$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a99dcfff-8cb1-30ae-be90-a7db1614c988.roa File: a99dcfff-8cb1-30ae-be90-a7db1614c988.roa (raw, json) Hash identifier: nPfROB0TG0AaLaryiiHWNpg/zsUQOvnVbTEI4V43kHM= Subject key identifier: 62:47:5C:5E:F7:8D:7E:E1:08:A5:83:57:1A:C3:7E:FF:7E:CF:F6:06 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F0A75FBB80CD3F704DC8E3F00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a99dcfff-8cb1-30ae-be90-a7db1614c988.roa Signing time: Wed 02 Sep 2026 11:31:15 +0000 ROA not before: Wed 02 Sep 2026 11:31:15 +0000 ROA not after: Tue 01 Dec 2026 12:31:15 +0000 asID: 6939 IP address blocks: 172.120.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:75:fb:b8:0c:d3:f7:04:dc:8e:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 2 11:31:15 2026 GMT Not After : Dec 1 12:31:15 2026 GMT Subject: CN=1fde911e-995c-4ed6-8561-d6cc175636b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:02:bc:d4:14:f7:30:a4:e4:04:24:fb:c8: 3a:a8:c2:e1:18:f3:d3:6b:b7:14:3e:3a:4a:ad:48: 77:eb:82:a9:ef:f4:18:66:30:42:1d:d1:21:d0:d1: c1:ac:58:3d:18:67:10:e4:4a:58:b0:04:b8:2d:75: 6b:b0:87:24:76:db:55:16:43:ad:4f:21:3b:a7:cd: 75:d8:ff:e6:9f:15:48:ea:15:7a:93:0c:05:f5:38: 40:e3:1d:ef:a8:4d:15:dc:e0:2b:de:bc:0c:58:54: 48:ed:79:48:9b:02:3c:6f:bf:1f:2d:1b:1c:a0:1d: 4f:28:12:8f:8a:12:cb:ed:6c:0b:cf:4e:49:0f:b3: a8:4d:b8:7a:30:bd:00:b3:5e:15:50:18:be:de:f2: a8:be:de:8c:5e:04:7d:9b:ec:7b:cf:20:e1:ab:95: 1e:fb:02:df:70:2b:98:db:31:48:5d:bc:e4:23:41: ff:67:ae:16:a8:cb:96:22:34:4a:56:21:24:38:7a: d6:e8:79:15:35:da:48:72:fb:74:c0:5b:ca:72:c4: b1:9b:8d:71:80:0c:3c:9b:ed:c6:c3:c9:43:25:f4: 15:9d:d1:f8:ea:76:e8:f9:09:77:d6:72:81:68:c0: 21:e1:93:4e:6f:de:0e:f1:8b:3e:12:54:70:43:a4: bb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:47:5C:5E:F7:8D:7E:E1:08:A5:83:57:1A:C3:7E:FF:7E:CF:F6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a99dcfff-8cb1-30ae-be90-a7db1614c988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5c:eb:fe:56:97:cf:c8:1d:36:3c:83:0e:62:39:e3:c6:a3: 7a:b7:1f:88:cd:ab:fb:53:bb:91:04:7e:ff:11:89:b9:b9:59: 11:88:a3:e5:da:c2:7c:b9:bf:6c:69:cb:16:bf:de:39:ee:f8: d7:43:ce:0d:ef:8f:fa:78:25:c1:5c:24:10:3d:be:2d:3a:39: 09:8d:a6:39:ac:59:82:74:04:7e:b3:1a:65:87:2d:4c:cf:9f: 2d:76:af:12:55:9f:9b:0f:cf:1a:6d:22:30:5c:59:45:61:5d: dc:aa:59:7a:3f:43:06:c7:20:93:cf:76:39:8c:c3:c7:d6:ff: 0b:46:f7:c7:a3:2e:44:8c:3f:54:56:a8:7d:0b:56:85:aa:cc: 76:42:0e:73:6b:ca:da:b9:39:39:4f:93:3e:a8:2f:8e:ab:bf: 07:c3:9f:5d:36:dd:8d:f0:d2:7a:44:67:ea:46:cf:82:73:71: aa:5d:ef:7b:1b:c0:51:91:a1:8e:a4:22:c9:9e:4a:de:6a:05: dd:33:e1:52:49:74:02:a9:56:79:30:f7:56:1c:09:a8:2f:07: 93:71:c4:2c:4b:c2:28:a9:90:2c:34:1f:4d:e6:1f:21:2a:46: 77:6d:af:13:fb:6d:0d:fc:07:d6:a1:22:67:90:8f:7e:d0:fe: c5:76:a9:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Kdfu4DNP3BNyOPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkwMjExMzExNVoXDTI2MTIwMTEyMzExNVowLzEtMCsGA1UEAxMk MWZkZTkxMWUtOTk1Yy00ZWQ2LTg1NjEtZDZjYzE3NTYzNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ACvNQU9zCk5AQk+8g6qMLhGPPTa7cUPjpK rUh364Kp7/QYZjBCHdEh0NHBrFg9GGcQ5EpYsAS4LXVrsIckdttVFkOtTyE7p811 2P/mnxVI6hV6kwwF9ThA4x3vqE0V3OAr3rwMWFRI7XlImwI8b78fLRscoB1PKBKP ihLL7WwLz05JD7OoTbh6ML0As14VUBi+3vKovt6MXgR9m+x7zyDhq5Ue+wLfcCuY 2zFIXbzkI0H/Z64WqMuWIjRKViEkOHrW6HkVNdpIcvt0wFvKcsSxm41xgAw8m+3G w8lDJfQVndH46nbo+Ql31nKBaMAh4ZNOb94O8Ys+ElRwQ6S7VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJHXF73jX7hCKWDVxrDfv9+z/YGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTk5ZGNmZmYtOGNiMS0z MGFlLWJlOTAtYTdkYjE2MTRjOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1c6/5Wl8/IHTY8gw5iOePGo3q3H4jNq/tTu5EEfv8Ribm5WRGIo+Xa wny5v2xpyxa/3jnu+NdDzg3vj/p4JcFcJBA9vi06OQmNpjmsWYJ0BH6zGmWHLUzP ny12rxJVn5sPzxptIjBcWUVhXdyqWXo/QwbHIJPPdjmMw8fW/wtG98ejLkSMP1RW qH0LVoWqzHZCDnNrytq5OTlPkz6oL46rvwfDn1023Y3w0npEZ+pGz4Jzcapd73sb wFGRoY6kIsmeSt5qBd0z4VJJdAKpVnkw91YcCagvB5NxxCxLwiipkCw0H03mHyEq RndtrxP7bQ38B9ahImeQj37Q/sV2qUE= -----END CERTIFICATE-----Generated at Sun Sep 27 03:02:36 2026 by rpki-client