$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deccbecf-eccc-359e-a275-dd1a5ef0148e.roa File: deccbecf-eccc-359e-a275-dd1a5ef0148e.roa (raw, json) Hash identifier: poVcF3dy0BGA8HlrDmGTSOkBMhXZj8wBUjmq/ryn8IA= Subject key identifier: 1E:0A:ED:77:27:BF:D3:5D:AB:80:91:03:F8:7E:BB:E6:96:8B:25:F2 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1F4A89161497C604BC2E2000 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deccbecf-eccc-359e-a275-dd1a5ef0148e.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 3257 IP address blocks: 172.121.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:89:16:14:97:c6:04:bc:2e:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=aa957ae7-f345-493a-875c-12db4fb90a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:f8:32:b0:94:26:04:d3:67:f9:a0:87:70: 2a:ea:7c:6b:86:1c:94:65:b9:31:9c:b8:a9:31:6e: ac:6b:59:2a:9e:b4:25:75:36:8f:89:f7:ec:b7:eb: d8:00:6c:67:e3:b8:0f:06:34:45:73:82:d4:f0:96: ec:ab:8e:ed:c1:ba:33:b7:29:42:0d:82:01:40:9c: c8:70:b8:4f:f9:59:53:06:45:02:9a:b3:33:2a:b1: a3:fb:49:34:63:74:ad:54:10:7e:1b:81:b9:79:3a: d0:b5:11:9c:a4:fc:1c:4f:8a:52:c7:34:51:df:c5: 92:26:9d:8e:d2:24:a9:64:c6:60:aa:a1:f6:f7:22: 64:4c:1c:b4:1a:91:43:f9:1b:13:06:ae:92:59:d5: 2c:90:5d:0b:d0:ec:df:04:c2:84:9c:15:db:f4:11: d7:c1:a6:2b:ed:48:15:40:89:26:56:86:04:9f:09: f0:21:ed:e5:82:2c:c2:b2:cb:3f:d4:eb:02:c2:a9: e2:b5:fc:6a:e3:be:a3:e0:67:31:26:95:af:7a:5a: f3:86:e7:39:b1:9b:89:c0:bf:ca:88:9e:40:ed:56: 7d:40:32:20:ee:03:db:9e:f8:be:f9:c7:9c:ca:9a: 9d:88:dc:e5:07:c4:e2:13:7b:08:f6:50:75:fb:47: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0A:ED:77:27:BF:D3:5D:AB:80:91:03:F8:7E:BB:E6:96:8B:25:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deccbecf-eccc-359e-a275-dd1a5ef0148e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:fd:4e:7f:7e:51:11:ce:8b:d2:73:14:fc:c3:1f:52:38:53: 5b:7d:d3:3e:d0:e2:a8:65:1f:fe:61:d7:91:65:1e:bb:30:5d: 8e:68:6f:07:bf:1b:6a:47:a0:df:0c:5a:dc:3d:76:00:77:d9: 6f:8f:51:26:6f:5d:61:d4:f1:3c:07:3b:32:fe:bc:ca:fe:0f: d3:99:8d:20:d0:bd:bd:6c:80:e6:96:44:af:57:ea:07:3f:3b: 77:47:ed:8c:30:6e:ea:67:85:7f:08:42:b7:f8:ea:fb:d8:27: 60:89:67:0a:7a:7f:8a:0a:39:e4:c6:0b:65:6f:0a:49:99:c2: 6a:22:d3:da:6d:a4:de:ca:68:e1:c2:aa:f0:72:58:4a:35:a5: 24:41:25:6d:b6:05:64:d0:c0:c3:93:f0:ee:12:fd:5d:2d:9e: 39:ab:af:2a:c4:9f:f3:e5:82:54:0b:2f:22:23:f9:49:24:9f: 1b:e5:69:63:77:4f:02:45:23:ab:54:e6:37:da:cd:2d:61:ec: eb:6b:00:4f:52:a9:44:c6:5d:d2:2e:00:7a:77:83:56:8a:38: f9:a2:df:67:18:23:41:fc:fe:25:b9:a5:96:76:2d:ec:69:08: 56:45:81:a8:df:65:1f:e3:0e:3a:0b:8c:b7:64:ce:0b:97:25: 29:2e:19:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSokWFJfGBLwuIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YWE5NTdhZTctZjM0NS00OTNhLTg3NWMtMTJkYjRmYjkwYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkz4MrCUJgTTZ/mgh3Aq6nxrhhyUZbkxnLip MW6sa1kqnrQldTaPiffst+vYAGxn47gPBjRFc4LU8Jbsq47twboztylCDYIBQJzI cLhP+VlTBkUCmrMzKrGj+0k0Y3StVBB+G4G5eTrQtRGcpPwcT4pSxzRR38WSJp2O 0iSpZMZgqqH29yJkTBy0GpFD+RsTBq6SWdUskF0L0OzfBMKEnBXb9BHXwaYr7UgV QIkmVoYEnwnwIe3lgizCsss/1OsCwqnitfxq476j4GcxJpWvelrzhuc5sZuJwL/K iJ5A7VZ9QDIg7gPbnvi++cecypqdiNzlB8TiE3sI9lB1+0fgxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4K7Xcnv9Ndq4CRA/h+u+aWiyXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGVjY2JlY2YtZWNjYy0z NTllLWEyNzUtZGQxYTVlZjAxNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb9Tn9+URHOi9JzFPzDH1I4U1t90z7Q4qhlH/5h15FlHrswXY5obwe/ G2pHoN8MWtw9dgB32W+PUSZvXWHU8TwHOzL+vMr+D9OZjSDQvb1sgOaWRK9X6gc/ O3dH7YwwbupnhX8IQrf46vvYJ2CJZwp6f4oKOeTGC2VvCkmZwmoi09ptpN7KaOHC qvByWEo1pSRBJW22BWTQwMOT8O4S/V0tnjmrryrEn/PlglQLLyIj+UkknxvlaWN3 TwJFI6tU5jfazS1h7OtrAE9SqUTGXdIuAHp3g1aKOPmi32cYI0H8/iW5pZZ2Lexp CFZFgajfZR/jDjoLjLdkzguXJSkuGc4= -----END CERTIFICATE-----Generated at Thu Mar 26 02:34:55 2026 by rpki-client