$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa File: d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa (raw, json) Hash identifier: VcJ8pIsZYOBLYYZhqRuWhRP8Tge1YwpqR3dAHVmHYBs= Subject key identifier: 37:27:31:B4:E0:F0:08:96:64:53:6E:D5:AA:70:8B:E0:53:A3:6F:CD Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F4988EC4A5C9079691B8A1600 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398781 IP address blocks: 172.120.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:ec:4a:5c:90:79:69:1b:8a:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=28fc7511-e141-4699-b900-f32de06ba072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e0:60:41:13:31:95:0f:2d:6e:b0:04:5e:bb: fe:63:e2:6d:91:50:c7:c7:68:95:38:69:f6:ad:0c: 85:12:b4:04:8c:70:61:eb:1f:f8:b3:2c:aa:1a:8e: e5:4f:53:52:46:24:41:be:d9:4e:1f:a7:f4:48:58: 14:74:cf:ec:33:d4:60:9c:28:a6:1b:8e:4d:d4:cc: 26:13:26:36:ed:38:c5:52:7c:64:2b:71:85:94:54: 8a:55:e2:f5:f1:0f:3e:1c:e6:d8:2f:26:3b:86:a2: 17:17:82:aa:88:4c:2e:20:cd:94:90:09:5e:1b:26: 90:f5:a4:ae:9b:41:1d:4b:e2:55:e1:2e:0b:df:53: b2:80:4a:48:44:3b:50:dc:b8:0c:ba:73:23:37:e0: 78:7b:6e:ad:94:64:fe:70:88:85:6e:1b:fb:9c:cd: 2f:1e:1c:f4:c7:e1:09:18:2f:72:0f:3f:bb:ff:07: 74:c1:95:cb:6c:b2:25:02:35:e1:62:94:6e:d7:4e: 47:e7:bd:c0:99:ef:3a:b0:c7:f6:37:12:e2:35:8e: 2a:0e:d9:ab:29:b7:e0:6e:08:43:a5:bb:ca:09:81: d2:ea:0b:a6:2d:0b:6b:58:16:2b:14:e5:c5:67:75: a4:17:7f:09:3f:dd:08:ba:06:89:40:72:d0:77:c9: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:27:31:B4:E0:F0:08:96:64:53:6E:D5:AA:70:8B:E0:53:A3:6F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:16:3d:56:dc:8b:ad:84:b2:ba:d4:28:0f:80:78:a2:23:39: f7:2c:14:d1:c1:9a:65:0c:f1:8c:53:4e:39:0f:2f:78:9c:99: 7f:2a:67:e1:4d:5c:6c:ba:41:97:95:df:bb:0b:c7:7e:09:1d: 12:12:ca:dc:9e:b2:34:19:c0:f2:3b:8f:56:c3:9e:29:96:2b: ee:dd:b6:40:b6:ce:02:7f:09:80:4e:de:68:e3:c6:a4:e3:3a: 31:2e:69:f5:7e:36:a3:23:12:0c:4c:d8:41:16:4a:32:66:4f: d9:74:e5:13:bf:7c:68:f7:98:6d:51:6f:dd:80:1f:97:c4:10: 69:bf:f3:45:d5:7c:27:59:8e:23:dc:50:66:07:ef:9e:ed:23: 13:83:ee:67:4d:98:52:90:7f:30:ca:b9:f8:f1:0b:e3:73:9b: 32:f9:05:e2:b6:1c:a4:d1:5c:ba:9d:43:50:72:af:83:99:74: bc:03:a7:00:d8:a4:6b:91:a7:9e:5e:d9:f4:84:cc:62:9e:15: d0:3d:9c:06:3e:b7:30:1b:55:5e:69:16:9a:d5:b2:12:eb:35: 80:4c:fa:4d:48:83:70:9c:c7:eb:7f:1e:cc:8c:4d:81:dc:b7: b1:ab:31:65:dc:5f:77:69:a7:1c:b7:d7:ba:88:64:40:9c:53: 30:d3:b1:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiOxKXJB5aRuKFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjhmYzc1MTEtZTE0MS00Njk5LWI5MDAtZjMyZGUwNmJhMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuBgQRMxlQ8tbrAEXrv+Y+JtkVDHx2iVOGn2 rQyFErQEjHBh6x/4syyqGo7lT1NSRiRBvtlOH6f0SFgUdM/sM9RgnCimG45N1Mwm EyY27TjFUnxkK3GFlFSKVeL18Q8+HObYLyY7hqIXF4KqiEwuIM2UkAleGyaQ9aSu m0EdS+JV4S4L31OygEpIRDtQ3LgMunMjN+B4e26tlGT+cIiFbhv7nM0vHhz0x+EJ GC9yDz+7/wd0wZXLbLIlAjXhYpRu105H573Ame86sMf2NxLiNY4qDtmrKbfgbghD pbvKCYHS6gumLQtrWBYrFOXFZ3WkF38JP90IugaJQHLQd8m8UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcnMbTg8AiWZFNu1apwi+BTo2/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDBmYWIzYmItYzM2My0z YzQ5LWFmMDEtMTUxZDZjNWNmYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0WPVbci62EsrrUKA+AeKIjOfcsFNHBmmUM8YxTTjkPL3icmX8qZ+FN XGy6QZeV37sLx34JHRISytyesjQZwPI7j1bDnimWK+7dtkC2zgJ/CYBO3mjjxqTj OjEuafV+NqMjEgxM2EEWSjJmT9l05RO/fGj3mG1Rb92AH5fEEGm/80XVfCdZjiPc UGYH757tIxOD7mdNmFKQfzDKufjxC+NzmzL5BeK2HKTRXLqdQ1Byr4OZdLwDpwDY pGuRp55e2fSEzGKeFdA9nAY+tzAbVV5pFprVshLrNYBM+k1Ig3Ccx+t/HsyMTYHc t7GrMWXcX3dppxy317qIZECcUzDTse0= -----END CERTIFICATE-----Generated at Sun Oct 4 22:52:08 2026 by rpki-client