$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/effe56ba-2944-3288-ad63-d29af3b01145.roa File: effe56ba-2944-3288-ad63-d29af3b01145.roa (raw, json) Hash identifier: M5s79J3jXMlWthgn+JLH/AsJW3T6OafAbrZfhmJgw8k= Subject key identifier: 2F:F2:7A:C4:47:95:52:90:D3:9B:F5:68:A7:A3:53:72:21:64:C9:DA Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584EA799E0460C1B10D93C1FC300 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/effe56ba-2944-3288-ad63-d29af3b01145.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398781 IP address blocks: 172.120.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:e0:46:0c:1b:10:d9:3c:1f:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ba3c8ace-28ce-43b8-b8b8-49d28284a6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d3:51:a2:66:32:14:26:ca:7a:e7:10:86:4a: 2c:21:13:e6:9b:0c:b9:ab:86:f2:d5:1a:66:a9:14: ca:17:4c:65:db:3d:eb:7e:fd:24:65:48:14:70:29: df:ad:e4:97:f5:70:31:56:aa:c3:4e:4c:a4:b6:76: 75:41:e8:0e:2a:97:c7:b6:1e:e1:e7:38:d0:e9:b7: 21:1e:49:ed:f3:1f:ad:da:7f:cc:a5:bf:cf:07:b3: 87:9c:2a:72:50:ae:b6:2c:39:b0:ad:36:99:c7:87: 15:33:a3:c5:9e:f2:71:05:96:84:46:f6:9f:6f:b8: 1a:0a:f2:15:6c:88:a0:22:df:77:41:ec:55:cd:4a: 75:4b:8d:c4:71:39:ef:31:34:1d:ba:be:07:45:08: 2f:43:e7:80:91:bb:6e:7e:d5:49:9c:37:48:62:e6: 3d:f2:f2:9b:e7:e6:e4:d5:28:ad:f3:1f:9a:86:04: 45:7d:dc:57:26:62:34:aa:9f:9a:bd:52:a7:17:61: 67:ba:b7:09:2e:c1:7a:29:9c:2c:55:31:c3:0c:15: 1e:01:22:52:ef:ea:9a:11:c3:54:c9:2e:07:48:ae: 3c:4c:31:13:8d:60:ce:ef:34:36:f4:4f:22:46:fc: b2:e7:8c:5b:fa:83:4d:e8:aa:b2:63:0d:67:9e:cc: ae:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F2:7A:C4:47:95:52:90:D3:9B:F5:68:A7:A3:53:72:21:64:C9:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/effe56ba-2944-3288-ad63-d29af3b01145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:88:d7:c1:90:27:bc:1c:89:86:47:9f:a4:a0:a4:01:fb:b5: b1:b2:0f:ab:e0:4b:9a:98:88:7f:bd:36:ef:85:36:ff:b6:7d: 76:df:b2:31:76:19:4b:c3:c6:66:1f:e9:9f:2a:25:8d:42:c8: 0b:45:64:b5:67:d9:2f:9b:8f:8b:81:dc:32:55:6c:b7:9d:60: ff:17:e9:a8:c1:0f:20:16:a4:b8:2d:95:cb:75:5e:e2:f0:6e: 80:55:79:df:c2:f9:ec:3d:1d:26:9f:d5:ce:28:6e:68:27:69: 01:80:00:44:34:29:58:36:b1:6d:bc:67:eb:5c:f6:8f:4b:36: 21:b5:e0:00:7b:c8:18:e8:4e:66:6c:37:3b:e3:66:d3:7d:55: e3:ba:8a:ea:33:b5:22:66:54:11:d7:76:17:ec:ff:5c:34:57: 60:ed:e6:ef:c2:aa:6c:46:9c:b5:d6:1f:cf:cd:fe:c6:71:4c: bd:f9:5d:53:df:bc:86:27:f8:4b:0f:4e:76:88:21:c6:2d:df: 0f:01:44:d7:ea:15:77:31:2e:42:35:b1:b9:77:28:1e:60:b5: 9c:20:d8:6e:94:38:c3:fa:d2:37:d4:93:06:34:6b:e4:a7:42: 1b:d5:24:3b:08:64:a3:4d:91:7a:4a:71:db:bd:43:62:8f:d2: c6:38:02:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmeBGDBsQ2TwfwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmEzYzhhY2UtMjhjZS00M2I4LWI4YjgtNDlkMjgyODRhNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNNRomYyFCbKeucQhkosIRPmmwy5q4by1Rpm qRTKF0xl2z3rfv0kZUgUcCnfreSX9XAxVqrDTkyktnZ1QegOKpfHth7h5zjQ6bch Hknt8x+t2n/Mpb/PB7OHnCpyUK62LDmwrTaZx4cVM6PFnvJxBZaERvafb7gaCvIV bIigIt93QexVzUp1S43EcTnvMTQdur4HRQgvQ+eAkbtuftVJnDdIYuY98vKb5+bk 1Sit8x+ahgRFfdxXJmI0qp+avVKnF2FnurcJLsF6KZwsVTHDDBUeASJS7+qaEcNU yS4HSK48TDETjWDO7zQ29E8iRvyy54xb+oNN6KqyYw1nnsyuFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/yesRHlVKQ05v1aKejU3IhZMnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWZmZTU2YmEtMjk0NC0z Mjg4LWFkNjMtZDI5YWYzYjAxMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6I18GQJ7wciYZHn6SgpAH7tbGyD6vgS5qYiH+9Nu+FNv+2fXbfsjF2 GUvDxmYf6Z8qJY1CyAtFZLVn2S+bj4uB3DJVbLedYP8X6ajBDyAWpLgtlct1XuLw boBVed/C+ew9HSaf1c4obmgnaQGAAEQ0KVg2sW28Z+tc9o9LNiG14AB7yBjoTmZs NzvjZtN9VeO6iuoztSJmVBHXdhfs/1w0V2Dt5u/CqmxGnLXWH8/N/sZxTL35XVPf vIYn+EsPTnaIIcYt3w8BRNfqFXcxLkI1sbl3KB5gtZwg2G6UOMP60jfUkwY0a+Sn QhvVJDsIZKNNkXpKcdu9Q2KP0sY4AnA= -----END CERTIFICATE-----Generated at Wed Jul 29 18:18:28 2026 by rpki-client