$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e28ea367-5a0a-3ad3-923a-c4583660e219.roa File: e28ea367-5a0a-3ad3-923a-c4583660e219.roa (raw, json) Hash identifier: Yf3wf8g40Pja6wJCUACIUYAjKNP5T/1KIDgDzMdH8/E= Subject key identifier: C1:92:35:20:02:C0:BC:29:95:18:F0:C1:F5:45:D7:49:DA:DF:A1:19 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F0509C1EE001B045C27AD5880 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e28ea367-5a0a-3ad3-923a-c4583660e219.roa Signing time: Mon 31 Aug 2026 12:54:09 +0000 ROA not before: Mon 31 Aug 2026 12:54:09 +0000 ROA not after: Sun 29 Nov 2026 13:54:09 +0000 asID: 2497 IP address blocks: 172.120.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:09:c1:ee:00:1b:04:5c:27:ad:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 31 12:54:09 2026 GMT Not After : Nov 29 13:54:09 2026 GMT Subject: CN=0aca82dc-a748-4b6e-af0f-af125a63766c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:d3:4c:32:15:30:62:de:6a:21:ef:80:b0: b4:74:f4:b2:03:1c:4c:74:32:59:ea:6b:bb:f1:5a: 92:fd:34:ac:aa:59:45:ee:fa:37:f3:10:fb:3d:2b: 12:2d:a5:ed:e5:59:2f:5f:c5:34:f7:c6:b9:3b:8c: 9b:f7:d1:c2:07:e7:af:a8:a7:d9:ad:84:e1:98:dc: 4a:29:24:79:75:5b:2f:ee:4e:b7:cf:72:e4:d0:3f: 01:3c:5e:2d:fe:6d:1e:2a:e5:a5:77:94:71:8b:13: 88:9b:72:98:ee:f5:54:d2:c4:32:0a:1f:07:f9:c4: 90:e4:8f:60:f3:5d:82:56:36:e9:b8:4d:f2:6d:ee: 88:16:7e:9f:3b:da:7b:9c:e2:c6:fa:88:1a:24:c3: df:9d:c0:2c:36:2a:c4:4e:e8:a2:20:18:fd:1a:8c: 1c:e7:a3:c3:14:31:45:01:d4:7d:5f:2f:6d:03:84: 14:13:39:17:e4:fe:9a:8f:9f:9a:08:ce:16:65:56: 2d:34:bc:88:a0:8f:85:68:3b:58:48:5c:19:97:0c: cf:19:50:79:a9:61:78:9d:1b:49:ef:92:18:33:69: 65:d1:ca:f5:8d:f4:16:77:a8:e5:ef:a3:65:67:f5: 9a:7c:94:7d:2b:f1:4d:ce:8f:af:56:07:23:e3:50: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:92:35:20:02:C0:BC:29:95:18:F0:C1:F5:45:D7:49:DA:DF:A1:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e28ea367-5a0a-3ad3-923a-c4583660e219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:be:91:b1:79:99:c1:6b:9a:1e:01:f7:63:44:c0:b0:a5:54: df:39:c6:2a:68:41:69:18:c0:c2:01:c5:48:d8:20:b4:34:0c: 07:c8:62:5e:6c:d9:8c:c9:b8:fd:03:a8:84:5c:3a:0c:85:cf: be:ad:48:8d:2e:44:43:56:39:33:83:c8:99:39:9b:85:32:f9: e3:5e:75:8e:eb:a2:89:43:91:e8:9d:69:7a:1b:ff:b6:cb:1b: 35:18:59:3b:c1:12:d8:88:40:1e:65:e5:16:05:d2:c5:2d:d6: b7:58:9a:45:a5:69:56:c2:07:b4:b4:70:80:1a:22:91:c1:69: 19:fb:cc:dd:76:9c:f3:0c:20:5d:87:7d:7d:8c:ab:0e:af:25: ae:ab:1c:11:05:6b:43:e3:54:12:e0:ce:49:ac:ac:71:3e:ef: 03:dd:4b:3e:98:3f:14:a7:f4:53:30:55:a8:06:bb:5d:6c:03: eb:91:28:71:31:45:36:de:32:54:cc:aa:31:a8:ab:67:52:2d: 2b:42:e5:ea:27:73:36:bd:48:97:c2:06:01:78:ab:c1:af:af: 70:f5:1c:1d:5f:20:a4:da:61:b8:3f:fc:ae:e0:34:a2:38:20: b1:bf:ee:5c:2c:58:bd:da:01:73:d4:6c:85:26:64:88:d9:08: 87:58:ca:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8FCcHuABsEXCetWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDgzMTEyNTQwOVoXDTI2MTEyOTEzNTQwOVowLzEtMCsGA1UEAxMk MGFjYTgyZGMtYTc0OC00YjZlLWFmMGYtYWYxMjVhNjM3NjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRnTTDIVMGLeaiHvgLC0dPSyAxxMdDJZ6mu7 8VqS/TSsqllF7vo38xD7PSsSLaXt5VkvX8U098a5O4yb99HCB+evqKfZrYThmNxK KSR5dVsv7k63z3Lk0D8BPF4t/m0eKuWld5RxixOIm3KY7vVU0sQyCh8H+cSQ5I9g 812CVjbpuE3ybe6IFn6fO9p7nOLG+ogaJMPfncAsNirETuiiIBj9Gowc56PDFDFF AdR9Xy9tA4QUEzkX5P6aj5+aCM4WZVYtNLyIoI+FaDtYSFwZlwzPGVB5qWF4nRtJ 75IYM2ll0cr1jfQWd6jl76NlZ/WafJR9K/FNzo+vVgcj41DkCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGSNSACwLwplRjwwfVF10na36EZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTI4ZWEzNjctNWEwYS0z YWQzLTkyM2EtYzQ1ODM2NjBlMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO+kbF5mcFrmh4B92NEwLClVN85xipoQWkYwMIBxUjYILQ0DAfIYl5s 2YzJuP0DqIRcOgyFz76tSI0uRENWOTODyJk5m4Uy+eNedY7roolDkeidaXob/7bL GzUYWTvBEtiIQB5l5RYF0sUt1rdYmkWlaVbCB7S0cIAaIpHBaRn7zN12nPMMIF2H fX2Mqw6vJa6rHBEFa0PjVBLgzkmsrHE+7wPdSz6YPxSn9FMwVagGu11sA+uRKHEx RTbeMlTMqjGoq2dSLStC5eoncza9SJfCBgF4q8Gvr3D1HB1fIKTaYbg//K7gNKI4 ILG/7lwsWL3aAXPUbIUmZIjZCIdYytU= -----END CERTIFICATE-----Generated at Mon Sep 28 22:05:10 2026 by rpki-client