$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71f5e3d9-461c-3787-adf5-d3de88b25e76.roa File: 71f5e3d9-461c-3787-adf5-d3de88b25e76.roa (raw, json) Hash identifier: DW43O7p+e/5KIi02C/Czn64qj/juLMgJJLc5/9dB74E= Subject key identifier: C2:2B:89:A1:85:E6:82:25:DF:03:E5:CB:1E:2D:AF:75:61:FE:DE:53 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D8864A1C16B6563B795C580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71f5e3d9-461c-3787-adf5-d3de88b25e76.roa Signing time: Mon 09 Mar 2026 21:54:50 +0000 ROA not before: Mon 09 Mar 2026 21:54:50 +0000 ROA not after: Sun 07 Jun 2026 21:54:50 +0000 asID: 398781 IP address blocks: 172.252.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:88:64:a1:c1:6b:65:63:b7:95:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 21:54:50 2026 GMT Not After : Jun 7 21:54:50 2026 GMT Subject: CN=af0bbb11-0180-4166-8b47-6153cf257855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6e:71:14:d2:0b:9f:80:59:ca:61:21:2d:63: 3f:40:a5:72:58:51:b6:37:37:11:49:90:ac:31:ea: 2e:2f:52:5b:b8:0d:d7:32:63:b8:6d:81:13:c6:6f: 17:db:a4:9b:6f:73:c5:88:3e:8a:35:a3:6b:2d:f2: ba:42:91:8d:db:80:3d:92:f5:73:f3:4a:53:0d:f2: e4:81:8a:c9:d3:ac:30:5c:b2:bb:0f:8c:00:06:d1: dc:77:50:cb:88:08:73:ba:0b:bf:60:66:f9:64:b9: 57:e7:b1:46:36:5f:7f:96:56:82:2e:30:40:ef:b3: d7:be:bf:8b:61:03:4d:f9:ff:1e:78:4a:59:74:a3: 00:9a:5f:e1:cc:19:69:7a:92:41:7a:68:7a:92:80: 0a:0a:0b:0b:ca:9f:a7:50:b9:9f:cc:6f:49:b3:8c: 7b:2e:84:e6:e3:07:34:5a:a6:14:27:c4:f7:7d:7d: 84:06:3a:2c:57:14:81:00:9f:06:4e:38:99:90:8e: b8:98:7d:2c:27:f1:75:96:fe:3f:26:10:54:04:ae: 57:94:bb:96:0a:e9:c4:3a:6a:0c:d8:1b:b2:40:ff: 7f:83:27:14:e3:b4:a4:ee:be:4e:65:35:4f:16:e6: c8:4f:ff:34:1a:6c:2b:1b:0e:3f:ee:18:51:f9:ed: 67:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2B:89:A1:85:E6:82:25:DF:03:E5:CB:1E:2D:AF:75:61:FE:DE:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/71f5e3d9-461c-3787-adf5-d3de88b25e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d2:20:73:b6:a8:e2:b3:07:f6:cd:e4:c2:5c:bc:26:73:6c: 3e:5e:44:a5:8b:b6:da:b7:40:08:b8:37:fd:58:8e:a4:d4:c7: 46:c4:bc:c4:89:f0:f9:42:c5:0c:5a:d5:33:d6:07:fa:6d:6e: 5b:b7:6d:3d:fb:d2:4a:4d:98:c8:28:fb:79:5f:49:7b:2f:7b: 72:2b:6f:ad:34:13:b8:83:ee:64:92:dc:36:9b:e6:7f:58:43: 2c:1d:1b:c9:28:ae:c3:7f:a9:04:68:60:d8:97:54:b5:67:e8: ce:57:ed:6b:15:4b:a0:2a:3d:8e:28:ed:c2:54:ca:c2:ee:50: 55:42:75:75:61:f0:78:52:6a:7c:06:f6:21:f3:ab:52:5f:16: 4c:9f:cb:5c:8f:fb:0f:16:14:b5:ac:db:d7:fb:5d:0d:b5:26: 3a:7e:90:d3:ec:44:38:0a:74:47:fe:39:e7:67:02:f3:28:24: 3c:e2:d5:89:03:a8:ea:c8:ad:2d:46:2c:c2:b8:3b:8e:49:0e: ee:2e:b4:23:b1:b7:b3:a8:02:09:a0:b7:54:39:6c:48:7e:d7: 49:3e:f3:e0:8f:da:40:cb:91:a3:21:7f:4f:ce:df:df:6b:f8: 69:9f:7e:2e:8d:6b:c3:c8:82:ad:c5:24:c9:bf:6f:13:ee:9b: 16:a5:cf:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0diGShwWtlY7eVxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTIxNTQ1MFoXDTI2MDYwNzIxNTQ1MFowLzEtMCsGA1UEAxMk YWYwYmJiMTEtMDE4MC00MTY2LThiNDctNjE1M2NmMjU3ODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi25xFNILn4BZymEhLWM/QKVyWFG2NzcRSZCs MeouL1JbuA3XMmO4bYETxm8X26Sbb3PFiD6KNaNrLfK6QpGN24A9kvVz80pTDfLk gYrJ06wwXLK7D4wABtHcd1DLiAhzugu/YGb5ZLlX57FGNl9/llaCLjBA77PXvr+L YQNN+f8eeEpZdKMAml/hzBlpepJBemh6koAKCgsLyp+nULmfzG9Js4x7LoTm4wc0 WqYUJ8T3fX2EBjosVxSBAJ8GTjiZkI64mH0sJ/F1lv4/JhBUBK5XlLuWCunEOmoM 2BuyQP9/gycU47Sk7r5OZTVPFubIT/80GmwrGw4/7hhR+e1nmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIriaGF5oIl3wPlyx4tr3Vh/t5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzFmNWUzZDktNDYxYy0z Nzg3LWFkZjUtZDNkZTg4YjI1ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfSIHO2qOKzB/bN5MJcvCZzbD5eRKWLttq3QAi4N/1YjqTUx0bEvMSJ 8PlCxQxa1TPWB/ptblu3bT370kpNmMgo+3lfSXsve3Irb600E7iD7mSS3Dab5n9Y QywdG8korsN/qQRoYNiXVLVn6M5X7WsVS6AqPY4o7cJUysLuUFVCdXVh8HhSanwG 9iHzq1JfFkyfy1yP+w8WFLWs29f7XQ21Jjp+kNPsRDgKdEf+OednAvMoJDzi1YkD qOrIrS1GLMK4O45JDu4utCOxt7OoAgmgt1Q5bEh+10k+8+CP2kDLkaMhf0/O399r +Gmffi6Na8PIgq3FJMm/bxPumxalzyk= -----END CERTIFICATE-----Generated at Mon Mar 23 18:49:00 2026 by rpki-client