$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3efdd006-c267-3d78-9c41-fda9df4e547e.roa File: 3efdd006-c267-3d78-9c41-fda9df4e547e.roa (raw, json) Hash identifier: kt+EJExm/9nAkwvziBY8GktzGYHnds3gRisY+V3U5JY= Subject key identifier: B5:6D:4B:0B:A6:B1:2B:C6:C1:BD:4D:0A:B7:54:C0:93:DF:20:72:05 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D0A77BB906766A8E3D7789980 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3efdd006-c267-3d78-9c41-fda9df4e547e.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 18779 IP address blocks: 172.121.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:bb:90:67:66:a8:e3:d7:78:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=d5bbf9d4-344b-4bb8-8308-af8f9dd21da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3c:5c:48:e9:38:ef:7c:f0:f0:31:d0:70:e6: 46:de:c7:2e:7e:15:a8:f8:48:77:70:c8:15:a3:6d: 31:70:a3:cc:a2:1b:43:d2:34:8b:4f:fb:9b:80:b5: 71:0a:55:91:5e:7a:d3:2f:ea:d5:91:59:b5:3c:72: 28:92:b5:5c:59:16:0b:27:6f:f3:a0:c7:69:bf:4b: 1f:11:49:77:44:8b:f5:03:38:c6:c1:b6:5e:ea:0e: d6:aa:19:bb:c3:26:6a:b2:2d:f2:1e:5c:aa:a1:05: 8c:05:3a:12:84:2d:d0:a6:5c:83:69:2b:f2:11:91: b0:a6:31:86:19:c3:28:88:07:74:e2:b1:6b:df:1c: 9e:08:96:b6:45:71:a5:5e:62:5b:26:25:f0:c2:2a: 9e:ae:56:97:2d:35:a2:f3:a8:ff:77:ce:51:9f:81: 85:72:5d:a8:fa:7d:7a:a5:3f:99:d4:42:7c:c3:2f: 11:3d:c7:08:14:5b:77:92:a4:62:fc:68:89:82:33: d0:7b:0c:97:c5:e9:51:82:46:39:04:8a:fb:32:b2: 4a:d4:c6:88:aa:09:f8:06:1e:46:42:81:92:72:cf: 62:fa:7e:16:32:25:9a:0c:74:4f:f3:11:bd:6d:d4: 40:97:27:b9:e9:0e:46:cf:ea:97:64:ab:e0:a0:b1: 63:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6D:4B:0B:A6:B1:2B:C6:C1:BD:4D:0A:B7:54:C0:93:DF:20:72:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3efdd006-c267-3d78-9c41-fda9df4e547e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c9:46:f6:73:d8:de:47:d0:a9:a3:4c:2d:32:96:c2:91:8c: 5b:8b:95:cd:4d:93:b1:00:aa:9c:4e:f8:f0:16:de:c0:7b:66: 3c:4a:b0:28:01:1e:79:9f:a5:04:25:a9:f3:36:fb:c1:3b:78: 67:61:e3:f6:f6:f7:f0:6e:3e:ab:76:8b:a7:27:72:64:5b:d4: ae:57:8f:4b:b3:af:03:f9:dc:06:96:fb:64:08:08:50:a3:40: 55:68:60:9b:50:a8:4a:b5:cb:7f:c1:f5:43:ed:18:0e:1d:2b: 10:44:1d:54:38:e5:57:66:9e:ae:57:8d:fd:95:64:23:1b:78: 94:b0:ec:64:e9:71:03:d5:d7:a9:ce:14:09:72:0f:e1:c2:9f: 80:be:57:11:0d:c9:d3:bc:77:a3:44:db:9d:44:a0:7e:36:3f: 4f:6a:aa:8e:2e:1d:bb:67:ce:cd:53:54:46:c6:5e:b6:f6:80: cd:a0:5a:ca:09:f2:16:e1:14:99:05:c8:c2:2b:16:82:c5:e9: 3a:be:22:01:cd:f1:2c:f3:55:30:1e:78:e0:fb:f8:ed:49:e3: 83:ef:7b:88:c2:af:83:36:94:f0:8c:4e:2b:ba:1e:7d:09:f2: 92:11:19:68:69:9f:c3:2b:e9:cc:82:37:3f:dc:6f:5b:93:d9: 40:11:10:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd7uQZ2ao49d4mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZDViYmY5ZDQtMzQ0Yi00YmI4LTgzMDgtYWY4ZjlkZDIxZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzxcSOk473zw8DHQcOZG3scufhWo+Eh3cMgV o20xcKPMohtD0jSLT/ubgLVxClWRXnrTL+rVkVm1PHIokrVcWRYLJ2/zoMdpv0sf EUl3RIv1AzjGwbZe6g7Wqhm7wyZqsi3yHlyqoQWMBToShC3QplyDaSvyEZGwpjGG GcMoiAd04rFr3xyeCJa2RXGlXmJbJiXwwiqerlaXLTWi86j/d85Rn4GFcl2o+n16 pT+Z1EJ8wy8RPccIFFt3kqRi/GiJgjPQewyXxelRgkY5BIr7MrJK1MaIqgn4Bh5G QoGScs9i+n4WMiWaDHRP8xG9bdRAlye56Q5Gz+qXZKvgoLFjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVtSwumsSvGwb1NCrdUwJPfIHIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2VmZGQwMDYtYzI2Ny0z ZDc4LTljNDEtZmRhOWRmNGU1NDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7JRvZz2N5H0KmjTC0ylsKRjFuLlc1Nk7EAqpxO+PAW3sB7ZjxKsCgB HnmfpQQlqfM2+8E7eGdh4/b29/BuPqt2i6cncmRb1K5Xj0uzrwP53AaW+2QICFCj QFVoYJtQqEq1y3/B9UPtGA4dKxBEHVQ45Vdmnq5Xjf2VZCMbeJSw7GTpcQPV16nO FAlyD+HCn4C+VxENydO8d6NE251EoH42P09qqo4uHbtnzs1TVEbGXrb2gM2gWsoJ 8hbhFJkFyMIrFoLF6Tq+IgHN8SzzVTAeeOD7+O1J44Pve4jCr4M2lPCMTiu6Hn0J 8pIRGWhpn8Mr6cyCNz/cb1uT2UAREL8= -----END CERTIFICATE-----Generated at Thu Mar 12 12:04:30 2026 by rpki-client