$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3cc647ec-ef43-3ecb-b134-49f6038c3db4.roa File: 3cc647ec-ef43-3ecb-b134-49f6038c3db4.roa (raw, json) Hash identifier: Qs+8RMyPVRspECSz8XfFBVwg7zMrQiZ7ZsmlVz8QL6w= Subject key identifier: F2:F2:00:8C:BA:C4:EC:5B:E4:54:A6:A4:DA:FB:CE:C4:4B:2A:E6:3F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D492A4C0CC6EF4F94E983C100 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3cc647ec-ef43-3ecb-b134-49f6038c3db4.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 55201 IP address blocks: 172.121.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:4c:0c:c6:ef:4f:94:e9:83:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=19116923-fe65-4ed3-bd3c-62e48c690bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ef:fa:22:06:b5:4d:0b:dc:3e:ed:6f:14:23: 36:6b:6f:d9:20:da:73:a0:69:0c:42:59:ad:6e:f9: 25:ae:7a:ea:c9:b9:54:e9:2a:1c:9a:73:e7:be:ba: b0:1b:1f:04:06:24:ce:6c:bf:72:d5:f8:f7:1e:75: bc:0e:6c:08:a2:fe:c3:8f:cb:0d:0c:fb:32:04:ee: 9c:57:e3:91:db:2b:d5:f3:0c:4d:40:d9:09:94:7e: 6a:02:aa:87:50:2b:a1:3b:5f:26:fb:36:bb:1d:1a: 13:2e:ec:df:0a:12:5c:02:46:a5:7e:0b:b2:31:57: 95:fe:2a:aa:3e:6a:72:b3:1c:69:46:a6:29:f9:5e: 64:05:44:e5:a0:a3:25:49:28:70:57:52:a5:5e:29: 6c:47:00:17:3b:7b:7d:18:9c:79:eb:e0:93:cb:9a: 67:be:0d:c4:c4:23:85:59:0e:53:b2:9f:0c:0a:4e: 81:eb:12:ed:24:2e:4a:57:28:1d:8d:fa:fa:d1:b0: f6:05:c4:c5:f3:b7:04:2e:c7:1f:1b:0e:16:d6:40: 6b:d8:b7:27:5d:fd:0c:09:b6:20:67:47:74:3d:08: 5b:00:56:88:1b:92:bd:64:f5:53:2b:44:4a:d0:6d: f5:53:0f:9c:3b:92:01:6c:61:d5:1a:97:f1:66:43: 21:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F2:00:8C:BA:C4:EC:5B:E4:54:A6:A4:DA:FB:CE:C4:4B:2A:E6:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3cc647ec-ef43-3ecb-b134-49f6038c3db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ac:5a:ff:c2:d8:32:7e:d2:7d:3c:be:c2:d3:ba:98:e5:0e: bb:76:0c:cb:f0:b6:36:ad:4b:b7:3d:9a:a0:c5:c5:a8:4f:6e: 6a:8e:bb:bf:59:65:16:e7:c6:98:d4:5b:16:7d:10:9f:c8:ad: 6b:ee:88:96:d5:63:ba:88:d7:fb:67:6f:0f:b1:24:46:6a:a1: 50:e9:1f:33:3e:ad:5b:7e:29:6a:a6:e2:2f:bc:6e:05:97:20: bf:51:08:19:b5:f1:be:af:a7:c0:9c:84:c2:1f:2e:c8:a4:2f: d5:87:02:0c:2f:00:0f:15:22:fc:ab:1c:f5:74:f4:10:27:e7: 0a:02:5b:55:1e:a4:5d:b3:be:0c:85:ef:ca:4e:43:c5:28:d7: 6b:b2:f9:40:93:6e:94:d5:9d:d2:36:fd:6a:a6:78:45:1a:ac: 26:f2:0d:6f:9c:4a:d9:3a:ea:60:19:31:e5:0a:26:38:8f:07: 4a:86:14:55:85:70:66:45:8c:f5:fc:29:30:fd:d3:14:2f:f4: b5:4b:72:bf:14:8e:fd:28:54:13:39:86:6d:79:4f:7a:f9:38: 05:ff:a4:9b:78:2d:5a:c1:cd:12:2f:c4:1b:97:72:a6:26:cd: 8a:bd:3d:e5:3f:e6:af:f5:22:3a:cf:87:40:e1:55:1e:6e:38: 45:50:e3:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKkwMxu9PlOmDwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MTkxMTY5MjMtZmU2NS00ZWQzLWJkM2MtNjJlNDhjNjkwYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+/6Iga1TQvcPu1vFCM2a2/ZINpzoGkMQlmt bvklrnrqyblU6SocmnPnvrqwGx8EBiTObL9y1fj3HnW8DmwIov7Dj8sNDPsyBO6c V+OR2yvV8wxNQNkJlH5qAqqHUCuhO18m+za7HRoTLuzfChJcAkalfguyMVeV/iqq PmpysxxpRqYp+V5kBUTloKMlSShwV1KlXilsRwAXO3t9GJx56+CTy5pnvg3ExCOF WQ5Tsp8MCk6B6xLtJC5KVygdjfr60bD2BcTF87cELscfGw4W1kBr2LcnXf0MCbYg Z0d0PQhbAFaIG5K9ZPVTK0RK0G31Uw+cO5IBbGHVGpfxZkMh0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLyAIy6xOxb5FSmpNr7zsRLKuY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2NjNjQ3ZWMtZWY0My0z ZWNiLWIxMzQtNDlmNjAzOGMzZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2sWv/C2DJ+0n08vsLTupjlDrt2DMvwtjatS7c9mqDFxahPbmqOu79Z ZRbnxpjUWxZ9EJ/IrWvuiJbVY7qI1/tnbw+xJEZqoVDpHzM+rVt+KWqm4i+8bgWX IL9RCBm18b6vp8CchMIfLsikL9WHAgwvAA8VIvyrHPV09BAn5woCW1UepF2zvgyF 78pOQ8Uo12uy+UCTbpTVndI2/WqmeEUarCbyDW+cStk66mAZMeUKJjiPB0qGFFWF cGZFjPX8KTD90xQv9LVLcr8Ujv0oVBM5hm15T3r5OAX/pJt4LVrBzRIvxBuXcqYm zYq9PeU/5q/1IjrPh0DhVR5uOEVQ40g= -----END CERTIFICATE-----Generated at Fri Mar 27 01:57:30 2026 by rpki-client