$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/311f4ff1-9a8f-3ccf-8189-5265d17244c1.roa File: 311f4ff1-9a8f-3ccf-8189-5265d17244c1.roa (raw, json) Hash identifier: xRsdTOxLcu8spGh/tqKYtpx/ik/GwVw4vKMKGhFAIfo= Subject key identifier: 5C:23:BB:AF:54:0C:28:AC:D8:3C:5C:07:D3:85:1C:EE:15:72:99:61 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D4672A9ED396EDD3D16C93100 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/311f4ff1-9a8f-3ccf-8189-5265d17244c1.roa Signing time: Tue 24 Mar 2026 13:39:12 +0000 ROA not before: Tue 24 Mar 2026 13:39:12 +0000 ROA not after: Mon 22 Jun 2026 13:39:12 +0000 asID: 18779 IP address blocks: 172.252.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:72:a9:ed:39:6e:dd:3d:16:c9:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 24 13:39:12 2026 GMT Not After : Jun 22 13:39:12 2026 GMT Subject: CN=46818509-9955-43ef-9b2a-815845516efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:4e:fc:04:0c:09:53:95:2d:ce:58:dd:b1: cc:c6:aa:6b:a1:27:85:13:5c:7e:a0:9c:e0:0a:59: a8:2c:5f:95:46:10:f6:af:dc:b4:dc:da:01:61:0c: d4:26:e4:11:58:13:eb:62:0c:de:9b:1d:16:07:87: 27:e3:1e:b6:e3:30:5c:77:75:0f:36:2d:59:8a:5b: 4b:8f:82:47:3d:95:d2:3e:e2:61:af:1f:14:a9:e1: 65:92:09:38:af:ee:d3:ca:d4:d6:9e:7b:1e:32:95: 20:e9:33:a5:ac:15:5e:f0:f4:c0:a4:bc:e4:bb:73: dc:e8:0e:c3:a9:b3:c6:34:34:56:24:1e:a9:0c:74: 08:10:cf:63:a4:3f:ba:fa:a0:b3:8d:fb:15:65:0d: 3c:b9:e2:8f:6d:85:91:e3:01:3e:51:a2:e3:fc:70: 6a:50:9c:6e:b3:7e:3e:86:a1:ea:59:9f:77:f8:ea: 75:09:d0:ce:64:0c:49:0b:2c:19:90:d3:30:d3:a2: 21:b9:1b:67:a4:04:c3:2d:15:f4:c7:26:2e:83:2f: dc:a9:66:1e:36:71:ff:c3:43:22:ff:e3:69:d8:52: 88:5c:9a:2f:b2:4a:b8:5e:77:ab:8e:8b:79:df:52: 48:8b:5f:73:47:3a:59:45:ca:a2:b7:8e:45:9f:5e: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:23:BB:AF:54:0C:28:AC:D8:3C:5C:07:D3:85:1C:EE:15:72:99:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/311f4ff1-9a8f-3ccf-8189-5265d17244c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5b:f6:7d:31:d8:f7:b7:dd:91:cb:49:48:b3:8b:7f:be:73: ca:10:fd:ab:ee:a1:39:3c:dd:69:7a:f5:35:3f:89:d4:0d:8e: 79:5c:97:a1:eb:70:6a:7a:c2:aa:cf:16:d0:72:61:f5:45:ba: 34:80:b1:42:36:ea:70:2e:c6:99:d1:a2:72:53:7e:84:4c:6b: f6:29:90:3a:a9:be:26:fa:bc:fe:0d:95:f6:5f:ee:bf:c7:75: 7b:f8:66:27:a8:93:fd:87:50:0f:43:29:22:2f:16:77:1a:29: 99:15:ba:67:16:89:d7:7c:c5:4f:60:de:f6:96:82:c2:52:92: 82:37:28:af:db:6f:31:df:7f:83:24:5c:e6:f7:10:26:11:39: c6:67:2e:8f:ba:e0:3b:8d:49:1f:9d:ef:3a:43:0a:28:6d:6e: 99:ae:87:05:5e:01:2e:c4:b4:01:ac:a9:65:6d:a3:02:a5:aa: c0:ba:49:aa:77:85:d7:2d:92:6b:9c:97:6f:a3:b0:d6:de:95: ac:df:0f:ef:6c:8a:5d:f4:fb:69:3b:23:b7:c7:0d:30:12:21: df:b6:ca:93:2c:a7:99:1c:06:80:3e:91:5f:d4:81:34:bb:c2: 6b:b0:9c:08:01:06:a9:9e:a6:2d:8a:4e:26:a8:e6:52:f5:cc: db:70:18:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GcqntOW7dPRbJMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMyNDEzMzkxMloXDTI2MDYyMjEzMzkxMlowLzEtMCsGA1UEAxMk NDY4MTg1MDktOTk1NS00M2VmLTliMmEtODE1ODQ1NTE2ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX9O/AQMCVOVLc5Y3bHMxqproSeFE1x+oJzg ClmoLF+VRhD2r9y03NoBYQzUJuQRWBPrYgzemx0WB4cn4x624zBcd3UPNi1ZiltL j4JHPZXSPuJhrx8UqeFlkgk4r+7TytTWnnseMpUg6TOlrBVe8PTApLzku3Pc6A7D qbPGNDRWJB6pDHQIEM9jpD+6+qCzjfsVZQ08ueKPbYWR4wE+UaLj/HBqUJxus34+ hqHqWZ93+Op1CdDOZAxJCywZkNMw06IhuRtnpATDLRX0xyYugy/cqWYeNnH/w0Mi /+Np2FKIXJovskq4Xnerjot531JIi19zRzpZRcqit45Fn171owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwju69UDCis2DxcB9OFHO4VcplhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzExZjRmZjEtOWE4Zi0z Y2NmLTgxODktNTI2NWQxNzI0NGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdb9n0x2Pe33ZHLSUizi3++c8oQ/avuoTk83Wl69TU/idQNjnlcl6Hr cGp6wqrPFtByYfVFujSAsUI26nAuxpnRonJTfoRMa/YpkDqpvib6vP4NlfZf7r/H dXv4Zieok/2HUA9DKSIvFncaKZkVumcWidd8xU9g3vaWgsJSkoI3KK/bbzHff4Mk XOb3ECYROcZnLo+64DuNSR+d7zpDCihtbpmuhwVeAS7EtAGsqWVtowKlqsC6Sap3 hdctkmucl2+jsNbelazfD+9sil30+2k7I7fHDTASId+2ypMsp5kcBoA+kV/UgTS7 wmuwnAgBBqmepi2KTiao5lL1zNtwGKs= -----END CERTIFICATE-----Generated at Thu Mar 26 20:58:14 2026 by rpki-client