$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/00e10444-5b59-3b64-9d48-8e1eabdeb2b1.roa File: 00e10444-5b59-3b64-9d48-8e1eabdeb2b1.roa (raw, json) Hash identifier: wmnC+yUTTyARGcYU58lVwbtyXFR4onea/KvjE0R+xyQ= Subject key identifier: 57:4B:6D:95:8B:87:48:05:D2:BB:CC:92:9F:6E:83:83:2A:36:1D:91 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D00F5B414DFE14089A90720 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/00e10444-5b59-3b64-9d48-8e1eabdeb2b1.roa Signing time: Mon 09 Mar 2026 17:21:57 +0000 ROA not before: Mon 09 Mar 2026 17:21:57 +0000 ROA not after: Sun 07 Jun 2026 17:21:57 +0000 asID: 398781 IP address blocks: 172.120.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:00:f5:b4:14:df:e1:40:89:a9:07:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:21:57 2026 GMT Not After : Jun 7 17:21:57 2026 GMT Subject: CN=620324fc-54f7-42e1-acad-fe3d45e631bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:de:86:7a:ec:c0:29:8e:23:40:cc:91:09: 3d:9b:0d:68:8c:0a:73:08:dc:b6:fc:eb:d1:f2:d5: f4:85:75:f6:e8:84:62:a1:70:22:f1:e4:8a:d2:94: 7f:a8:99:ac:4b:58:69:c1:47:c6:a0:bd:c5:55:10: df:a4:a8:34:db:ab:bf:9e:6d:a8:87:ad:0a:a5:b4: da:b6:c8:3b:7e:9e:88:61:65:c5:80:cc:f0:b4:0b: 1a:0a:ae:62:97:ad:3a:c5:38:46:39:70:73:00:f1: b9:50:16:da:d7:74:d3:c0:ea:ee:31:bb:43:bf:e6: 61:5b:6e:df:b4:95:0b:ae:86:58:ba:ae:b1:09:51: f6:45:9f:22:5f:dc:31:82:1d:9f:4f:8b:99:e4:10: 9b:ee:33:52:cd:82:52:0f:3b:cf:01:77:05:6a:09: c6:69:e1:50:c3:2d:b0:d5:0d:d6:49:66:24:e2:74: b5:ab:05:eb:66:d8:b4:52:83:25:40:f4:83:ef:42: 3c:8e:3a:a1:58:63:d9:93:86:05:9f:e8:e9:4a:ab: 71:ee:e1:d2:32:98:96:9a:8c:29:5d:77:65:b3:79: 98:52:9b:fb:de:1a:94:a8:f8:c6:23:a5:6f:4a:ee: c8:1e:36:ba:43:e9:ac:75:19:ca:dd:fb:b0:69:de: 29:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4B:6D:95:8B:87:48:05:D2:BB:CC:92:9F:6E:83:83:2A:36:1D:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/00e10444-5b59-3b64-9d48-8e1eabdeb2b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f0:80:11:ba:65:b9:06:e0:14:12:fe:3e:11:18:01:1a:c8: c4:a4:07:b0:01:ce:83:e9:d4:b2:b4:ce:ba:80:d7:59:41:10: b7:0f:51:7c:98:3f:b8:60:f0:2a:4a:96:4b:f9:45:da:16:6d: 15:6c:e0:99:81:64:a0:95:30:ad:d2:fb:3c:9b:d3:08:b8:66: 93:a1:e4:16:8c:af:73:69:8d:f4:96:8c:33:62:46:7d:7c:f2: fb:79:3b:98:20:f7:74:21:81:80:2d:2a:df:30:22:cc:a9:f1: 65:fc:41:1c:ac:ab:52:db:0b:ea:80:f1:b6:20:b3:20:3a:e8: 2c:8f:87:69:f0:6f:c8:86:41:26:1a:ce:75:fe:67:99:a5:3a: 83:be:19:c4:18:3e:f0:92:45:b3:a3:d6:37:fb:fd:d2:e7:35: 6a:08:1c:54:32:74:c0:1f:82:f7:73:72:ff:9f:0d:9f:85:f0: 10:80:97:5b:ef:39:f8:ce:05:64:f1:25:71:fb:91:fb:7d:97: 1b:f4:87:38:d2:b6:45:b7:38:a6:9e:17:36:7b:2c:9d:69:13: 59:aa:4b:a0:b9:33:3e:09:91:34:5f:39:91:66:bb:85:18:09: df:2d:4f:fd:e6:b6:e6:8a:92:97:6c:5f:7a:e8:62:4a:01:c7: df:d3:1c:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dAPW0FN/hQImpByAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MjE1N1oXDTI2MDYwNzE3MjE1N1owLzEtMCsGA1UEAxMk NjIwMzI0ZmMtNTRmNy00MmUxLWFjYWQtZmUzZDQ1ZTYzMWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEHehnrswCmOI0DMkQk9mw1ojApzCNy2/OvR 8tX0hXX26IRioXAi8eSK0pR/qJmsS1hpwUfGoL3FVRDfpKg026u/nm2oh60KpbTa tsg7fp6IYWXFgMzwtAsaCq5il606xThGOXBzAPG5UBba13TTwOruMbtDv+ZhW27f tJULroZYuq6xCVH2RZ8iX9wxgh2fT4uZ5BCb7jNSzYJSDzvPAXcFagnGaeFQwy2w 1Q3WSWYk4nS1qwXrZti0UoMlQPSD70I8jjqhWGPZk4YFn+jpSqtx7uHSMpiWmowp XXdls3mYUpv73hqUqPjGI6VvSu7IHja6Q+msdRnK3fuwad4pewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdLbZWLh0gF0rvMkp9ug4MqNh2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDBlMTA0NDQtNWI1OS0z YjY0LTlkNDgtOGUxZWFiZGViMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbwgBG6ZbkG4BQS/j4RGAEayMSkB7ABzoPp1LK0zrqA11lBELcPUXyY P7hg8CpKlkv5RdoWbRVs4JmBZKCVMK3S+zyb0wi4ZpOh5BaMr3NpjfSWjDNiRn18 8vt5O5gg93QhgYAtKt8wIsyp8WX8QRysq1LbC+qA8bYgsyA66CyPh2nwb8iGQSYa znX+Z5mlOoO+GcQYPvCSRbOj1jf7/dLnNWoIHFQydMAfgvdzcv+fDZ+F8BCAl1vv OfjOBWTxJXH7kft9lxv0hzjStkW3OKaeFzZ7LJ1pE1mqS6C5Mz4JkTRfOZFmu4UY Cd8tT/3mtuaKkpdsX3roYkoBx9/THIQ= -----END CERTIFICATE-----Generated at Mon Mar 23 18:48:19 2026 by rpki-client