$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3426c2bc-81a2-3e2c-989c-d566986b6b2c.roa File: 3426c2bc-81a2-3e2c-989c-d566986b6b2c.roa (raw, json) Hash identifier: w1uYwfqm7MFYDgHgO+HcnViNtmkfhN/NCvjScQy9RCY= Subject key identifier: 65:78:A9:61:E8:48:29:5C:66:8B:3B:01:C0:5D:D3:9C:8F:F8:CC:48 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584DE908AE1499DAA5D0A8DA5040 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3426c2bc-81a2-3e2c-989c-d566986b6b2c.roa Signing time: Thu 21 May 2026 19:22:25 +0000 ROA not before: Thu 21 May 2026 19:22:25 +0000 ROA not after: Wed 19 Aug 2026 19:22:25 +0000 asID: 9009 IP address blocks: 172.120.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:08:ae:14:99:da:a5:d0:a8:da:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 21 19:22:25 2026 GMT Not After : Aug 19 19:22:25 2026 GMT Subject: CN=5ea9a6b9-0c53-43a7-802b-550ddca4980d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:20:7e:e3:9d:fd:f4:63:e7:a5:3b:5e:58: ea:7e:b3:b2:f9:b9:02:d8:6f:b7:86:ca:73:8a:15: 84:6b:86:ad:7d:fd:a7:fb:78:87:61:28:6f:6c:8b: 2a:1c:2e:6f:36:ad:ee:86:47:56:58:81:9e:d8:59: 12:81:5a:8e:5f:f2:e7:fd:7f:1a:97:d8:54:7d:3f: c2:89:5b:ed:f8:e1:5b:eb:0c:f7:d5:d3:69:42:31: 51:a7:13:49:9d:a3:37:05:8b:69:02:6b:11:01:e8: d0:7d:d7:32:5d:9e:f0:6d:28:f8:65:bc:34:04:b3: fa:05:59:eb:ae:87:2f:4c:c4:3a:af:72:66:7b:80: c6:cb:d6:4f:e0:dd:05:f7:68:3c:d8:06:91:61:36: b7:c2:e9:72:a2:33:49:9e:89:07:92:4d:c6:64:ed: ac:f8:4f:2c:fa:9a:b1:6a:a0:98:c5:f1:bd:79:98: f6:23:89:80:e2:7e:23:a7:41:f4:ae:c4:55:90:91: 88:31:32:e9:73:81:cc:7b:b2:5e:2e:3a:9a:7d:49: ea:7e:46:8b:24:2a:96:58:6e:97:de:7b:66:b1:e1: 4b:49:16:76:65:4d:9a:48:9e:61:c0:f8:1b:63:0e: 92:51:25:94:e8:fa:6d:43:79:28:02:46:f5:c9:d2: 0a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:78:A9:61:E8:48:29:5C:66:8B:3B:01:C0:5D:D3:9C:8F:F8:CC:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3426c2bc-81a2-3e2c-989c-d566986b6b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:00:1f:ac:3d:57:ec:18:9f:72:14:0c:07:f7:a5:89:c9:8e: 21:92:08:84:1b:94:a7:12:51:04:72:06:f8:a9:fb:7e:0e:8b: 11:c3:cf:d7:53:50:b0:ac:00:70:14:f3:45:72:13:44:56:b8: 0c:c6:c5:a6:82:8a:e2:da:10:48:1d:7e:0d:64:b0:85:3d:25: 4f:37:88:65:a5:3d:23:ca:d9:ca:c6:2a:43:67:6d:3d:f8:37: 37:58:2f:50:82:9d:42:db:ad:c8:54:f2:57:dd:31:90:bd:cb: 68:d2:c6:2d:5f:b9:f7:f1:71:6b:28:ab:03:41:ac:16:0b:ed: 6d:f0:70:ef:fb:55:e5:7a:8d:6a:3c:b4:27:21:83:41:6b:58: f7:c5:f0:18:6c:0d:c7:95:d0:72:cb:6c:15:dd:81:b4:58:02: 70:1d:41:31:bd:28:6a:f1:3c:99:1e:dc:37:e2:28:11:4e:7d: 7a:13:a8:84:0a:d7:d1:b9:2b:2a:cf:6e:8e:f2:1e:2d:bf:5c: b6:ec:30:93:c7:f5:ff:3a:a4:ec:f2:1a:4f:84:a5:01:64:27: de:72:f2:5f:68:1b:33:f9:c1:70:2e:2c:e1:37:d8:a6:28:89: f2:3e:9b:5d:6c:ad:ef:a3:d4:34:de:64:97:27:c8:cd:ad:10: f2:4f:c6:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3pCK4Umdql0KjaUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDUyMTE5MjIyNVoXDTI2MDgxOTE5MjIyNVowLzEtMCsGA1UEAxMk NWVhOWE2YjktMGM1My00M2E3LTgwMmItNTUwZGRjYTQ5ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwIgfuOd/fRj56U7XljqfrOy+bkC2G+3hspz ihWEa4atff2n+3iHYShvbIsqHC5vNq3uhkdWWIGe2FkSgVqOX/Ln/X8al9hUfT/C iVvt+OFb6wz31dNpQjFRpxNJnaM3BYtpAmsRAejQfdcyXZ7wbSj4Zbw0BLP6BVnr rocvTMQ6r3Jme4DGy9ZP4N0F92g82AaRYTa3wulyojNJnokHkk3GZO2s+E8s+pqx aqCYxfG9eZj2I4mA4n4jp0H0rsRVkJGIMTLpc4HMe7JeLjqafUnqfkaLJCqWWG6X 3ntmseFLSRZ2ZU2aSJ5hwPgbYw6SUSWU6PptQ3koAkb1ydIK/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGV4qWHoSClcZos7AcBd05yP+MxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzQyNmMyYmMtODFhMi0z ZTJjLTk4OWMtZDU2Njk4NmI2YjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQAH6w9V+wYn3IUDAf3pYnJjiGSCIQblKcSUQRyBvip+34OixHDz9dT ULCsAHAU80VyE0RWuAzGxaaCiuLaEEgdfg1ksIU9JU83iGWlPSPK2crGKkNnbT34 NzdYL1CCnULbrchU8lfdMZC9y2jSxi1fuffxcWsoqwNBrBYL7W3wcO/7VeV6jWo8 tCchg0FrWPfF8BhsDceV0HLLbBXdgbRYAnAdQTG9KGrxPJke3DfiKBFOfXoTqIQK 19G5KyrPbo7yHi2/XLbsMJPH9f86pOzyGk+EpQFkJ95y8l9oGzP5wXAuLOE32KYo ifI+m11sre+j1DTeZJcnyM2tEPJPxng= -----END CERTIFICATE-----Generated at Tue May 26 05:31:47 2026 by rpki-client