$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8c89e41-a942-3ca9-9154-4d6c3e209c75.roa File: b8c89e41-a942-3ca9-9154-4d6c3e209c75.roa (raw, json) Hash identifier: ZL0KzPdZVFQDgBNgnGcce5PKiOpsiSpZ2xRr4OhCMH0= Subject key identifier: 38:8F:DB:08:CE:9F:4F:33:08:C2:E0:C1:B4:9C:DA:14:92:79:B4:71 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F57682DAF36DBBE55098AB480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8c89e41-a942-3ca9-9154-4d6c3e209c75.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 44559 IP address blocks: 172.120.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:2d:af:36:db:be:55:09:8a:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=ad8c5875-8cfc-49e9-964a-9f5d46c6544a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:bd:2e:7a:5f:41:1e:d5:ef:bd:5b:b8:43: 57:d1:d5:a7:6a:ce:0c:ba:20:3b:f0:9b:cd:2e:4b: ee:67:6f:a7:32:8f:fb:37:5a:50:30:f7:21:2b:99: 03:c4:75:97:29:11:11:f5:79:21:f9:6f:60:37:62: d2:9d:36:8a:98:dc:c5:e3:3a:11:5d:06:e6:a0:71: a5:98:4c:11:44:d7:ed:43:a8:52:03:37:e6:2f:c8: d7:45:9b:cc:0a:f2:ca:f7:09:a0:c3:02:fe:f7:f5: d4:a2:c1:cc:cb:7d:f3:15:3d:ce:3a:36:d5:70:a2: 38:7a:49:9b:8a:29:95:a9:25:60:73:df:f4:44:66: 24:9f:48:0e:5c:23:3b:20:10:0d:f4:4b:1d:d2:4d: 74:d4:fd:c8:19:17:3b:16:8a:74:a1:90:1e:6f:ac: e8:ec:e2:54:17:bd:3f:ed:bf:97:e9:e8:d7:69:8a: 71:51:67:2e:25:05:09:cf:06:cd:87:74:6b:ea:d5: a1:cc:b8:d8:c5:01:7f:6e:68:30:d2:32:2e:25:a8: 31:d2:4e:93:54:9b:9a:21:f9:f6:ad:ab:94:ff:a1: fc:6f:72:0a:9e:b1:46:16:fd:ed:67:a9:c8:fe:a7: 21:a6:c9:26:31:0d:08:b1:3d:39:f4:5c:ea:38:65: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8F:DB:08:CE:9F:4F:33:08:C2:E0:C1:B4:9C:DA:14:92:79:B4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8c89e41-a942-3ca9-9154-4d6c3e209c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1d:06:ad:b9:00:f3:5d:7c:f4:f9:99:27:70:cd:4a:12:1e: 1f:07:07:d8:52:d6:3d:af:f7:9e:ea:7c:e0:ba:fa:22:be:9a: 4f:6e:0f:a6:33:b7:84:67:8e:bc:95:c9:a7:e3:ff:ee:0f:58: a0:a8:92:f2:e4:59:53:56:8d:61:f1:f8:d8:28:d5:ad:81:20: 9f:57:b5:e1:45:b5:52:3f:25:32:94:7a:78:1f:ef:43:7d:15: fb:3c:a5:61:ec:19:96:b3:c0:ec:88:77:cb:ff:1f:0a:09:d7: c7:fe:95:50:cb:d4:d8:b9:1c:2d:0c:26:f2:27:9d:5d:bb:d4: 73:4e:78:34:c5:7b:b1:55:6d:88:34:91:46:e2:41:2a:35:7b: fd:04:94:4b:84:d3:44:b6:ae:2f:e2:e5:44:80:c5:1f:a2:b1: e1:c7:01:fa:fd:b9:17:a8:ee:66:e5:06:f4:50:fd:8b:0b:f0: c4:2d:de:08:05:49:72:16:a6:b6:95:5d:0d:2e:a0:b9:19:d7: 33:f0:47:f9:8d:f2:7d:74:71:50:94:cb:9c:78:4e:2a:bd:ec: d9:3c:a7:2e:3c:e1:c9:09:eb:c5:10:5f:70:dd:49:01:e2:ef: e8:31:65:3d:32:cb:f6:25:3b:77:20:cf:8a:58:27:c1:9b:d1: 7e:df:79:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaC2vNtu+VQmKtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk YWQ4YzU4NzUtOGNmYy00OWU5LTk2NGEtOWY1ZDQ2YzY1NDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS69LnpfQR7V771buENX0dWnas4MuiA78JvN LkvuZ2+nMo/7N1pQMPchK5kDxHWXKRER9Xkh+W9gN2LSnTaKmNzF4zoRXQbmoHGl mEwRRNftQ6hSAzfmL8jXRZvMCvLK9wmgwwL+9/XUosHMy33zFT3OOjbVcKI4ekmb iimVqSVgc9/0RGYkn0gOXCM7IBAN9Esd0k101P3IGRc7Fop0oZAeb6zo7OJUF70/ 7b+X6ejXaYpxUWcuJQUJzwbNh3Rr6tWhzLjYxQF/bmgw0jIuJagx0k6TVJuaIfn2 rauU/6H8b3IKnrFGFv3tZ6nI/qchpskmMQ0IsT059FzqOGWdDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiP2wjOn08zCMLgwbSc2hSSebRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjhjODllNDEtYTk0Mi0z Y2E5LTkxNTQtNGQ2YzNlMjA5Yzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUdBq25APNdfPT5mSdwzUoSHh8HB9hS1j2v957qfOC6+iK+mk9uD6Yz t4RnjryVyafj/+4PWKCokvLkWVNWjWHx+Ngo1a2BIJ9XteFFtVI/JTKUengf70N9 Ffs8pWHsGZazwOyId8v/HwoJ18f+lVDL1Ni5HC0MJvInnV271HNOeDTFe7FVbYg0 kUbiQSo1e/0ElEuE00S2ri/i5USAxR+iseHHAfr9uReo7mblBvRQ/YsL8MQt3ggF SXIWpraVXQ0uoLkZ1zPwR/mN8n10cVCUy5x4Tiq97Nk8py484ckJ68UQX3DdSQHi 7+gxZT0yy/YlO3cgz4pYJ8Gb0X7feTQ= -----END CERTIFICATE-----Generated at Sat Oct 3 10:36:05 2026 by rpki-client