$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6cb0dda0-5038-341d-8681-a0e696ca10a7.roa File: 6cb0dda0-5038-341d-8681-a0e696ca10a7.roa (raw, json) Hash identifier: icQdctOgTpkMqJIZatP0/SCGyi6wxkgz/WK6hOb3EHI= Subject key identifier: 27:D0:0D:34:29:DA:EB:19:E5:B0:AC:90:75:48:EA:89:33:76:4F:87 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D20AF6D12C2709B6E5D0AD6C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6cb0dda0-5038-341d-8681-a0e696ca10a7.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 5650 IP address blocks: 104.165.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:6d:12:c2:70:9b:6e:5d:0a:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=3b63f5ca-7c69-48d5-8f92-48552f58bb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b8:52:fb:54:c7:96:c9:af:b6:29:58:4c:15: c1:28:e6:5c:25:c0:8a:66:b3:06:6c:e6:d3:da:2f: 09:94:1d:6a:d7:14:39:db:6c:b2:0d:9b:2c:f4:e2: e4:d4:3b:4f:e2:0e:c0:4b:3e:bf:56:a1:5a:da:15: 71:d5:83:d3:e7:d6:83:31:09:cd:1f:49:4a:90:5c: fc:f8:92:bc:9f:4f:7a:75:01:97:c5:33:4f:09:f9: ec:67:04:86:e2:38:c7:99:cb:b2:8b:f4:de:77:3f: b6:bd:fc:86:2b:3c:50:a2:b5:cb:d9:3c:39:2b:27: 1d:c0:71:2f:65:4c:8f:c0:77:bc:6c:c7:2a:cf:ba: ea:1b:7c:55:82:18:64:42:d6:39:51:2b:28:23:d8: b9:70:df:2b:33:7b:07:73:db:6e:5d:62:62:f2:6f: 3e:50:63:33:d6:f6:6d:a1:55:77:2e:df:c4:69:d1: 8f:24:89:d3:12:ad:93:06:db:63:98:48:1f:b6:71: 2d:23:f8:de:0d:55:88:b8:bf:32:26:ea:38:bd:7d: 4e:80:b3:59:2a:5d:0b:51:7a:c5:a0:93:fc:22:d1: 35:7d:8b:4c:18:8f:18:5c:60:9d:57:e2:ef:bf:58: ea:68:90:59:14:6f:2b:6c:b0:a1:0c:f7:e1:dc:f4: ed:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D0:0D:34:29:DA:EB:19:E5:B0:AC:90:75:48:EA:89:33:76:4F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6cb0dda0-5038-341d-8681-a0e696ca10a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.165.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:9d:24:9c:d3:13:81:23:ba:b9:15:bd:16:49:0b:0f:44:0c: e0:51:c8:4c:a6:10:bc:8c:92:4b:f5:39:f2:5a:f9:d2:c9:0d: 22:e6:e9:1b:59:81:6c:0b:80:74:67:e1:65:1b:a2:72:f2:fb: 75:6c:f8:e3:b1:f7:9e:f2:fb:f4:fa:f5:6c:86:ff:6a:cb:42: 66:a1:ea:1c:d6:ce:7c:c1:b7:86:75:55:30:65:48:18:bc:aa: 1d:1f:ac:f5:3c:91:c1:7f:2b:ee:ea:19:8f:b8:f9:07:7c:2d: c2:d2:4c:f5:5c:6e:81:32:a2:d6:4b:d6:26:14:a4:b3:2f:f8: a6:a3:bf:52:9e:e0:50:61:a3:cf:48:07:1c:bd:08:a5:6f:10: 6e:8e:25:ba:c1:90:67:05:e9:5e:36:37:bf:95:70:bb:66:82: ad:bd:f3:22:95:c7:28:c5:86:6f:a5:48:2e:20:29:8c:36:6b: 80:ad:5d:72:e3:c9:bc:87:88:fe:a1:33:49:29:82:04:fc:95: 86:23:7f:d1:74:58:43:3e:20:5d:df:bf:78:3d:d5:80:2a:5d: 8c:02:b0:58:2e:32:4c:6a:87:87:62:5e:f4:ba:fb:4f:0c:36: 89:d6:f9:f9:4a:21:56:a4:cf:d8:e1:ae:1b:61:dd:2f:4c:eb: 35:3b:03:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr20SwnCbbl0K1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk M2I2M2Y1Y2EtN2M2OS00OGQ1LThmOTItNDg1NTJmNThiYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbhS+1THlsmvtilYTBXBKOZcJcCKZrMGbObT 2i8JlB1q1xQ522yyDZss9OLk1DtP4g7ASz6/VqFa2hVx1YPT59aDMQnNH0lKkFz8 +JK8n096dQGXxTNPCfnsZwSG4jjHmcuyi/Tedz+2vfyGKzxQorXL2Tw5KycdwHEv ZUyPwHe8bMcqz7rqG3xVghhkQtY5USsoI9i5cN8rM3sHc9tuXWJi8m8+UGMz1vZt oVV3Lt/EadGPJInTEq2TBttjmEgftnEtI/jeDVWIuL8yJuo4vX1OgLNZKl0LUXrF oJP8ItE1fYtMGI8YXGCdV+Lvv1jqaJBZFG8rbLChDPfh3PTtFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfQDTQp2usZ5bCskHVI6okzdk+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNmNiMGRkYTAtNTAzOC0z NDFkLTg2ODEtYTBlNjk2Y2ExMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2dJJzTE4EjurkVvRZJCw9EDOBRyEymELyMkkv1OfJa+dLJDSLm6RtZ gWwLgHRn4WUbonLy+3Vs+OOx957y+/T69WyG/2rLQmah6hzWznzBt4Z1VTBlSBi8 qh0frPU8kcF/K+7qGY+4+Qd8LcLSTPVcboEyotZL1iYUpLMv+Kajv1Ke4FBho89I Bxy9CKVvEG6OJbrBkGcF6V42N7+VcLtmgq298yKVxyjFhm+lSC4gKYw2a4CtXXLj ybyHiP6hM0kpggT8lYYjf9F0WEM+IF3fv3g91YAqXYwCsFguMkxqh4diXvS6+08M NonW+flKIVakz9jhrhth3S9M6zU7A6A= -----END CERTIFICATE-----Generated at Thu Mar 26 18:58:39 2026 by rpki-client