$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/647054b9-78ea-3619-a0b4-74c569cf324e.roa File: 647054b9-78ea-3619-a0b4-74c569cf324e.roa (raw, json) Hash identifier: LdxAyrcOBI2ZpfvEw18Bro1X/t+pqJTh99g0K4VYBRE= Subject key identifier: 5E:74:80:6A:FA:36:27:51:D6:5D:00:9C:ED:61:F6:EE:2B:51:A2:A7 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1F4A88F3EB05345FE818BD40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/647054b9-78ea-3619-a0b4-74c569cf324e.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 3257 IP address blocks: 172.121.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:88:f3:eb:05:34:5f:e8:18:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=090e046b-a6bc-478d-8ef6-83f62e11342a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e6:7b:4c:6f:47:a3:ee:3a:0a:41:d7:e3:d8: 72:0c:3a:65:b6:7e:e1:d9:64:1c:93:87:d2:ca:1d: 94:32:41:17:91:04:7d:95:96:f2:0f:8e:f7:ba:59: ca:ad:62:ee:54:3e:61:10:2d:db:eb:9b:c1:bd:1a: 8a:c1:2d:ed:18:19:18:68:a9:76:f8:63:81:45:76: 40:81:11:c9:72:6e:73:e2:d8:23:f1:43:3d:4d:90: b8:b8:ea:29:c3:e1:fd:43:a4:80:5e:ec:aa:ed:98: 8c:ba:f3:fb:4c:db:d4:a8:12:64:38:c7:b4:22:92: 1d:be:5c:32:61:b2:05:b7:ce:1e:91:5c:f1:ba:d1: 93:af:fd:36:c1:56:ff:be:b4:11:74:56:45:73:7c: ab:3b:24:e8:2c:28:e7:0d:b2:b7:d2:42:59:2c:d1: d4:d4:7c:81:52:12:8a:a4:fb:81:e2:9f:78:5c:c0: 2a:a7:8d:d6:16:00:21:3a:15:ab:20:5f:44:46:ba: 4f:86:d2:a7:f3:1e:c6:b2:17:9e:40:0f:20:d3:fe: 69:84:19:b1:69:12:52:e4:cb:92:65:1a:06:b2:3e: 8a:86:20:42:22:62:fa:cd:6b:83:09:16:db:ba:c6: bc:6c:e6:76:2f:bd:e3:63:fc:1e:a7:e9:bd:68:d4: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:74:80:6A:FA:36:27:51:D6:5D:00:9C:ED:61:F6:EE:2B:51:A2:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/647054b9-78ea-3619-a0b4-74c569cf324e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f9:7b:5a:06:4e:54:60:45:0d:1f:a2:5d:d2:ba:dd:9c:7b: d7:3e:b7:80:6d:ba:55:df:b6:e8:ec:c8:22:b6:c9:b3:0d:af: 47:5f:e5:03:07:07:20:46:a7:b7:53:b1:4d:01:e5:c7:c3:00: 8f:4a:9d:07:cd:24:aa:39:78:d9:c2:19:f3:25:a6:10:8d:ec: eb:40:09:15:bb:86:21:c1:b2:eb:12:11:0e:26:31:02:b4:b2: 58:ec:be:be:e0:13:19:08:5e:e5:fc:04:19:36:ec:80:0c:61: 5c:bf:5a:c0:1f:c5:66:0a:a7:f6:26:a2:ad:f3:d5:43:40:ec: 7f:22:65:1e:89:ce:5b:69:f5:2e:93:e3:2c:10:ba:ff:21:b3: b5:3f:74:ca:89:6c:d0:36:5c:ea:d5:64:5b:66:72:ad:29:95: fa:79:66:12:fa:8b:a1:75:ab:10:1a:6a:ca:9a:29:83:d3:69: 81:54:39:eb:a9:ac:94:c2:fe:2b:11:0a:5e:c9:f1:ba:37:73: ee:b6:2d:49:da:9c:3e:27:f4:8d:e5:b8:08:1c:06:2b:ca:21: 41:dc:4d:f1:bb:bb:10:0b:6a:48:c2:92:6c:1c:d5:b5:91:17: 5f:40:e2:e7:26:d3:11:e5:f7:cf:ff:4f:3b:20:06:fb:0c:d6: f2:eb:94:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSojz6wU0X+gYvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MDkwZTA0NmItYTZiYy00NzhkLThlZjYtODNmNjJlMTEzNDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOZ7TG9Ho+46CkHX49hyDDpltn7h2WQck4fS yh2UMkEXkQR9lZbyD473ulnKrWLuVD5hEC3b65vBvRqKwS3tGBkYaKl2+GOBRXZA gRHJcm5z4tgj8UM9TZC4uOopw+H9Q6SAXuyq7ZiMuvP7TNvUqBJkOMe0IpIdvlwy YbIFt84ekVzxutGTr/02wVb/vrQRdFZFc3yrOyToLCjnDbK30kJZLNHU1HyBUhKK pPuB4p94XMAqp43WFgAhOhWrIF9ERrpPhtKn8x7GsheeQA8g0/5phBmxaRJS5MuS ZRoGsj6KhiBCImL6zWuDCRbbusa8bOZ2L73jY/wep+m9aNQzXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF50gGr6NidR1l0AnO1h9u4rUaKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjQ3MDU0YjktNzhlYS0z NjE5LWEwYjQtNzRjNTY5Y2YzMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr5e1oGTlRgRQ0fol3Sut2ce9c+t4BtulXftujsyCK2ybMNr0df5QMH ByBGp7dTsU0B5cfDAI9KnQfNJKo5eNnCGfMlphCN7OtACRW7hiHBsusSEQ4mMQK0 sljsvr7gExkIXuX8BBk27IAMYVy/WsAfxWYKp/Ymoq3z1UNA7H8iZR6Jzltp9S6T 4ywQuv8hs7U/dMqJbNA2XOrVZFtmcq0plfp5ZhL6i6F1qxAaasqaKYPTaYFUOeup rJTC/isRCl7J8bo3c+62LUnanD4n9I3luAgcBivKIUHcTfG7uxALakjCkmwc1bWR F19A4ucm0xHl98//TzsgBvsM1vLrlFg= -----END CERTIFICATE-----Generated at Thu Mar 26 21:58:26 2026 by rpki-client