$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25b7469f-2c50-3041-a615-e681fdd0b6ce.roa File: 25b7469f-2c50-3041-a615-e681fdd0b6ce.roa (raw, json) Hash identifier: zqN6xPMNlm7wl4ZinC+M6plHqdEva814jhPAvhElxXE= Subject key identifier: D2:AA:D0:E7:ED:B0:1A:E0:E4:58:CD:04:B6:94:C7:66:49:55:09:AC Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D01F6A3EB86B099BBEA9200 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25b7469f-2c50-3041-a615-e681fdd0b6ce.roa Signing time: Mon 09 Mar 2026 17:23:58 +0000 ROA not before: Mon 09 Mar 2026 17:23:58 +0000 ROA not after: Sun 07 Jun 2026 17:23:58 +0000 asID: 398781 IP address blocks: 172.120.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:01:f6:a3:eb:86:b0:99:bb:ea:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:23:58 2026 GMT Not After : Jun 7 17:23:58 2026 GMT Subject: CN=944a12ea-c921-47ed-9633-2f695e0b1e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fa:8f:d5:ed:89:88:bf:72:50:d8:bd:49:b0: 8e:49:73:ec:f0:c9:fa:ae:14:94:db:cf:dc:90:53: b4:43:23:fd:71:61:7f:01:d5:43:c2:d9:6c:fa:64: 16:a3:f9:a9:60:e8:ef:f7:78:d9:f7:7a:54:cb:89: b8:50:9f:64:ae:2c:46:02:f4:42:e2:7b:a5:a2:1d: c3:43:86:ab:b5:e9:93:8b:e6:1f:ed:bc:ab:5f:c0: df:e3:30:76:b7:24:0d:b0:9d:51:46:aa:b0:03:1a: c8:a2:ba:6b:74:7a:c3:83:f9:f1:1d:d5:30:31:62: e8:6e:07:76:e5:67:61:f9:8e:ea:a5:f1:0b:e3:ff: b0:05:7f:2d:fb:fb:f1:35:ed:e5:7b:60:f8:cc:6f: 3c:3c:73:7c:e2:f2:e3:e1:95:87:bb:37:30:43:b8: ba:08:93:59:af:44:ca:a9:71:d5:09:ba:87:6d:69: 2f:84:ab:7f:44:23:63:61:29:9e:4e:4b:b3:33:9a: 92:d9:dd:b4:d0:91:c9:c7:76:d4:b6:bc:58:05:56: 5e:29:8b:26:43:e1:a4:9e:90:d6:3b:48:80:9c:6f: 60:08:13:11:e2:65:7b:e4:5c:dc:fa:91:39:05:66: 06:01:11:af:d4:e3:49:05:12:d6:a6:c2:a3:30:ca: a4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AA:D0:E7:ED:B0:1A:E0:E4:58:CD:04:B6:94:C7:66:49:55:09:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25b7469f-2c50-3041-a615-e681fdd0b6ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a0:6f:5b:63:a5:14:8a:13:cc:65:dd:c2:94:56:d7:33:86: f5:52:01:c8:d2:a0:20:8a:67:c5:0f:3c:70:3d:f0:9e:12:66: ad:b2:59:23:57:56:aa:63:64:19:07:2e:8d:d0:38:7f:50:56: 4f:95:64:a7:44:1d:bd:ae:37:5a:4d:b4:cf:6c:48:25:18:df: 00:3c:2d:df:33:36:c3:95:42:01:2d:24:eb:d2:75:1d:95:1e: c3:85:42:26:ec:39:4e:06:d8:1f:7d:49:84:d2:cb:cc:9a:6c: 47:94:a7:fc:5a:f9:2b:83:72:25:07:7f:00:6f:98:76:83:ac: 74:20:87:40:f9:70:eb:ea:18:9c:ef:0d:68:2d:ca:57:a0:5a: 40:6a:9f:31:6b:a7:85:a0:b2:6f:0c:23:42:64:21:ad:93:da: aa:f1:97:1e:d3:31:38:a3:05:9f:a7:d4:e5:10:65:39:51:d6: 54:e3:ba:77:a4:40:20:11:0d:16:72:6d:f0:35:3a:ec:55:27: 63:25:46:6c:ca:ab:37:48:cb:fa:7d:fa:b4:af:bd:32:6d:d2: b2:f6:ce:cc:91:14:b5:94:15:88:05:3a:55:56:f8:32:f6:e4: b0:1a:ce:c7:c1:e2:3d:c2:b4:07:9d:01:6d:d1:e0:48:21:ba: 0d:dd:0b:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dAfaj64awmbvqkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MjM1OFoXDTI2MDYwNzE3MjM1OFowLzEtMCsGA1UEAxMk OTQ0YTEyZWEtYzkyMS00N2VkLTk2MzMtMmY2OTVlMGIxZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfqP1e2JiL9yUNi9SbCOSXPs8Mn6rhSU28/c kFO0QyP9cWF/AdVDwtls+mQWo/mpYOjv93jZ93pUy4m4UJ9krixGAvRC4nuloh3D Q4artemTi+Yf7byrX8Df4zB2tyQNsJ1RRqqwAxrIorprdHrDg/nxHdUwMWLobgd2 5Wdh+Y7qpfEL4/+wBX8t+/vxNe3le2D4zG88PHN84vLj4ZWHuzcwQ7i6CJNZr0TK qXHVCbqHbWkvhKt/RCNjYSmeTkuzM5qS2d200JHJx3bUtrxYBVZeKYsmQ+GknpDW O0iAnG9gCBMR4mV75Fzc+pE5BWYGARGv1ONJBRLWpsKjMMqklwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKq0OftsBrg5FjNBLaUx2ZJVQmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjViNzQ2OWYtMmM1MC0z MDQxLWE2MTUtZTY4MWZkZDBiNmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHg2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFigb1tjpRSKE8xl3cKUVtczhvVSAcjSoCCKZ8UPPHA98J4SZq2yWSNX VqpjZBkHLo3QOH9QVk+VZKdEHb2uN1pNtM9sSCUY3wA8Ld8zNsOVQgEtJOvSdR2V HsOFQibsOU4G2B99SYTSy8yabEeUp/xa+SuDciUHfwBvmHaDrHQgh0D5cOvqGJzv DWgtylegWkBqnzFrp4Wgsm8MI0JkIa2T2qrxlx7TMTijBZ+n1OUQZTlR1lTjunek QCARDRZybfA1OuxVJ2MlRmzKqzdIy/p9+rSvvTJt0rL2zsyRFLWUFYgFOlVW+DL2 5LAazsfB4j3CtAedAW3R4Eghug3dC9M= -----END CERTIFICATE-----Generated at Mon Mar 23 18:48:41 2026 by rpki-client