$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09ca74f3-89b9-3432-b887-9997f3730a52.roa File: 09ca74f3-89b9-3432-b887-9997f3730a52.roa (raw, json) Hash identifier: GzHci2omOZKoc5ws6ksp7ymOTOWIAa1mw2fLHBV1Zzo= Subject key identifier: 4D:C4:5E:32:7A:84:C3:A2:55:94:1E:0C:1F:3D:CE:5B:95:6E:E8:CD Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584EA799D06A42ABD333912F0700 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09ca74f3-89b9-3432-b887-9997f3730a52.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398781 IP address blocks: 172.120.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:d0:6a:42:ab:d3:33:91:2f:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8c2159b2-d2d2-46bc-9d26-be1568816858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1b:56:2a:9f:66:04:75:f0:2d:6b:70:49:c5: d8:1a:46:77:28:2b:47:62:94:a3:8b:30:16:49:2c: ab:89:23:d2:cd:ff:f0:bb:e1:23:86:2f:54:38:b1: 22:74:85:5e:eb:7d:0a:74:dd:0b:33:74:38:22:a7: 4d:59:62:73:9a:91:d1:98:fd:cb:ed:e4:08:52:23: 9a:01:a6:91:22:31:d0:5a:42:b9:d2:73:0c:2c:bf: 8d:7c:af:84:e0:63:81:ee:a6:b9:0f:75:20:12:e7: 8a:85:3b:e1:40:41:aa:72:55:ef:c4:b7:9f:f1:2c: 4f:19:0d:36:ab:f0:1f:62:e1:f7:6f:e6:cc:79:43: b7:de:78:51:2a:fe:61:45:c4:3c:2a:d3:4e:5b:f4: 8b:99:28:31:aa:07:59:8e:71:84:dd:ac:7b:31:e3: e7:70:57:ad:be:62:84:23:8e:15:32:5d:c5:63:f0: 99:6a:48:51:7f:22:2f:f2:38:72:27:86:b5:ef:78: e6:33:3e:fd:37:fb:04:fa:5f:15:7a:7f:6f:f9:30: 11:3e:95:11:35:7a:f6:9e:61:38:98:03:6e:65:f7: 70:a1:28:3d:38:12:e1:12:5d:4a:67:df:51:8c:9c: 60:39:99:75:0e:47:61:9a:36:57:6c:8d:6f:ba:b7: d4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C4:5E:32:7A:84:C3:A2:55:94:1E:0C:1F:3D:CE:5B:95:6E:E8:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09ca74f3-89b9-3432-b887-9997f3730a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:23:ea:d8:26:f5:56:09:d9:a8:f1:95:05:ce:77:a1:11:ad: 1b:23:65:cb:b2:b4:1d:69:f1:02:50:fc:01:ca:19:d1:ce:19: 50:c2:33:4b:57:e7:30:3c:37:4d:b3:d4:de:c4:72:7b:2f:9f: 73:5b:fb:1a:69:15:1a:73:87:8c:d6:0a:ec:6f:fd:da:8d:23: 32:10:d8:e8:ce:40:d3:37:f7:26:98:e8:0e:bf:83:a0:df:4d: d9:16:28:50:8b:6f:97:a8:3d:a9:e3:d7:cd:cb:e4:70:b3:bc: a1:fc:08:8f:fe:b4:a7:d6:5b:92:dc:3b:ec:31:96:23:45:8b: e9:dd:be:2c:06:a9:5c:ea:ef:5b:0e:1b:b8:2f:85:56:c7:45: 16:18:7a:c1:f1:24:2e:03:38:61:43:68:a0:fb:8f:86:4e:6e: b2:79:ba:8d:1e:01:d9:16:3c:77:54:9f:c3:fc:3e:9c:c0:05: eb:a7:cc:e8:b9:ab:f4:69:20:cd:58:15:27:63:9f:eb:36:d1: 2b:7e:2e:6f:7f:a8:9c:bd:7a:f6:1e:23:bf:e3:64:94:fd:b9: 58:80:ba:b5:1f:51:82:28:f7:27:9b:a3:b5:21:09:5b:ef:54: 5b:6f:b6:32:fd:ae:2c:7e:83:54:28:c5:5c:3d:c5:cd:69:c1: dd:84:fd:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmdBqQqvTM5EvBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGMyMTU5YjItZDJkMi00NmJjLTlkMjYtYmUxNTY4ODE2ODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxtWKp9mBHXwLWtwScXYGkZ3KCtHYpSjizAW SSyriSPSzf/wu+Ejhi9UOLEidIVe630KdN0LM3Q4IqdNWWJzmpHRmP3L7eQIUiOa AaaRIjHQWkK50nMMLL+NfK+E4GOB7qa5D3UgEueKhTvhQEGqclXvxLef8SxPGQ02 q/AfYuH3b+bMeUO33nhRKv5hRcQ8KtNOW/SLmSgxqgdZjnGE3ax7MePncFetvmKE I44VMl3FY/CZakhRfyIv8jhyJ4a173jmMz79N/sE+l8Ven9v+TARPpURNXr2nmE4 mANuZfdwoSg9OBLhEl1KZ99RjJxgOZl1DkdhmjZXbI1vurfUhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3EXjJ6hMOiVZQeDB89zluVbujNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDljYTc0ZjMtODliOS0z NDMyLWI4ODctOTk5N2YzNzMwYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUj6tgm9VYJ2ajxlQXOd6ERrRsjZcuytB1p8QJQ/AHKGdHOGVDCM0tX 5zA8N02z1N7Ecnsvn3Nb+xppFRpzh4zWCuxv/dqNIzIQ2OjOQNM39yaY6A6/g6Df TdkWKFCLb5eoPanj183L5HCzvKH8CI/+tKfWW5LcO+wxliNFi+ndviwGqVzq71sO G7gvhVbHRRYYesHxJC4DOGFDaKD7j4ZObrJ5uo0eAdkWPHdUn8P8PpzABeunzOi5 q/RpIM1YFSdjn+s20St+Lm9/qJy9evYeI7/jZJT9uViAurUfUYIo9yebo7UhCVvv VFtvtjL9rix+g1QoxVw9xc1pwd2E/aQ= -----END CERTIFICATE-----Generated at Wed Jul 29 18:18:51 2026 by rpki-client