$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2085c6f8-633f-3c59-a73f-c4624fc22745.roa File: 2085c6f8-633f-3c59-a73f-c4624fc22745.roa (raw, json) Hash identifier: rSHnRRjZcO6S+7PjgIXx1MpAYJAHR33Q7sMIX1N1M5k= Subject key identifier: 31:A2:84:99:57:CB:90:BA:70:0B:3E:FF:72:69:81:25:35:D3:60:68 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D24DF99884035ECBDE910C800 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2085c6f8-633f-3c59-a73f-c4624fc22745.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 44559 IP address blocks: 172.120.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:99:88:40:35:ec:bd:e9:10:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a68f118c-8ce1-4212-973e-a09fa10e974e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:19:d4:5e:03:98:22:21:e0:cb:db:e6:4b: 7b:d9:73:d0:bf:b9:e7:5e:8e:96:1b:de:f6:79:7f: 64:b5:f8:69:e3:1f:f5:07:9f:41:f3:1f:ce:b9:9c: 2b:cb:c9:3b:bf:cd:ca:1e:02:05:90:ef:ed:1d:5a: 72:a7:fb:e7:44:01:3e:d0:0c:41:d0:c4:97:ec:5f: 34:ba:6d:2a:86:95:c7:10:ea:fe:e8:87:8a:4b:6a: 2a:58:f9:a5:95:b6:59:10:c7:d5:ca:1a:e4:eb:9f: 6e:f0:d0:0b:eb:5f:86:1e:48:e5:c1:85:22:c9:86: 52:e4:f3:3a:bd:fb:93:a7:6d:de:f5:99:ea:c1:09: e4:e0:6b:af:46:76:4b:c4:95:ff:9e:42:e2:8b:a5: d8:d1:91:dd:4c:e7:1d:15:42:e3:d8:84:97:b5:f8: 9c:ba:d7:7e:17:70:22:27:24:6a:02:48:df:c6:cf: 1d:09:23:1b:c6:b5:68:37:49:be:99:6a:3d:25:2a: 80:26:69:01:35:b2:4f:f9:af:de:54:b9:ca:cf:e7: e2:0c:3a:14:19:e1:fc:7a:ed:83:1a:c3:ff:97:af: 94:6e:a6:43:5b:9a:f3:63:ad:6d:5f:7d:c3:d4:8a: 96:72:a2:86:6e:5a:0e:1a:79:d4:72:d7:81:db:69: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A2:84:99:57:CB:90:BA:70:0B:3E:FF:72:69:81:25:35:D3:60:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2085c6f8-633f-3c59-a73f-c4624fc22745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f4:21:17:cf:a1:ab:d0:a8:d6:6d:69:e0:e8:98:f2:2d:6a: 91:c8:9e:50:82:b6:76:28:d5:4e:c1:6b:66:69:bb:5a:b0:69: db:a1:fc:92:42:df:13:7e:42:3f:21:a1:aa:e4:05:b4:f3:45: 29:c8:09:24:b4:08:6a:22:e7:77:24:a8:62:ea:36:a9:4b:85: 55:7e:a4:3b:12:d9:64:da:fd:f7:41:98:b1:a1:99:41:df:73: c5:74:d7:a6:af:0b:11:b1:47:91:f3:19:1e:89:84:17:2d:20: b6:29:dc:bd:db:b4:83:ee:f0:81:b8:c6:83:5d:3f:71:c9:93: 1e:62:90:3b:27:47:75:78:91:fa:a3:cd:03:8c:30:e6:5d:8f: d2:fe:7a:b1:a1:15:99:f5:95:f4:39:4b:c2:8e:ac:8c:22:34: 1e:cb:e9:21:09:1b:34:1c:c2:e3:6e:46:59:3b:1a:17:37:57: bd:12:5f:18:32:99:96:03:a7:80:2c:36:55:e8:5a:7e:e3:08: 59:e9:62:d4:01:ef:36:03:fa:b9:e7:66:f0:bc:8e:d8:c2:ed: d6:0c:ff:51:c1:d0:a5:62:4e:b7:bf:8a:5d:01:32:60:2f:6f: a3:69:b5:05:7b:e3:c5:0c:27:9d:26:35:c8:fc:08:1c:d4:4e: 35:38:45:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35mIQDXsvekQyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTY4ZjExOGMtOGNlMS00MjEyLTk3M2UtYTA5ZmExMGU5NzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ0Z1F4DmCIh4Mvb5kt72XPQv7nnXo6WG972 eX9ktfhp4x/1B59B8x/OuZwry8k7v83KHgIFkO/tHVpyp/vnRAE+0AxB0MSX7F80 um0qhpXHEOr+6IeKS2oqWPmllbZZEMfVyhrk659u8NAL61+GHkjlwYUiyYZS5PM6 vfuTp23e9ZnqwQnk4GuvRnZLxJX/nkLii6XY0ZHdTOcdFULj2ISXtficutd+F3Ai JyRqAkjfxs8dCSMbxrVoN0m+mWo9JSqAJmkBNbJP+a/eVLnKz+fiDDoUGeH8eu2D GsP/l6+UbqZDW5rzY61tX33D1IqWcqKGbloOGnnUcteB22nlpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGihJlXy5C6cAs+/3JpgSU102BoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjA4NWM2ZjgtNjMzZi0z YzU5LWE3M2YtYzQ2MjRmYzIyNzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr0IRfPoavQqNZtaeDomPItapHInlCCtnYo1U7Ba2Zpu1qwaduh/JJC 3xN+Qj8hoarkBbTzRSnICSS0CGoi53ckqGLqNqlLhVV+pDsS2WTa/fdBmLGhmUHf c8V016avCxGxR5HzGR6JhBctILYp3L3btIPu8IG4xoNdP3HJkx5ikDsnR3V4kfqj zQOMMOZdj9L+erGhFZn1lfQ5S8KOrIwiNB7L6SEJGzQcwuNuRlk7Ghc3V70SXxgy mZYDp4AsNlXoWn7jCFnpYtQB7zYD+rnnZvC8jtjC7dYM/1HB0KViTre/il0BMmAv b6NptQV748UMJ50mNcj8CBzUTjU4RaM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:58:00 2026 by rpki-client