$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/461f6a35-4b12-3f1e-9825-865603426399.roa File: 461f6a35-4b12-3f1e-9825-865603426399.roa (raw, json) Hash identifier: LXIqKdUSqn8eEkNO7WOd4U047wx4X8sWJ2FaA7dDa40= Subject key identifier: 41:E5:08:A2:E6:7C:B2:20:7D:0C:01:4C:EC:CC:D5:7C:85:7B:AF:23 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D2A74BA8CEA230A0DAAEF9600 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/461f6a35-4b12-3f1e-9825-865603426399.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 18779 IP address blocks: 142.252.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ba:8c:ea:23:0a:0d:aa:ef:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=9803dd1a-df33-40e8-aad8-7fe40bab3661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c5:cf:09:6c:74:6e:c5:5d:53:15:ea:7f:ee: df:2c:67:17:ef:2d:ed:ce:25:20:b4:47:5d:77:f2: 09:95:23:14:cf:c9:f0:a6:37:28:16:5f:1f:9f:f7: 8c:56:00:e7:e7:a3:a8:68:11:8e:d2:1c:ca:2f:79: 35:d6:c5:a1:2d:74:c3:eb:0b:4f:45:bd:a3:97:31: 17:8b:f1:a4:ce:56:14:f1:d0:76:66:02:bb:d6:d8: 01:3a:3b:32:86:f8:29:93:ea:b1:2c:9e:a6:00:37: b4:84:6e:fc:f5:c3:46:c0:85:c9:00:74:0c:f7:3c: 6d:40:29:6f:89:f9:80:a6:8a:70:7e:51:1e:b1:57: 54:d2:9c:32:99:f4:5c:8a:9c:eb:a3:be:91:1f:8c: 18:ae:cb:85:9e:2e:63:c2:5b:c7:48:b0:cb:d9:b5: 24:d1:ff:01:2b:8b:3c:cd:6b:2f:69:44:0d:55:c3: 06:c0:37:90:2e:79:d0:4e:44:59:2c:fa:05:28:2b: a3:93:b1:cc:36:1f:52:4c:5f:44:02:46:46:23:7f: c4:ae:55:01:1a:68:8b:2e:65:17:72:bf:4e:05:d4: bb:b8:a5:31:6e:07:2b:c3:80:bf:c2:a1:2e:00:35: bf:1c:ee:7c:2c:b9:05:80:13:85:4f:3b:99:a1:44: d8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E5:08:A2:E6:7C:B2:20:7D:0C:01:4C:EC:CC:D5:7C:85:7B:AF:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/461f6a35-4b12-3f1e-9825-865603426399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:80:b4:e6:97:ae:63:12:80:82:65:2a:6a:e6:40:67:b9:3a: 1b:75:40:d3:a7:58:71:3c:77:93:4f:c6:45:a6:40:53:b0:d4: ee:ad:7c:1f:3b:4e:4a:16:0c:38:c2:ee:a9:6b:ba:ec:5d:4e: c5:a8:7a:ca:5f:68:50:42:dd:df:17:ae:66:cb:04:0b:06:e2: 3a:52:91:7f:56:d3:bc:d3:f8:c6:84:d4:5a:42:05:d7:8f:76: 91:f8:35:d6:be:9d:f9:31:3c:38:5a:74:c3:f0:9d:91:a4:9d: a6:25:f5:4f:17:90:54:ad:69:4c:67:2c:fb:54:cd:5b:ec:0b: 01:1c:54:dd:e2:a3:9f:7d:78:82:56:bd:07:bb:42:bf:a8:ed: 78:59:30:d2:60:68:c6:bb:88:98:1e:29:72:2a:a9:04:0a:60: a5:08:4f:03:e3:79:41:f6:d2:8b:13:15:b3:88:f0:fe:c1:6e: 73:78:55:4f:39:ca:78:1e:f1:bb:1b:bf:db:4e:7c:5e:e1:91: 40:74:86:e1:60:aa:89:4e:48:05:8d:d9:52:1d:f4:7a:bf:e1: c7:31:78:a7:c6:22:7a:64:cf:01:23:91:d8:f7:e5:5f:68:ba: 86:83:81:ce:82:12:32:cf:6d:cf:9d:7a:a1:0d:b5:a4:52:04: eb:9e:80:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdLqM6iMKDarvlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk OTgwM2RkMWEtZGYzMy00MGU4LWFhZDgtN2ZlNDBiYWIzNjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8XPCWx0bsVdUxXqf+7fLGcX7y3tziUgtEdd d/IJlSMUz8nwpjcoFl8fn/eMVgDn56OoaBGO0hzKL3k11sWhLXTD6wtPRb2jlzEX i/GkzlYU8dB2ZgK71tgBOjsyhvgpk+qxLJ6mADe0hG789cNGwIXJAHQM9zxtQClv ifmApopwflEesVdU0pwymfRcipzro76RH4wYrsuFni5jwlvHSLDL2bUk0f8BK4s8 zWsvaUQNVcMGwDeQLnnQTkRZLPoFKCujk7HMNh9STF9EAkZGI3/ErlUBGmiLLmUX cr9OBdS7uKUxbgcrw4C/wqEuADW/HO58LLkFgBOFTzuZoUTYqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHlCKLmfLIgfQwBTOzM1XyFe68jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDYxZjZhMzUtNGIxMi0z ZjFlLTk4MjUtODY1NjAzNDI2Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuAtOaXrmMSgIJlKmrmQGe5Oht1QNOnWHE8d5NPxkWmQFOw1O6tfB87 TkoWDDjC7qlruuxdTsWoespfaFBC3d8XrmbLBAsG4jpSkX9W07zT+MaE1FpCBdeP dpH4Nda+nfkxPDhadMPwnZGknaYl9U8XkFStaUxnLPtUzVvsCwEcVN3io599eIJW vQe7Qr+o7XhZMNJgaMa7iJgeKXIqqQQKYKUITwPjeUH20osTFbOI8P7BbnN4VU85 ynge8bsbv9tOfF7hkUB0huFgqolOSAWN2VId9Hq/4ccxeKfGInpkzwEjkdj35V9o uoaDgc6CEjLPbc+deqENtaRSBOuegJc= -----END CERTIFICATE-----Generated at Thu Mar 26 19:58:50 2026 by rpki-client