$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d1e6ca81-5508-3faa-a3e4-2f2df1b99fc6.roa File: d1e6ca81-5508-3faa-a3e4-2f2df1b99fc6.roa (raw, json) Hash identifier: dIvVXt0YSR5cy/+Kl1ElXeQaabN80LvCCHoeNegZ4d4= Subject key identifier: 71:60:A0:47:24:9D:00:FB:AF:71:17:5A:B4:3D:37:00:76:9B:C5:AA Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F497365C12878C37570803580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d1e6ca81-5508-3faa-a3e4-2f2df1b99fc6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 172.120.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:65:c1:28:78:c3:75:70:80:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d6a7b3a1-a6b8-4fb2-af9a-aae5ec230baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:30:7d:8d:09:1e:59:09:fc:8f:65:a7:34:7a: 04:17:00:c8:68:1b:3a:2b:e9:2f:c6:a2:cf:67:4b: 3a:ce:22:ec:9d:b3:ef:64:fe:7e:64:43:3c:46:66: b2:16:65:cb:4e:9b:90:18:33:92:3c:4c:35:22:41: fa:e7:1b:56:6c:e1:0f:03:95:82:7b:c9:a7:ad:2d: 6a:e4:98:24:88:86:7c:8a:39:e8:41:59:c5:eb:17: 0d:5a:25:6a:a8:f7:0e:b6:b3:b4:92:96:6f:56:68: b5:3a:cf:47:8e:6f:13:be:81:a2:ac:0d:76:7d:66: 6b:5e:f8:11:38:fd:23:45:1c:ea:03:d4:81:15:ab: 62:55:57:70:85:70:c2:49:9e:d7:35:ca:b5:d2:6b: 0e:c7:c1:51:43:8a:0a:c8:28:99:2c:d0:88:54:6c: c4:23:ba:35:0e:7d:cf:d5:2c:f8:01:00:b0:4a:ea: 30:ff:e6:a0:74:25:08:93:63:4a:d2:44:9c:96:75: 31:20:e9:b8:33:14:8f:8d:fe:8b:7e:6a:80:7a:7f: c2:c5:00:ee:53:44:3b:21:78:54:22:9c:7c:b8:e4: 40:d0:89:ee:d8:23:0c:ad:a9:06:93:61:02:df:60: d6:79:87:89:2d:ea:dc:2f:ad:6c:16:18:ea:d9:22: 2b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:60:A0:47:24:9D:00:FB:AF:71:17:5A:B4:3D:37:00:76:9B:C5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d1e6ca81-5508-3faa-a3e4-2f2df1b99fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:8d:3c:b4:79:99:f5:4c:b2:7f:4a:af:49:f3:a4:03:53:11: d1:10:84:2b:6d:76:1d:e2:46:5a:03:c7:73:5e:0a:2b:a2:39: 3b:a3:3d:dd:8f:ae:82:36:10:dd:b0:20:82:0a:c7:c0:2a:01: 52:09:33:af:4a:ca:89:50:21:cb:46:16:bf:f0:61:15:e8:9b: 91:51:87:d0:85:7c:05:e5:d6:19:04:47:e8:c1:31:13:d1:7c: 4f:c0:a6:83:32:97:8c:3b:ef:bf:9a:ab:da:e1:67:6d:81:c0: 76:ef:f3:a8:5f:f7:94:76:ff:ee:c6:f9:86:fc:b8:a6:e3:77: 2c:e2:0d:a7:bb:8a:0d:21:a1:e2:01:ab:85:c3:f7:4c:7b:33: 0f:25:4e:5e:8b:5a:ad:70:2e:9f:90:65:eb:2f:cd:89:23:72: 5e:54:66:e0:fe:9e:93:5b:ba:06:66:41:66:4f:de:00:4d:ca: fc:9e:a2:67:b1:d0:8f:45:4d:f1:80:1b:0a:e9:7a:36:f6:03: 97:ae:92:5f:5c:58:20:b0:3f:0e:d2:ca:3b:01:ac:ff:b4:b0: 56:f7:c3:ce:1e:2f:ad:fe:bd:d8:c4:ce:66:38:df:63:4c:d2: d3:5e:34:cc:33:24:5c:75:0c:22:ae:ac:29:7c:d3:e8:29:7b: f8:fa:a4:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2XBKHjDdXCANYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDZhN2IzYTEtYTZiOC00ZmIyLWFmOWEtYWFlNWVjMjMwYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTB9jQkeWQn8j2WnNHoEFwDIaBs6K+kvxqLP Z0s6ziLsnbPvZP5+ZEM8RmayFmXLTpuQGDOSPEw1IkH65xtWbOEPA5WCe8mnrS1q 5JgkiIZ8ijnoQVnF6xcNWiVqqPcOtrO0kpZvVmi1Os9Hjm8TvoGirA12fWZrXvgR OP0jRRzqA9SBFatiVVdwhXDCSZ7XNcq10msOx8FRQ4oKyCiZLNCIVGzEI7o1Dn3P 1Sz4AQCwSuow/+agdCUIk2NK0kSclnUxIOm4MxSPjf6LfmqAen/CxQDuU0Q7IXhU Ipx8uORA0Inu2CMMrakGk2EC32DWeYeJLercL61sFhjq2SIr0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFgoEcknQD7r3EXWrQ9NwB2m8WqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDFlNmNhODEtNTUwOC0z ZmFhLWEzZTQtMmYyZGYxYjk5ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHimMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEONPLR5mfVMsn9Kr0nzpANTEdEQhCttdh3iRloDx3NeCiuiOTujPd2P roI2EN2wIIIKx8AqAVIJM69KyolQIctGFr/wYRXom5FRh9CFfAXl1hkER+jBMRPR fE/ApoMyl4w777+aq9rhZ22BwHbv86hf95R2/+7G+Yb8uKbjdyziDae7ig0hoeIB q4XD90x7Mw8lTl6LWq1wLp+QZesvzYkjcl5UZuD+npNbugZmQWZP3gBNyvyeomex 0I9FTfGAGwrpejb2A5eukl9cWCCwPw7SyjsBrP+0sFb3w84eL63+vdjEzmY432NM 0tNeNMwzJFx1DCKurCl80+gpe/j6pF0= -----END CERTIFICATE-----Generated at Sat Sep 26 16:36:08 2026 by rpki-client