$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ef810e0f-5ff8-36de-8c8e-52983e04ea7d.roa File: ef810e0f-5ff8-36de-8c8e-52983e04ea7d.roa (raw, json) Hash identifier: N4ke3v89Vpnc2TpjPCo8wipduzyZVAtdd1zNs23935o= Subject key identifier: 72:F7:BB:7D:07:C7:F6:6E:A3:16:22:E4:6A:35:F9:E4:27:50:75:2A Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F14679AD9CBD1BB7E291C7640 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ef810e0f-5ff8-36de-8c8e-52983e04ea7d.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 7018 IP address blocks: 172.120.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9a:d9:cb:d1:bb:7e:29:1c:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=4439c9e5-df71-4c77-b35c-6defe0c5ee22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:2b:54:56:ee:82:b1:9a:1f:cf:39:13:b8: bf:db:0f:1f:fb:43:c9:5c:be:38:e2:df:cf:c7:0a: 48:20:fc:74:6d:3b:8c:80:90:0c:83:64:43:c9:1a: 6b:77:4f:f5:3c:b7:16:ba:17:2a:c9:70:5c:19:be: 4e:bb:09:de:3d:41:e8:58:b5:29:22:05:71:3e:07: 45:be:e6:ca:cb:b2:63:b2:e6:fb:2e:1a:99:3c:d7: 6a:88:cc:4d:62:b5:e7:d8:b0:82:70:be:7c:0b:01: 6e:36:5f:10:db:01:a2:e5:15:a4:85:2b:7a:d3:a7: 1f:0d:cd:82:3a:cb:74:80:ab:31:a3:05:33:7c:aa: 58:77:26:db:0d:1f:01:9f:df:91:70:21:25:33:b1: 6e:a9:66:16:98:01:a3:97:62:ce:db:e9:21:1e:09: 05:3a:6b:48:12:4b:44:68:a7:b0:55:75:37:e3:d6: 49:6c:70:7b:b4:af:b4:a3:f1:31:aa:b2:b5:49:7e: b5:9f:98:c4:61:4f:ba:8a:ff:c9:f6:7d:5a:b7:4f: 2f:43:50:a0:54:d0:0e:e8:99:20:f9:8b:d1:a3:a9: 7b:d0:ab:65:73:e7:6a:cb:2f:9a:4d:60:83:fa:01: d7:1b:50:96:8f:f1:49:f9:ec:ac:7f:65:35:61:1f: 4c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F7:BB:7D:07:C7:F6:6E:A3:16:22:E4:6A:35:F9:E4:27:50:75:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ef810e0f-5ff8-36de-8c8e-52983e04ea7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:85:45:5c:48:70:d6:5c:0e:29:a2:b8:64:b7:fc:78:8d:1e: 95:b7:7d:30:4d:ce:ec:32:28:41:fc:7a:8b:97:13:1e:32:fa: 5e:43:fa:fa:e5:fe:59:d5:19:3f:7e:2b:44:72:bc:5e:5b:9e: 82:f7:56:1c:0f:c1:8b:0f:1a:4a:33:14:2b:02:75:a7:c2:9e: 63:0d:2c:23:23:be:08:46:36:ef:77:ed:e5:39:39:33:41:72: af:93:9b:ff:56:e3:67:00:d1:b2:32:68:7a:bd:e4:a8:cd:95: 74:dc:fb:33:e2:e3:b7:e7:6c:a8:48:ce:c3:67:a0:85:81:fc: 83:b8:31:63:1a:8d:78:32:91:73:78:f8:fe:a2:70:e2:45:2a: 75:7f:23:54:8e:1b:b0:2c:a3:57:99:4f:2c:23:77:41:80:f6: 70:70:b8:70:a5:e7:73:71:c4:32:4c:97:5c:c2:49:8f:c6:f2: dd:0f:68:39:9b:26:2b:26:4f:8c:46:64:35:43:93:3d:21:8c: 35:ff:d6:8b:65:23:b5:33:e3:77:26:e5:8b:4d:66:8a:21:1c: b1:d2:be:9a:c3:16:90:9d:8a:b4:da:13:a6:cc:d9:60:86:b3: 04:fd:42:25:23:be:29:74:99:21:15:f1:c9:91:2d:70:19:a9: e4:19:90:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5rZy9G7fikcdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NDQzOWM5ZTUtZGY3MS00Yzc3LWIzNWMtNmRlZmUwYzVlZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcErVFbugrGaH885E7i/2w8f+0PJXL444t/P xwpIIPx0bTuMgJAMg2RDyRprd0/1PLcWuhcqyXBcGb5OuwnePUHoWLUpIgVxPgdF vubKy7Jjsub7LhqZPNdqiMxNYrXn2LCCcL58CwFuNl8Q2wGi5RWkhSt606cfDc2C Ost0gKsxowUzfKpYdybbDR8Bn9+RcCElM7FuqWYWmAGjl2LO2+khHgkFOmtIEktE aKewVXU349ZJbHB7tK+0o/ExqrK1SX61n5jEYU+6iv/J9n1at08vQ1CgVNAO6Jkg +YvRo6l70Ktlc+dqyy+aTWCD+gHXG1CWj/FJ+eysf2U1YR9M2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL3u30Hx/ZuoxYi5Go1+eQnUHUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWY4MTBlMGYtNWZmOC0z NmRlLThjOGUtNTI5ODNlMDRlYTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqFRVxIcNZcDimiuGS3/HiNHpW3fTBNzuwyKEH8eouXEx4y+l5D+vrl /lnVGT9+K0RyvF5bnoL3VhwPwYsPGkozFCsCdafCnmMNLCMjvghGNu937eU5OTNB cq+Tm/9W42cA0bIyaHq95KjNlXTc+zPi47fnbKhIzsNnoIWB/IO4MWMajXgykXN4 +P6icOJFKnV/I1SOG7Aso1eZTywjd0GA9nBwuHCl53NxxDJMl1zCSY/G8t0PaDmb JismT4xGZDVDkz0hjDX/1otlI7Uz43cm5YtNZoohHLHSvprDFpCdirTaE6bM2WCG swT9QiUjvil0mSEV8cmRLXAZqeQZkCA= -----END CERTIFICATE-----Generated at Tue Sep 22 22:43:08 2026 by rpki-client