5nKrRURjznrHvYOB9I= Subject key identifier: F6:6E:B5:39:0A:CA:32:E5:34:A6:4E:83:20:69:4B:42:3A:6F:A0:11 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F4989D05CD0E762568C631380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b1bc125-2296-3d11-9115-45e364d5e775.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 172.121.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:d0:5c:d0:e7:62:56:8c:63:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=477c6844-d645-4c19-bade-5e1855cc3298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7b:85:77:78:16:ad:e0:2f:74:d7:8c:fe:00: 1f:39:36:e3:d4:0e:a3:9b:aa:b3:f4:f6:c9:51:1d: b1:1d:50:47:5b:79:94:4e:f8:2c:2d:9f:6a:92:7b: e2:b5:d3:a9:bb:00:98:9a:ca:ab:d4:d7:23:25:a1: db:af:10:c1:01:34:ff:70:b2:b1:7e:c1:66:c6:25: b9:8a:70:54:34:12:f9:85:53:24:e6:3d:b3:01:d8: 29:27:78:58:d4:59:85:11:f7:70:62:19:37:40:a2: 20:96:41:19:ac:41:d1:3d:bd:94:8b:e5:09:69:f8: 95:ba:b1:17:4f:5f:48:25:0c:c3:70:8c:c1:55:b5: e8:3a:16:f0:b1:60:78:59:e9:72:5f:63:31:2a:44: 73:b4:55:71:ac:05:7d:b0:58:1a:df:1f:df:06:f8: cb:c7:c6:3a:06:26:e1:d8:08:1a:9d:df:99:56:0e: 54:5e:7e:c7:6f:f6:1d:c8:2e:70:c5:ad:0b:bf:35: be:67:73:91:c5:b0:62:cf:80:84:8f:18:28:f3:e6: 4a:7f:b4:c3:d2:4d:d1:b5:6f:3e:3e:d3:33:aa:7d: d6:82:33:4a:2c:be:dd:28:6c:a9:23:5f:41:7f:35: 14:a7:e0:4b:2b:cc:d6:ea:fa:ae:c4:1a:ea:5b:69: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6E:B5:39:0A:CA:32:E5:34:A6:4E:83:20:69:4B:42:3A:6F:A0:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b1bc125-2296-3d11-9115-45e364d5e775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7e:2c:c6:f7:e9:4c:e6:e2:60:13:3e:88:f4:ff:84:f8:3b: 0c:9e:53:a7:00:c9:5f:50:b7:f1:b3:81:e5:24:44:d7:aa:5e: 24:8e:33:92:b1:63:22:d8:c2:9c:34:6a:6c:d1:af:91:78:de: 23:16:0a:c2:70:1a:05:63:e5:32:cc:42:47:e6:cb:7a:62:c8: 4f:e5:f8:93:f9:1e:31:4d:0b:2d:b2:3d:a9:60:e0:ff:7b:40: 87:64:a6:93:f0:c6:d5:a1:ac:49:61:46:f8:73:56:e2:14:da: 65:49:d5:b7:8b:aa:20:31:20:68:7a:62:d6:39:a8:a9:02:6e: 27:0f:89:e8:89:61:d9:23:6a:6c:df:22:58:49:f6:80:03:d9: 8a:19:42:48:81:a8:b3:8a:58:51:84:aa:1d:8d:83:c2:99:7c: 3d:af:01:9e:d3:ad:29:4d:92:31:d3:00:11:94:f8:d4:a3:a5: 65:d5:ea:62:7d:d1:ac:c3:0f:22:51:e2:57:8c:2b:d1:02:ad: 0f:9d:c1:21:b3:89:4f:2c:4d:be:71:40:11:00:d1:54:63:d7: 6f:96:b4:71:43:34:60:55:38:83:88:0b:c6:c9:62:9a:6f:8b: 5f:9c:2d:d0:b6:d0:69:0a:75:00:bb:e6:08:d3:2d:d7:4b:c0: 9d:fc:1c:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JidBc0OdiVoxjE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDc3YzY4NDQtZDY0NS00YzE5LWJhZGUtNWUxODU1Y2MzMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXuFd3gWreAvdNeM/gAfOTbj1A6jm6qz9PbJ UR2xHVBHW3mUTvgsLZ9qknvitdOpuwCYmsqr1NcjJaHbrxDBATT/cLKxfsFmxiW5 inBUNBL5hVMk5j2zAdgpJ3hY1FmFEfdwYhk3QKIglkEZrEHRPb2Ui+UJafiVurEX T19IJQzDcIzBVbXoOhbwsWB4WelyX2MxKkRztFVxrAV9sFga3x/fBvjLx8Y6Bibh 2Agand+ZVg5UXn7Hb/YdyC5wxa0LvzW+Z3ORxbBiz4CEjxgo8+ZKf7TD0k3RtW8+ PtMzqn3WgjNKLL7dKGypI19BfzUUp+BLK8zW6vquxBrqW2lf8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZutTkKyjLlNKZOgyBpS0I6b6ARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmIxYmMxMjUtMjI5Ni0z ZDExLTkxMTUtNDVlMzY0ZDVlNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB+LMb36Uzm4mATPoj0/4T4OwyeU6cAyV9Qt/GzgeUkRNeqXiSOM5Kx YyLYwpw0amzRr5F43iMWCsJwGgVj5TLMQkfmy3piyE/l+JP5HjFNCy2yPalg4P97 QIdkppPwxtWhrElhRvhzVuIU2mVJ1beLqiAxIGh6YtY5qKkCbicPieiJYdkjamzf IlhJ9oAD2YoZQkiBqLOKWFGEqh2Ng8KZfD2vAZ7TrSlNkjHTABGU+NSjpWXV6mJ9 0azDDyJR4leMK9ECrQ+dwSGziU8sTb5xQBEA0VRj12+WtHFDNGBVOIOIC8bJYppv i1+cLdC20GkKdQC75gjTLddLwJ38HLg= -----END CERTIFICATE-----Generated at Sun Oct 11 18:40:20 2026 by rpki-client