$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa File: 40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa (raw, json) Hash identifier: SZt2aD7F8mLDrQOC4SfoYDFTeJIPemtBuDh/PwdLYOo= Subject key identifier: 91:6D:C8:CE:84:8C:50:91:B5:61:A1:F2:81:F4:43:90:3B:AD:09:0D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D0A77BC92F3048D7DDD12A1C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 18779 IP address blocks: 172.121.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:bc:92:f3:04:8d:7d:dd:12:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=f119d924-9e00-4d4c-a5b7-09b45b2e0377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:26:e2:32:28:45:da:fb:d4:91:f7:16:83: 9e:97:84:12:b5:e2:d3:e0:83:14:3b:fd:6e:a2:ab: c7:9a:1c:79:1c:f5:66:cb:cb:9a:e6:b3:38:16:76: 32:06:f2:4b:a1:75:80:6f:f1:de:93:20:76:da:db: 55:a7:c8:b0:31:cf:0e:08:fa:cd:a2:8e:42:f3:d1: 44:8d:0b:25:c8:c8:f8:67:2f:65:eb:ba:f3:67:37: 36:f4:78:6f:fc:06:49:b4:88:3b:8b:04:cb:57:fa: cb:01:ac:ea:97:32:33:51:fc:19:4e:94:3d:76:88: 09:0b:a7:4b:64:06:1c:13:62:04:26:22:fe:36:cd: 63:db:ce:5a:5c:fd:c5:c1:6d:76:c9:cd:fb:4c:70: cc:4a:15:71:0c:ef:ca:31:31:bb:d5:3b:30:9d:87: ad:a8:b1:f4:4a:78:48:c5:c2:2a:a1:2f:c2:98:55: 3b:ba:50:53:63:de:d9:6c:a7:1d:e8:d1:7f:fe:e0: fb:7d:dd:83:d8:80:3c:1a:8e:dc:9b:b2:0d:86:8a: f1:4f:60:cf:e3:10:c1:f0:bf:67:74:b5:96:69:89: 59:9c:03:f2:e8:b7:c6:c4:d1:b0:0a:cf:66:e2:27: e4:b9:0c:c1:7a:ef:e3:a5:a5:36:48:81:a5:7a:d1: c8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6D:C8:CE:84:8C:50:91:B5:61:A1:F2:81:F4:43:90:3B:AD:09:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:62:ce:2e:18:0c:97:82:72:b2:25:52:e4:ff:c1:32:6a:31: 0a:41:ce:cc:a1:b0:74:18:94:a1:b8:65:bc:b4:e9:06:1f:7b: e2:7f:7b:ff:ad:e6:a7:38:07:95:e0:76:88:8d:9e:cd:d0:65: cf:93:e6:23:4d:18:23:54:9d:f4:36:b0:a1:af:92:d1:82:eb: 6b:c3:8e:9f:94:9b:86:bb:a3:f4:5f:1d:cc:3b:b0:d2:45:91: b0:fa:d8:07:63:a9:95:57:7a:24:49:df:01:6d:af:53:cf:f3: 9f:01:8a:47:91:53:e2:28:db:4e:24:9c:23:25:15:6f:ab:bb: 45:ea:0a:56:84:14:f6:67:ee:7a:5c:65:09:44:2d:63:d7:72: 40:54:50:16:2a:01:19:43:30:59:be:be:52:f2:d0:3d:6f:cf: da:ae:af:ff:31:b2:36:34:44:e1:46:5c:e9:15:39:bc:c8:47: a9:68:e8:7d:b8:3d:b2:69:a8:26:3c:92:cb:5c:23:41:27:f6: 1d:7f:56:f0:02:e1:b3:e4:23:9b:78:cb:ee:29:45:61:7d:e0: 94:56:0f:3c:b8:cf:ce:93:16:dc:6a:7d:44:7c:96:46:c5:2c: 60:a6:6f:58:b0:d0:fa:9a:72:c6:5e:ab:76:85:5d:6c:fd:1c: 56:56:5f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd7yS8wSNfd0SocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjExOWQ5MjQtOWUwMC00ZDRjLWE1YjctMDliNDViMmUwMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDYm4jIoRdr71JH3FoOel4QSteLT4IMUO/1u oqvHmhx5HPVmy8ua5rM4FnYyBvJLoXWAb/HekyB22ttVp8iwMc8OCPrNoo5C89FE jQslyMj4Zy9l67rzZzc29Hhv/AZJtIg7iwTLV/rLAazqlzIzUfwZTpQ9dogJC6dL ZAYcE2IEJiL+Ns1j285aXP3FwW12yc37THDMShVxDO/KMTG71TswnYetqLH0SnhI xcIqoS/CmFU7ulBTY97ZbKcd6NF//uD7fd2D2IA8Go7cm7INhorxT2DP4xDB8L9n dLWWaYlZnAPy6LfGxNGwCs9m4ifkuQzBeu/jpaU2SIGletHIbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFtyM6EjFCRtWGh8oH0Q5A7rQkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDBkNjQ0ZDQtYzk4ZC0z Y2U5LThjMWItOTg2YTBlODNiOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrHn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNizi4YDJeCcrIlUuT/wTJqMQpBzsyhsHQYlKG4Zby06QYfe+J/e/+t 5qc4B5XgdoiNns3QZc+T5iNNGCNUnfQ2sKGvktGC62vDjp+Um4a7o/RfHcw7sNJF kbD62AdjqZVXeiRJ3wFtr1PP858BikeRU+Io204knCMlFW+ru0XqClaEFPZn7npc ZQlELWPXckBUUBYqARlDMFm+vlLy0D1vz9qur/8xsjY0ROFGXOkVObzIR6lo6H24 PbJpqCY8kstcI0En9h1/VvAC4bPkI5t4y+4pRWF94JRWDzy4z86TFtxqfUR8lkbF LGCmb1iw0PqacsZeq3aFXWz9HFZWX2s= -----END CERTIFICATE-----Generated at Thu Mar 12 12:04:28 2026 by rpki-client