$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aee1652b-f5e5-3c3d-ae9f-116cb538b810.roa File: aee1652b-f5e5-3c3d-ae9f-116cb538b810.roa (raw, json) Hash identifier: XdAphKvDbkh2yCpiEtm43DH9tXfkwFdmJwzbs35YHSc= Subject key identifier: BA:02:BC:8A:47:8B:48:6E:DE:00:65:7F:99:4A:81:E5:69:D7:5C:29 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F4C3DE2DA93BEE7151FEE2040 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aee1652b-f5e5-3c3d-ae9f-116cb538b810.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 212238 IP address blocks: 172.120.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e2:da:93:be:e7:15:1f:ee:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=50824c91-bef8-4fcf-9a09-29d1bb3f6e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:16:65:8d:b7:bf:86:6a:a4:98:59:3b:09: 9b:40:98:ca:d2:13:8c:41:bf:65:2e:9c:67:76:6e: e0:38:1a:47:25:99:b6:a7:f9:6c:51:1f:0d:32:e0: eb:2c:20:aa:e0:74:03:a5:a7:e7:70:16:43:b0:2a: 6a:fd:2d:a5:51:6d:9b:a1:f7:6d:8f:06:d2:0d:d0: f7:73:f5:ad:d3:90:95:96:7e:c7:02:72:3b:84:3b: ff:b9:4b:c8:e8:30:65:b9:3c:e2:74:cb:b7:c0:3f: 38:2a:7d:28:5a:4d:1a:2b:65:b0:38:3e:d4:a2:5b: 6c:a9:b5:d0:5c:a6:b0:89:2b:5c:c0:23:1e:d5:ad: 28:0a:2b:dd:65:74:9a:7f:e0:b2:ac:85:b6:92:b8: 92:c3:ed:6d:6b:bf:14:9f:a5:3e:a8:f4:eb:26:08: 20:2d:a1:72:45:c0:a5:47:91:eb:89:ea:ce:cc:4e: 2c:a6:0b:5b:31:5f:89:6f:e3:e2:b2:f7:68:3e:7d: 00:d4:ce:ca:63:22:3b:1a:22:6b:f7:8d:63:6d:5e: 44:13:fe:a0:22:21:40:a4:73:be:15:83:81:3c:88: a8:99:52:7a:2b:9b:78:9e:2e:53:32:94:b6:0e:4a: bd:8d:38:01:92:ec:7f:ae:cd:89:9d:6b:58:04:23: aa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:02:BC:8A:47:8B:48:6E:DE:00:65:7F:99:4A:81:E5:69:D7:5C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aee1652b-f5e5-3c3d-ae9f-116cb538b810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8a:f5:f3:1d:ac:d3:10:0e:54:62:00:f4:6b:13:e9:8b:d9: e0:42:49:33:c9:9f:f2:5a:9f:36:86:d8:30:4c:d7:1b:1a:bf: 1f:ae:02:64:cd:90:6d:d2:1f:2e:52:97:fb:11:7b:77:17:1b: 03:49:b2:f3:ad:2c:48:46:c3:c0:a7:b3:81:a5:12:3f:b0:28: 19:c2:5c:7e:c2:9d:58:da:14:6f:5b:7d:c4:c4:04:8e:53:b8: b3:63:60:82:6e:9a:97:d5:e3:65:50:29:d4:90:c5:53:40:50: f7:c9:ae:12:89:80:be:1b:6e:a6:54:01:80:16:57:c6:a3:93: ea:10:14:77:07:60:87:34:3b:e2:e5:2b:86:0b:af:46:bf:8b: f0:4e:39:e0:91:8c:fb:85:ec:38:4e:53:8b:bf:7f:f1:41:83: b9:f5:5b:f3:92:bc:a2:d9:9d:c8:c1:49:bf:1f:22:74:d1:cc: 11:0e:b7:7b:f0:63:46:04:9a:b8:ca:f8:48:58:23:5d:de:63: e6:3e:67:a5:50:7a:45:32:69:fa:81:93:0a:f9:7c:35:8d:d4: 38:56:5a:e2:92:ee:a8:22:3d:8d:3b:43:93:f5:76:c9:ce:5b: cd:c1:71:82:46:a7:5b:24:a8:59:bd:de:3b:b3:aa:d7:5d:a0: 63:ac:b5:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeLak77nFR/uIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTA4MjRjOTEtYmVmOC00ZmNmLTlhMDktMjlkMWJiM2Y2ZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYQWZY23v4ZqpJhZOwmbQJjK0hOMQb9lLpxn dm7gOBpHJZm2p/lsUR8NMuDrLCCq4HQDpafncBZDsCpq/S2lUW2bofdtjwbSDdD3 c/Wt05CVln7HAnI7hDv/uUvI6DBluTzidMu3wD84Kn0oWk0aK2WwOD7UoltsqbXQ XKawiStcwCMe1a0oCivdZXSaf+CyrIW2kriSw+1ta78Un6U+qPTrJgggLaFyRcCl R5HrierOzE4spgtbMV+Jb+PisvdoPn0A1M7KYyI7GiJr941jbV5EE/6gIiFApHO+ FYOBPIiomVJ6K5t4ni5TMpS2Dkq9jTgBkux/rs2JnWtYBCOqCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoCvIpHi0hu3gBlf5lKgeVp11wpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWVlMTY1MmItZjVlNS0z YzNkLWFlOWYtMTE2Y2I1MzhiODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuK9fMdrNMQDlRiAPRrE+mL2eBCSTPJn/JanzaG2DBM1xsavx+uAmTN kG3SHy5Sl/sRe3cXGwNJsvOtLEhGw8Cns4GlEj+wKBnCXH7CnVjaFG9bfcTEBI5T uLNjYIJumpfV42VQKdSQxVNAUPfJrhKJgL4bbqZUAYAWV8ajk+oQFHcHYIc0O+Ll K4YLr0a/i/BOOeCRjPuF7DhOU4u/f/FBg7n1W/OSvKLZncjBSb8fInTRzBEOt3vw Y0YEmrjK+EhYI13eY+Y+Z6VQekUyafqBkwr5fDWN1DhWWuKS7qgiPY07Q5P1dsnO W83BcYJGp1skqFm93juzqtddoGOstdw= -----END CERTIFICATE-----Generated at Wed Oct 14 08:00:41 2026 by rpki-client