$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/876c7d0f-0270-3dd0-97b9-32c6685c5105.roa File: 876c7d0f-0270-3dd0-97b9-32c6685c5105.roa (raw, json) Hash identifier: X3/9035fC3fbTLtbhEAlEx7T6p9zL/oXFlu3hNAfQzQ= Subject key identifier: 5D:0A:49:D5:E4:B3:73:1A:A4:C8:70:5D:22:6C:F3:9E:14:D8:58:72 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D492A4A99F4AD676A37AA6BE0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/876c7d0f-0270-3dd0-97b9-32c6685c5105.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 55201 IP address blocks: 172.121.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:4a:99:f4:ad:67:6a:37:aa:6b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=76fa5673-caf1-4a37-9767-a2cbb9953b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:3b:56:b6:38:05:62:c0:b2:e3:5f:e8:f7: c1:1e:fc:3a:24:b4:2f:92:d1:d0:b3:9e:93:a8:3d: 5c:72:32:49:65:c7:59:46:34:85:be:fe:bc:f6:ba: c4:cd:e2:16:94:55:e1:ac:b3:01:9a:5b:49:aa:a9: 01:a6:97:7d:66:91:53:48:23:27:7f:1e:3e:f5:c8: 9d:f2:1b:d2:d4:9c:8f:6d:b5:0f:17:19:62:ca:1e: 65:03:17:28:e5:5b:65:a2:b4:ae:4f:07:1d:c1:52: e4:f3:f0:34:c8:e8:d9:f0:23:b5:4e:96:2e:a7:e9: f6:35:2e:cc:9f:f1:f7:ef:69:b5:f0:80:5f:40:2b: ae:fe:72:26:b9:bf:9d:0d:bd:e0:dd:bb:1e:6d:be: 18:18:4e:f4:a9:42:55:02:4b:5d:9d:57:93:18:33: 86:26:a6:e8:e3:8b:97:a8:21:41:f1:1d:c3:58:63: a8:e1:7e:98:95:a6:6a:9f:13:8f:af:33:a1:6a:ce: 86:5f:42:a4:7c:ae:ab:31:41:ba:16:7a:6e:3c:24: 44:4e:17:fd:d8:68:1c:3c:c2:24:8e:1f:f3:6b:50: 07:37:16:ad:8a:bb:d8:e8:19:51:61:fa:b0:19:d5: b7:0e:d3:5c:5a:24:40:0b:69:a8:d7:bf:32:40:92: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0A:49:D5:E4:B3:73:1A:A4:C8:70:5D:22:6C:F3:9E:14:D8:58:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/876c7d0f-0270-3dd0-97b9-32c6685c5105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:77:14:d0:5b:4a:ea:9b:d2:4a:4c:2c:55:e3:23:2e:bf:02: f9:8c:dd:4c:d6:ce:4b:2e:a5:01:29:82:ba:89:5a:4e:2d:84: bf:94:6f:88:53:ad:38:6d:89:24:41:26:35:81:d0:3f:c1:d3: 8a:19:9a:57:2f:51:28:07:e0:fe:1b:b7:6e:a6:b3:24:7c:29: ad:1e:f1:69:bf:c0:1e:97:a1:d6:19:c2:65:5f:a3:2f:0b:c9: 67:dc:b0:1b:60:cb:3e:90:b9:ee:43:a7:c5:e7:99:e5:90:26: 07:e4:24:ee:88:35:d1:a7:79:c6:42:64:81:7b:99:68:09:9f: 05:45:13:04:f3:e6:e7:49:f7:f4:28:d5:8b:5b:17:ff:39:21: 1f:d7:a4:19:31:c0:85:34:33:fe:82:be:7e:aa:c1:7a:87:f0: 55:ab:cf:2f:7e:5d:02:54:2b:6d:6f:a8:dd:61:49:92:4c:14: 9d:6d:7e:07:e4:46:d4:e7:95:25:40:73:01:d2:e7:6a:0f:6b: 52:77:5d:cc:55:d7:cb:e5:6f:bc:cf:1a:fb:39:f1:71:b5:9c: f7:de:c5:92:f8:ac:d6:97:a3:3b:54:12:c5:b9:39:8a:b5:49: cc:5e:1e:6a:23:70:91:9b:57:12:5e:de:a8:f3:27:24:ae:4d: 3c:52:a1:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKkqZ9K1najeqa+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NzZmYTU2NzMtY2FmMS00YTM3LTk3NjctYTJjYmI5OTUzYjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw347VrY4BWLAsuNf6PfBHvw6JLQvktHQs56T qD1ccjJJZcdZRjSFvv689rrEzeIWlFXhrLMBmltJqqkBppd9ZpFTSCMnfx4+9cid 8hvS1JyPbbUPFxliyh5lAxco5VtlorSuTwcdwVLk8/A0yOjZ8CO1TpYup+n2NS7M n/H372m18IBfQCuu/nImub+dDb3g3bsebb4YGE70qUJVAktdnVeTGDOGJqbo44uX qCFB8R3DWGOo4X6YlaZqnxOPrzOhas6GX0KkfK6rMUG6FnpuPCREThf92GgcPMIk jh/za1AHNxatirvY6BlRYfqwGdW3DtNcWiRAC2mo178yQJJmRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0KSdXks3MapMhwXSJs854U2FhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODc2YzdkMGYtMDI3MC0z ZGQwLTk3YjktMzJjNjY4NWM1MTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ3FNBbSuqb0kpMLFXjIy6/AvmM3UzWzksupQEpgrqJWk4thL+Ub4hT rThtiSRBJjWB0D/B04oZmlcvUSgH4P4bt26msyR8Ka0e8Wm/wB6XodYZwmVfoy8L yWfcsBtgyz6Que5Dp8XnmeWQJgfkJO6INdGnecZCZIF7mWgJnwVFEwTz5udJ9/Qo 1YtbF/85IR/XpBkxwIU0M/6Cvn6qwXqH8FWrzy9+XQJUK21vqN1hSZJMFJ1tfgfk RtTnlSVAcwHS52oPa1J3XcxV18vlb7zPGvs58XG1nPfexZL4rNaXoztUEsW5OYq1 ScxeHmojcJGbVxJe3qjzJySuTTxSoVA= -----END CERTIFICATE-----Generated at Thu Mar 26 02:47:54 2026 by rpki-client