$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa File: b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa (raw, json) Hash identifier: 0FasH1arv6U5KckJfryNdWZZPUf1gwHJNBysppHlhQk= Subject key identifier: 00:40:34:25:48:55:EF:B5:5C:24:D9:8B:D8:A3:94:55:3D:9A:FC:CA Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D237A36B448E81930C6A9B200 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 6939 IP address blocks: 172.252.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:36:b4:48:e8:19:30:c6:a9:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=b300c0ff-3a82-413f-aa7a-ca3a90756776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:40:68:09:07:a6:c6:2d:fc:ca:ee:ae:25:e8: 67:9c:16:a1:a7:6b:23:da:48:e6:ea:3b:de:ce:a2: 0f:67:88:e4:be:7f:96:c0:46:62:80:06:b7:b5:10: 39:a7:f8:6d:6b:20:f8:42:97:ab:bb:e0:2e:f8:82: 43:e8:3b:76:89:a6:85:44:02:ac:fa:08:13:6a:30: 40:51:b9:ae:58:74:af:cc:31:b3:fb:88:55:5a:5b: 30:b6:ca:0b:5d:4a:3a:7f:72:89:59:d2:21:a2:56: 07:e6:ee:55:86:e6:db:69:11:3b:55:92:c8:78:3f: 90:64:db:71:92:63:89:43:39:b3:2e:7d:3d:1a:8a: 9c:77:78:f5:e4:c9:cf:81:d3:f8:f5:0b:2b:d7:93: fa:6c:66:18:53:e7:95:cd:26:bd:a2:d2:79:a1:8b: 38:81:a6:e1:95:eb:f4:eb:8b:d9:5c:41:08:c2:12: cb:24:3b:9e:fa:9d:61:56:fe:3e:a1:fa:94:3f:13: da:7f:52:91:3d:07:9c:b6:e2:22:39:c4:c4:86:a0: 7f:98:23:0a:59:98:79:66:99:62:08:cf:87:8e:6b: 51:96:02:ec:71:06:97:58:2e:83:2b:08:d1:10:77: 3e:11:08:ce:69:78:10:d1:d2:44:58:7f:eb:fc:ea: 55:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:40:34:25:48:55:EF:B5:5C:24:D9:8B:D8:A3:94:55:3D:9A:FC:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4dae3d2-6288-3696-a906-6f7e1e4116f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:33:83:59:f9:d6:3b:8b:78:7d:2a:32:61:91:2c:27:b1:28: d0:8d:9a:7a:a4:50:53:77:af:b7:b9:2c:13:b9:7e:be:0e:f6: bf:ac:a6:99:6a:3b:4d:de:b5:12:d7:e0:ee:ba:62:44:30:a4: 4f:80:cc:89:a5:70:08:8d:5d:e0:9e:94:52:a1:20:f2:39:40: 5a:29:5c:22:de:ff:0e:13:bc:9a:cd:8b:13:26:e8:54:9b:0b: 6f:ba:16:de:57:4f:bb:0f:da:5d:94:bf:15:f7:c3:4f:89:1c: 09:bb:11:0e:0e:ee:a1:1a:b8:f1:63:09:9d:92:b6:2a:5c:7e: ab:e1:0a:da:fd:d4:84:0b:f6:25:d9:e1:88:e4:d6:83:11:b3: 88:45:c7:11:68:9b:ec:0a:c8:1f:bd:d0:aa:83:ef:4e:01:bd: 13:59:a8:8f:fc:e3:55:77:5e:e4:2c:02:fb:9a:3c:8a:80:82: 59:9b:df:8a:fb:8e:b8:0a:e2:ae:01:c9:f8:8d:36:bd:94:01: 58:7a:51:52:ea:06:73:24:18:61:a2:6e:b5:38:ba:93:11:b5: 40:e4:0f:d1:e8:9e:f2:9c:f1:2c:07:51:d9:93:0f:2b:3f:71: 3c:ad:e6:d1:d9:94:99:bb:49:06:ad:f4:27:e7:0d:35:24:e0: f4:8a:19:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeja0SOgZMMapsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YjMwMGMwZmYtM2E4Mi00MTNmLWFhN2EtY2EzYTkwNzU2Nzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEBoCQemxi38yu6uJehnnBahp2sj2kjm6jve zqIPZ4jkvn+WwEZigAa3tRA5p/htayD4Qperu+Au+IJD6Dt2iaaFRAKs+ggTajBA UbmuWHSvzDGz+4hVWlswtsoLXUo6f3KJWdIholYH5u5VhubbaRE7VZLIeD+QZNtx kmOJQzmzLn09Goqcd3j15MnPgdP49Qsr15P6bGYYU+eVzSa9otJ5oYs4gabhlev0 64vZXEEIwhLLJDue+p1hVv4+ofqUPxPaf1KRPQectuIiOcTEhqB/mCMKWZh5Zpli CM+HjmtRlgLscQaXWC6DKwjREHc+EQjOaXgQ0dJEWH/r/OpVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABANCVIVe+1XCTZi9ijlFU9mvzKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjRkYWUzZDItNjI4OC0z Njk2LWE5MDYtNmY3ZTFlNDExNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPy1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMzg1n51juLeH0qMmGRLCexKNCNmnqkUFN3r7e5LBO5fr4O9r+spplq O03etRLX4O66YkQwpE+AzImlcAiNXeCelFKhIPI5QFopXCLe/w4TvJrNixMm6FSb C2+6Ft5XT7sP2l2UvxX3w0+JHAm7EQ4O7qEauPFjCZ2StipcfqvhCtr91IQL9iXZ 4Yjk1oMRs4hFxxFom+wKyB+90KqD704BvRNZqI/841V3XuQsAvuaPIqAglmb34r7 jrgK4q4ByfiNNr2UAVh6UVLqBnMkGGGibrU4upMRtUDkD9HonvKc8SwHUdmTDys/ cTyt5tHZlJm7SQat9CfnDTUk4PSKGek= -----END CERTIFICATE-----Generated at Thu Mar 26 17:43:50 2026 by rpki-client