$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/211d7af8-cf56-34a6-bf40-8a64f84fb1e6.roa File: 211d7af8-cf56-34a6-bf40-8a64f84fb1e6.roa (raw, json) Hash identifier: yJx2gJH0ekA7rKzS1W3mE1JDjgvEIvCNJHXBDlz3+bo= Subject key identifier: 49:88:41:8E:85:E4:FB:59:D4:53:27:99:00:61:01:F0:C2:88:6F:AE Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D0A77BDE6DA24EF31A3BD4E40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/211d7af8-cf56-34a6-bf40-8a64f84fb1e6.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 18779 IP address blocks: 172.120.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:bd:e6:da:24:ef:31:a3:bd:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=85567bcd-8bbb-41ef-8e81-e6537787e228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3d:c4:b4:09:15:d1:82:66:90:b2:f4:09:aa: 1b:7e:3e:10:f8:cb:09:b5:5e:7e:8b:5c:fc:5a:83: 1e:12:70:6e:7d:9e:ba:cd:23:1b:07:61:1c:f9:87: 62:95:d7:3c:85:25:07:e2:0b:fe:ba:be:2c:0e:77: 69:51:9a:f5:6c:c5:1a:61:43:e0:9b:a9:53:7e:b2: 73:7b:89:6d:cb:4f:fb:c2:ea:a2:89:ad:e6:c4:51: 20:c0:ec:cc:05:f1:e0:d6:0b:c8:bb:0f:6a:62:e3: 20:fb:9d:2c:56:fc:f9:61:0a:02:4a:ec:ea:00:38: d2:85:0e:e3:8b:44:f0:80:0c:7c:a3:6f:38:a3:3f: 37:b0:dd:5a:61:34:a0:77:c5:fe:62:63:c4:25:98: 7a:64:fe:85:8b:b4:e6:a6:a4:b4:e5:db:4c:fc:4e: 9a:96:2a:05:fd:4a:1c:02:59:f8:06:05:81:8b:17: b7:51:8e:a7:18:b0:50:f2:9f:9f:41:56:10:a3:3e: 33:7e:40:b2:de:3c:a4:60:44:ca:14:d4:af:28:cf: e1:90:bb:08:ba:84:4f:5d:f4:81:79:8e:31:82:07: ae:b3:66:63:7d:d8:44:19:d6:1a:d4:44:67:e9:9b: cb:a9:29:25:69:6f:54:98:bd:4b:10:3e:79:71:45: 02:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:88:41:8E:85:E4:FB:59:D4:53:27:99:00:61:01:F0:C2:88:6F:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/211d7af8-cf56-34a6-bf40-8a64f84fb1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:94:01:72:39:9d:0e:40:48:01:84:b7:99:51:be:9d:4d:cd: 0e:9d:19:7c:19:7d:df:b5:85:01:32:52:21:33:54:2e:23:3d: 0f:35:3f:8b:46:5a:a0:a5:34:df:34:77:41:4f:46:ed:f6:66: 07:7d:cf:17:ab:85:5f:9a:dc:30:0b:d4:3c:54:01:e5:ac:92: 15:4e:69:cf:d0:ad:fa:d5:a5:cd:96:70:ef:d2:cf:a3:9c:ea: 42:67:d7:a5:8e:67:60:5c:40:d9:ee:dd:d4:ef:85:51:18:c2: 9d:99:be:29:60:f4:18:7c:ce:4d:6b:81:f4:c3:0c:43:e5:e7: f8:a1:1c:63:6b:cd:66:10:5b:8b:de:3f:03:ea:ac:83:52:64: 0a:21:26:04:33:f1:e6:f8:86:7a:a7:52:2c:5a:ef:4d:7c:a5: 21:93:29:af:6e:73:1d:ec:98:05:f6:9d:06:76:3b:91:02:81: 8f:60:95:37:e6:1f:a6:a4:a0:a0:65:c8:b9:3a:df:c7:3e:18: 6e:14:a3:7f:c6:44:ac:bb:bf:84:e1:d8:96:4b:d0:e1:6a:ca: 4d:f2:64:50:ad:b8:bc:79:cb:22:39:64:ce:7a:5d:50:2a:c2: 61:1a:b0:9f:9c:11:fd:08:1a:c8:98:50:22:06:41:0f:e2:05: 90:75:83:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd73m2iTvMaO9TkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ODU1NjdiY2QtOGJiYi00MWVmLThlODEtZTY1Mzc3ODdlMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT3EtAkV0YJmkLL0Caobfj4Q+MsJtV5+i1z8 WoMeEnBufZ66zSMbB2Ec+Ydildc8hSUH4gv+ur4sDndpUZr1bMUaYUPgm6lTfrJz e4lty0/7wuqiia3mxFEgwOzMBfHg1gvIuw9qYuMg+50sVvz5YQoCSuzqADjShQ7j i0TwgAx8o284oz83sN1aYTSgd8X+YmPEJZh6ZP6Fi7TmpqS05dtM/E6alioF/Uoc Aln4BgWBixe3UY6nGLBQ8p+fQVYQoz4zfkCy3jykYETKFNSvKM/hkLsIuoRPXfSB eY4xggeus2ZjfdhEGdYa1ERn6ZvLqSklaW9UmL1LED55cUUCJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmIQY6F5PtZ1FMnmQBhAfDCiG+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjExZDdhZjgtY2Y1Ni0z NGE2LWJmNDAtOGE2NGY4NGZiMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+UAXI5nQ5ASAGEt5lRvp1NzQ6dGXwZfd+1hQEyUiEzVC4jPQ81P4tG WqClNN80d0FPRu32Zgd9zxerhV+a3DAL1DxUAeWskhVOac/QrfrVpc2WcO/Sz6Oc 6kJn16WOZ2BcQNnu3dTvhVEYwp2Zvilg9Bh8zk1rgfTDDEPl5/ihHGNrzWYQW4ve PwPqrINSZAohJgQz8eb4hnqnUixa7018pSGTKa9ucx3smAX2nQZ2O5ECgY9glTfm H6akoKBlyLk638c+GG4Uo3/GRKy7v4Th2JZL0OFqyk3yZFCtuLx5yyI5ZM56XVAq wmEasJ+cEf0IGsiYUCIGQQ/iBZB1gxk= -----END CERTIFICATE-----Generated at Thu Mar 12 12:04:28 2026 by rpki-client