$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa File: d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa (raw, json) Hash identifier: TSyRlhP9rsrMh3W5H1bIRxnHEjLSsP2tO3+WgzV9oZw= Subject key identifier: 50:4D:76:C9:7D:E6:FE:D0:04:D6:45:6B:C3:9B:3B:C0:27:53:9B:64 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584DFD3B21A080F7844B71FA6380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa Signing time: Fri 29 May 2026 01:00:10 +0000 ROA not before: Fri 29 May 2026 01:00:10 +0000 ROA not after: Thu 27 Aug 2026 01:00:10 +0000 asID: 398781 IP address blocks: 172.120.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fd:3b:21:a0:80:f7:84:4b:71:fa:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 29 01:00:10 2026 GMT Not After : Aug 27 01:00:10 2026 GMT Subject: CN=bd8d543f-5960-454d-9c99-caecc0c94dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:40:97:23:02:07:e4:5d:da:86:63:d7:4b: a7:35:cb:1d:2a:de:64:dd:07:b3:29:55:18:07:67: f1:30:4a:9c:bf:19:31:75:9a:56:99:ba:a4:43:aa: e4:72:d6:4f:18:4f:20:68:70:4d:11:87:e4:2e:d4: b0:96:c0:e0:18:bb:db:12:90:23:a5:31:a4:95:05: d7:32:d0:a1:55:ec:66:92:18:60:7c:93:35:36:e1: 03:7d:10:b3:8a:34:ee:c7:fa:e2:d3:8f:7b:38:fb: 77:b6:e8:b4:4b:70:33:c1:a5:30:c8:22:1f:5c:09: 25:c9:e1:4c:25:fb:33:05:08:c6:f5:8a:1f:f3:65: 13:64:60:19:31:03:8b:38:2f:06:1e:a9:d2:c8:53: 16:6c:d2:f1:cf:25:1b:cc:e6:7f:55:b8:2d:bf:a0: 9f:fa:bd:89:0f:3d:30:6e:ad:c6:76:0a:53:0b:77: 35:ef:5e:41:4b:3a:5f:0f:5e:61:af:fe:a3:1c:a2: 87:f6:3c:7f:03:60:be:9d:12:3a:a5:22:0e:66:fc: f9:7a:e8:18:ad:f5:52:30:6f:07:bb:b4:9c:b5:f1: 63:4d:8a:45:fb:9f:b4:a0:18:cd:ac:30:e5:7e:f7: 9e:95:87:82:d1:e2:d5:8b:0a:bf:4d:d1:ee:0e:24: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4D:76:C9:7D:E6:FE:D0:04:D6:45:6B:C3:9B:3B:C0:27:53:9B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f8:ae:07:5d:66:9b:3f:cc:0f:ea:0e:65:9c:ff:60:07:e9: b7:da:f3:1f:74:98:0a:28:54:2c:79:ae:fd:90:9b:cf:c4:8e: 77:f9:8d:ce:91:82:b2:7d:81:13:fe:a7:58:db:83:70:69:8b: 38:37:78:bb:49:33:11:6a:c7:19:2e:b2:f3:a0:dd:31:35:f5: 91:37:94:97:0b:2c:e4:35:07:7d:1e:83:ca:b7:7e:aa:f7:03: df:29:f3:52:f1:8b:b4:2c:bb:de:46:85:ef:c1:95:f1:3a:bc: 42:39:4d:6a:1b:dc:b8:07:ac:95:9f:4f:70:ce:db:60:9e:f8: b5:9b:fc:fd:47:27:89:2b:d7:48:ec:1e:a6:5a:a2:e4:d7:2e: 2f:ac:4b:97:2d:a2:66:a7:34:02:fa:97:84:2d:a5:1f:03:c4: 29:84:61:b1:4d:e0:2f:ad:b0:02:9a:8c:ad:ad:05:10:d0:d2: 59:93:94:70:19:ee:2e:80:11:a8:d2:d3:d1:9d:a4:7c:4f:f6: 7b:c9:01:ac:4c:88:55:d0:f4:f1:1a:80:8e:6a:d1:0e:88:dc: 41:a9:0f:3b:ea:c7:78:f2:c4:0b:2f:df:ae:62:e9:41:68:bc: c9:78:25:3b:4e:1e:f2:56:ce:47:f5:c8:f6:c9:0b:10:17:97: dd:de:d0:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE39OyGggPeES3H6Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDUyOTAxMDAxMFoXDTI2MDgyNzAxMDAxMFowLzEtMCsGA1UEAxMk YmQ4ZDU0M2YtNTk2MC00NTRkLTljOTktY2FlY2MwYzk0ZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQxAlyMCB+Rd2oZj10unNcsdKt5k3QezKVUY B2fxMEqcvxkxdZpWmbqkQ6rkctZPGE8gaHBNEYfkLtSwlsDgGLvbEpAjpTGklQXX MtChVexmkhhgfJM1NuEDfRCzijTux/ri0497OPt3tui0S3AzwaUwyCIfXAklyeFM JfszBQjG9Yof82UTZGAZMQOLOC8GHqnSyFMWbNLxzyUbzOZ/Vbgtv6Cf+r2JDz0w bq3GdgpTC3c1715BSzpfD15hr/6jHKKH9jx/A2C+nRI6pSIOZvz5eugYrfVSMG8H u7SctfFjTYpF+5+0oBjNrDDlfveelYeC0eLViwq/TdHuDiSx2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBNdsl95v7QBNZFa8ObO8AnU5tkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDBmYWIzYmItYzM2My0z YzQ5LWFmMDEtMTUxZDZjNWNmYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA74rgddZps/zA/qDmWc/2AH6bfa8x90mAooVCx5rv2Qm8/Ejnf5jc6R grJ9gRP+p1jbg3Bpizg3eLtJMxFqxxkusvOg3TE19ZE3lJcLLOQ1B30eg8q3fqr3 A98p81Lxi7Qsu95Ghe/BlfE6vEI5TWob3LgHrJWfT3DO22Ce+LWb/P1HJ4kr10js HqZaouTXLi+sS5ctomanNAL6l4QtpR8DxCmEYbFN4C+tsAKajK2tBRDQ0lmTlHAZ 7i6AEajS09GdpHxP9nvJAaxMiFXQ9PEagI5q0Q6I3EGpDzvqx3jyxAsv365i6UFo vMl4JTtOHvJWzkf1yPbJCxAXl93e0Mc= -----END CERTIFICATE-----Generated at Sat Jun 13 23:37:43 2026 by rpki-client