$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f8972f-b224-3de8-9a37-5e776d3b130b.roa File: 38f8972f-b224-3de8-9a37-5e776d3b130b.roa (raw, json) Hash identifier: o9FpTYnCj0ksBkfiSU4QLfSxUeUh2Gvk5S1aYlA39Mk= Subject key identifier: 2B:C4:4A:21:AB:AD:EF:B5:B4:61:17:C2:CA:AD:09:37:11:FD:65:7F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584E5E7A027BDD577A9B8BB8EF80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f8972f-b224-3de8-9a37-5e776d3b130b.roa Signing time: Thu 02 Jul 2026 21:00:12 +0000 ROA not before: Thu 02 Jul 2026 21:00:12 +0000 ROA not after: Wed 30 Sep 2026 21:00:12 +0000 asID: 18779 IP address blocks: 172.121.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:7a:02:7b:dd:57:7a:9b:8b:b8:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 2 21:00:12 2026 GMT Not After : Sep 30 21:00:12 2026 GMT Subject: CN=393687c0-9a9d-4e16-aa65-97733ff38e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2b:34:c6:3a:99:1f:80:6c:0a:89:72:38:f6: 98:87:f4:ea:32:79:6f:37:ac:70:30:2d:67:3a:39: fb:f3:17:0e:a0:29:a4:7a:b0:c5:b4:ca:60:c8:7d: 89:62:f3:7d:44:f3:0d:5b:f4:9d:3e:77:d3:09:6d: 77:a5:f0:3c:ea:2b:d7:c6:a4:a0:14:88:09:82:0e: 4d:09:87:4e:4a:31:98:e0:c3:5b:9d:b1:2b:44:cc: 09:4d:db:19:6d:0e:03:49:a5:d8:a7:e3:b0:8d:dc: 95:e7:bb:e4:b4:fb:15:5f:5e:02:a5:f3:76:04:9f: 2c:64:ba:1e:a8:75:ea:90:91:87:18:80:c9:bf:76: ea:c5:a9:c8:44:1b:5f:0f:da:02:f8:8f:da:f9:a5: 4b:44:62:92:1d:6e:5e:4e:99:f8:29:21:ec:b6:b1: 10:54:ca:18:90:aa:3e:42:be:e2:ff:98:df:72:56: 31:5a:a6:78:a3:f8:ef:43:8b:a3:e7:7d:5b:1b:c5: f5:9e:3c:01:f2:34:3d:50:a7:ed:d3:76:fe:f6:00: ab:1b:cf:da:98:43:4a:e1:d8:4f:af:0b:46:28:87: e1:71:3e:d6:9c:cc:10:25:86:6a:1a:4f:73:3a:6e: 31:75:b6:a8:1f:f3:9b:89:d7:e2:8c:ae:a6:7e:a4: cc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C4:4A:21:AB:AD:EF:B5:B4:61:17:C2:CA:AD:09:37:11:FD:65:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f8972f-b224-3de8-9a37-5e776d3b130b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:37:c2:4a:6f:37:14:81:f2:d8:56:d5:96:1a:df:a5:3e:b5: 07:81:e1:f8:ad:a2:63:f7:03:6d:8b:c4:ee:05:dd:62:bf:a9: 5d:40:1a:4e:69:5e:cb:02:6f:7f:f3:6b:2c:fd:b3:b6:11:8f: 27:b4:d8:72:7c:31:aa:7c:2f:8f:c7:e9:f7:75:ad:a3:fa:5c: 64:4e:d7:a5:01:a0:fb:58:4d:97:b8:ec:82:2d:6e:43:76:22: 30:3b:6f:31:87:e4:7e:f8:39:72:a4:77:e5:64:4c:48:4b:29: 88:7b:31:8e:7a:ca:bd:24:12:1a:e7:78:b8:27:79:0e:45:c9: f8:64:73:ba:96:1f:8a:b1:f5:39:fc:df:b0:3e:bb:08:7f:0d: 2f:33:10:c4:fe:36:76:db:37:38:de:78:97:8c:cb:3f:2b:71: dd:23:23:ab:95:9d:1c:b6:5c:71:91:2d:fe:6f:b5:54:e4:48: 26:33:ed:fa:98:97:5f:97:34:27:6e:3e:4f:70:9d:12:cc:e6: 94:76:a0:5f:db:b4:ba:8d:6d:43:bc:cc:cb:c7:67:da:91:b7: b9:c8:df:fc:cc:a7:88:41:60:68:4c:de:4f:ef:80:d0:dd:46: 62:1b:36:b8:55:ce:6a:8c:5d:ad:70:26:51:ff:b5:09:a0:3e: 8c:5e:d7:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eegJ73Vd6m4u474AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk MzkzNjg3YzAtOWE5ZC00ZTE2LWFhNjUtOTc3MzNmZjM4ZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCs0xjqZH4BsColyOPaYh/TqMnlvN6xwMC1n Ojn78xcOoCmkerDFtMpgyH2JYvN9RPMNW/SdPnfTCW13pfA86ivXxqSgFIgJgg5N CYdOSjGY4MNbnbErRMwJTdsZbQ4DSaXYp+OwjdyV57vktPsVX14CpfN2BJ8sZLoe qHXqkJGHGIDJv3bqxanIRBtfD9oC+I/a+aVLRGKSHW5eTpn4KSHstrEQVMoYkKo+ Qr7i/5jfclYxWqZ4o/jvQ4uj531bG8X1njwB8jQ9UKft03b+9gCrG8/amENK4dhP rwtGKIfhcT7WnMwQJYZqGk9zOm4xdbaoH/ObidfijK6mfqTMDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvESiGrre+1tGEXwsqtCTcR/WV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzhmODk3MmYtYjIyNC0z ZGU4LTlhMzctNWU3NzZkM2IxMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo3wkpvNxSB8thW1ZYa36U+tQeB4fitomP3A22LxO4F3WK/qV1AGk5p XssCb3/zayz9s7YRjye02HJ8Map8L4/H6fd1raP6XGRO16UBoPtYTZe47IItbkN2 IjA7bzGH5H74OXKkd+VkTEhLKYh7MY56yr0kEhrneLgneQ5Fyfhkc7qWH4qx9Tn8 37A+uwh/DS8zEMT+NnbbNzjeeJeMyz8rcd0jI6uVnRy2XHGRLf5vtVTkSCYz7fqY l1+XNCduPk9wnRLM5pR2oF/btLqNbUO8zMvHZ9qRt7nI3/zMp4hBYGhM3k/vgNDd RmIbNrhVzmqMXa1wJlH/tQmgPoxe120= -----END CERTIFICATE-----Generated at Fri Jul 24 14:48:20 2026 by rpki-client