$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ca61d22-58be-3aa6-9b21-320cde8c688e.roa File: 3ca61d22-58be-3aa6-9b21-320cde8c688e.roa (raw, json) Hash identifier: EMGj6aLh4BTvgrfaP1r7ZkxWyQ7+xN3PahmX7JMfwec= Subject key identifier: 2F:21:99:81:8E:17:61:8B:0E:C5:58:B8:17:B8:6B:FB:0C:0F:30:7B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D20AF50791F7253AC58B85480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ca61d22-58be-3aa6-9b21-320cde8c688e.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 149440 IP address blocks: 172.121.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:50:79:1f:72:53:ac:58:b8:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=1b4d75e2-0949-4842-b757-294f7f3cada4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d7:bd:42:08:a2:81:90:f0:0d:da:cb:c3:53: 2b:ae:a0:a4:f9:b9:59:c0:cb:26:14:88:33:de:c2: c3:b0:fc:21:cc:44:74:79:3e:18:ff:cd:58:95:d8: 8d:a6:a8:4b:30:a7:74:bd:ea:79:a7:c9:5a:fe:9a: 67:af:4d:78:dd:65:44:58:45:cc:6c:6a:e9:3f:92: e2:3e:91:35:cd:c4:78:21:7c:66:de:16:42:30:6a: 3e:c0:0b:f0:44:65:00:ab:77:5e:64:d9:2a:3f:3f: 7f:b1:a8:6b:2f:3d:30:3f:a3:f9:56:57:f5:a8:ba: d6:40:0f:c2:b6:ca:a1:20:66:c1:00:0e:8c:b9:14: 2f:c3:7b:60:95:69:20:0a:b7:80:95:3c:9e:2c:c7: e4:69:1f:0a:3b:45:f0:a4:24:d5:f0:7d:13:8c:dd: 7a:7b:88:f2:4b:78:a4:0d:70:13:59:1e:24:3f:65: b1:0b:47:fd:ef:90:fd:3e:ef:10:58:89:59:d5:22: e0:c6:25:44:40:3d:6b:92:28:7b:bf:d7:f2:e8:0b: 79:ff:6e:a7:1b:58:b0:7a:ad:2a:c1:c0:35:9f:65: 02:56:8a:4e:24:80:14:a8:d8:d3:8a:36:b0:e7:a1: 97:08:06:3e:6d:4a:02:e0:5a:19:c7:36:e9:86:82: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:21:99:81:8E:17:61:8B:0E:C5:58:B8:17:B8:6B:FB:0C:0F:30:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ca61d22-58be-3aa6-9b21-320cde8c688e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:87:55:23:88:60:f0:76:57:83:86:7e:8d:74:5b:0a:ba:5f: 7c:86:fe:db:41:c8:3e:2f:79:b1:5f:52:16:d2:94:93:0b:61: 70:7b:4d:31:b1:60:f2:3f:56:d9:c8:c0:ae:1b:0e:56:5a:e0: ff:59:62:46:e4:65:95:08:0d:29:f1:59:78:dd:10:fa:f4:4f: 65:c0:36:10:02:0e:64:b2:00:43:90:36:54:de:ab:4b:a5:5d: 38:52:c7:ac:41:e3:c4:79:87:61:fc:24:5b:af:a7:5f:1d:81: cd:83:d8:b5:09:21:14:d2:14:57:35:0d:44:5b:93:9d:70:42: 04:5f:92:83:f7:25:69:c9:c8:77:12:e4:37:34:39:87:dd:9a: 04:ed:18:13:76:27:89:dc:a8:d9:c8:ff:67:4d:49:cb:b0:68: f0:db:d8:38:44:b0:39:7f:00:7c:65:82:e7:fe:af:09:4e:05: af:19:0c:1f:8d:02:d3:af:36:e1:60:26:3d:94:f9:98:dd:83: 7e:ac:41:14:07:50:38:d6:2f:4c:f4:7b:96:fe:3c:c0:4a:eb: a8:21:68:ee:0b:4a:8f:10:86:9c:0f:c5:e5:06:40:f8:7f:ec: 2d:8f:b0:02:1e:76:9d:44:4b:21:f6:83:34:de:05:d7:90:6b: 2e:c1:9a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1B5H3JTrFi4VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk MWI0ZDc1ZTItMDk0OS00ODQyLWI3NTctMjk0ZjdmM2NhZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNe9QgiigZDwDdrLw1MrrqCk+blZwMsmFIgz 3sLDsPwhzER0eT4Y/81YldiNpqhLMKd0vep5p8la/ppnr0143WVEWEXMbGrpP5Li PpE1zcR4IXxm3hZCMGo+wAvwRGUAq3deZNkqPz9/sahrLz0wP6P5Vlf1qLrWQA/C tsqhIGbBAA6MuRQvw3tglWkgCreAlTyeLMfkaR8KO0XwpCTV8H0TjN16e4jyS3ik DXATWR4kP2WxC0f975D9Pu8QWIlZ1SLgxiVEQD1rkih7v9fy6At5/26nG1iweq0q wcA1n2UCVopOJIAUqNjTijaw56GXCAY+bUoC4FoZxzbphoIPwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8hmYGOF2GLDsVYuBe4a/sMDzB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2NhNjFkMjItNThiZS0z YWE2LTliMjEtMzIwY2RlOGM2ODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSHVSOIYPB2V4OGfo10Wwq6X3yG/ttByD4vebFfUhbSlJMLYXB7TTGx YPI/VtnIwK4bDlZa4P9ZYkbkZZUIDSnxWXjdEPr0T2XANhACDmSyAEOQNlTeq0ul XThSx6xB48R5h2H8JFuvp18dgc2D2LUJIRTSFFc1DURbk51wQgRfkoP3JWnJyHcS 5Dc0OYfdmgTtGBN2J4ncqNnI/2dNScuwaPDb2DhEsDl/AHxlguf+rwlOBa8ZDB+N AtOvNuFgJj2U+Zjdg36sQRQHUDjWL0z0e5b+PMBK66ghaO4LSo8QhpwPxeUGQPh/ 7C2PsAIedp1ESyH2gzTeBdeQay7BmsE= -----END CERTIFICATE-----Generated at Thu Mar 26 20:42:28 2026 by rpki-client