$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c159712-c770-3caa-aa1e-935b219e36f7.roa File: 2c159712-c770-3caa-aa1e-935b219e36f7.roa (raw, json) Hash identifier: AEu6ymlp6R5giSoVlsH55ds+YtEORkaqXGYJjLVnLF4= Subject key identifier: 28:9E:47:AE:0D:49:A7:0E:A7:EA:63:E6:CE:62:29:60:DD:C1:0A:A9 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F497F7B482C4965EFA0351500 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c159712-c770-3caa-aa1e-935b219e36f7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3257 IP address blocks: 172.121.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:7b:48:2c:49:65:ef:a0:35:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=09d335eb-0b59-4eed-b1b0-502bf5751b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:8a:ab:7a:b2:2a:a7:09:c9:ca:87:9c:1d: 1f:e8:c7:9b:be:e5:60:10:51:35:ae:6c:ef:f6:60: 4e:f3:9e:47:0a:33:eb:bc:d8:48:f8:99:2b:8c:2f: 81:d1:d2:b3:9c:c1:e1:b0:9a:ac:26:e9:53:85:19: 53:ca:bd:64:07:12:a5:19:78:a5:49:41:22:4a:4c: 7b:2b:10:03:c0:9c:ce:4a:cf:60:f8:dc:33:47:55: d2:09:29:94:d8:d8:f0:93:25:8b:6b:a7:ba:57:31: b5:a7:55:cf:64:42:ad:62:02:c8:ad:15:f3:bb:34: ba:40:b4:c2:d7:35:cf:d9:c3:40:2e:5d:0a:ad:03: b1:49:21:fd:10:59:80:7e:56:f4:f6:69:ac:bf:8a: db:fd:99:86:9c:ce:92:43:29:44:4a:ae:c4:1c:ce: 77:28:e7:7b:97:3d:dd:b6:f4:67:09:51:2a:48:e1: 60:a9:35:4b:1a:45:ab:bc:b8:0b:06:ee:1c:83:e0: e9:7d:91:b9:7c:79:73:32:a5:2a:74:8b:35:e4:b1: 8c:d7:e0:c1:f3:17:05:61:7a:e9:b7:1d:4c:e2:f6: 81:8f:f6:81:fd:e8:8e:8d:64:64:25:d4:31:17:07: 99:f5:9b:32:83:ca:05:a1:12:92:09:d3:1f:5f:b3: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9E:47:AE:0D:49:A7:0E:A7:EA:63:E6:CE:62:29:60:DD:C1:0A:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c159712-c770-3caa-aa1e-935b219e36f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d5:90:e2:cc:b6:11:4e:ca:10:e2:a2:2c:51:4e:42:12:b7: 4a:c4:45:c4:7f:a2:97:54:eb:23:4c:53:63:4b:ba:fa:92:21: fd:9a:28:97:a1:58:04:41:e1:aa:c8:c0:c7:0c:69:38:8f:35: cc:58:0c:5c:80:2e:b4:30:02:d5:66:69:73:dc:0e:ce:dd:18: 9b:2c:d3:25:db:80:37:1a:ae:c9:38:39:7d:00:14:32:2c:3b: 58:24:83:4f:5c:8e:38:ed:e2:8a:43:09:ed:58:4b:bb:af:ba: 15:a7:00:ec:bb:22:f1:9a:87:a8:82:01:10:1b:12:01:58:dd: 1d:28:01:f5:d9:32:8c:57:e9:4d:df:16:bc:74:1d:9a:fa:33: 87:fd:03:b9:d5:a2:bf:72:db:cb:63:46:97:74:1f:7d:68:d8: c0:92:0d:1a:65:e6:20:71:4d:e6:bf:74:e7:77:d4:43:58:71: 72:68:8a:9f:0e:61:0e:e2:4e:f9:11:fb:0b:d6:72:cf:ce:bb: db:ba:c4:c7:4b:ff:fe:a1:ef:30:28:41:0a:27:27:cd:24:d5: 92:9e:2c:f7:84:29:6b:93:2c:cc:a2:c0:90:8c:c6:85:0e:de: ea:c8:a1:c3:f7:1c:05:6a:e8:d0:59:66:c5:35:99:1f:3d:f5: 0a:9e:e7:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf3tILEll76A1FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDlkMzM1ZWItMGI1OS00ZWVkLWIxYjAtNTAyYmY1NzUxYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukCKq3qyKqcJycqHnB0f6MebvuVgEFE1rmzv 9mBO855HCjPrvNhI+JkrjC+B0dKznMHhsJqsJulThRlTyr1kBxKlGXilSUEiSkx7 KxADwJzOSs9g+NwzR1XSCSmU2NjwkyWLa6e6VzG1p1XPZEKtYgLIrRXzuzS6QLTC 1zXP2cNALl0KrQOxSSH9EFmAflb09mmsv4rb/ZmGnM6SQylESq7EHM53KOd7lz3d tvRnCVEqSOFgqTVLGkWrvLgLBu4cg+DpfZG5fHlzMqUqdIs15LGM1+DB8xcFYXrp tx1M4vaBj/aB/eiOjWRkJdQxFweZ9Zsyg8oFoRKSCdMfX7O7rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCieR64NSacOp+pj5s5iKWDdwQqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmMxNTk3MTItYzc3MC0z Y2FhLWFhMWUtOTM1YjIxOWUzNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvVkOLMthFOyhDioixRTkISt0rERcR/opdU6yNMU2NLuvqSIf2aKJeh WARB4arIwMcMaTiPNcxYDFyALrQwAtVmaXPcDs7dGJss0yXbgDcarsk4OX0AFDIs O1gkg09cjjjt4opDCe1YS7uvuhWnAOy7IvGah6iCARAbEgFY3R0oAfXZMoxX6U3f Frx0HZr6M4f9A7nVor9y28tjRpd0H31o2MCSDRpl5iBxTea/dOd31ENYcXJoip8O YQ7iTvkR+wvWcs/Ou9u6xMdL//6h7zAoQQonJ80k1ZKeLPeEKWuTLMyiwJCMxoUO 3urIocP3HAVq6NBZZsU1mR899Qqe5wI= -----END CERTIFICATE-----Generated at Sun Oct 4 11:13:26 2026 by rpki-client