$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ba54d24-4cd8-3cab-9f2f-bc936a727dd2.roa File: 8ba54d24-4cd8-3cab-9f2f-bc936a727dd2.roa (raw, json) Hash identifier: H9/w5B7PpY5R0QyHxokgHKojYq6huieD2VYFwcmsiDY= Subject key identifier: A2:CE:20:F9:86:E5:46:E3:B0:D9:E6:7D:DC:88:58:08:AB:0D:40:44 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D8865D51F990E29C16B8C80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ba54d24-4cd8-3cab-9f2f-bc936a727dd2.roa Signing time: Mon 09 Mar 2026 21:54:50 +0000 ROA not before: Mon 09 Mar 2026 21:54:50 +0000 ROA not after: Sun 07 Jun 2026 21:54:50 +0000 asID: 398781 IP address blocks: 172.252.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:88:65:d5:1f:99:0e:29:c1:6b:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 21:54:50 2026 GMT Not After : Jun 7 21:54:50 2026 GMT Subject: CN=96eef7bb-c3cf-4cc7-b283-ef70f8526154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:86:a4:84:ad:6d:61:13:1f:94:4a:64:7e: 04:8f:90:a8:02:a1:b7:f0:14:bb:18:e1:e2:54:38: 42:d2:ba:a3:56:81:09:2e:3c:47:98:67:64:41:c8: 69:60:ab:61:2c:cb:2b:58:68:04:97:73:06:2d:96: cd:c4:11:c1:0e:a0:e1:1a:5e:a1:54:09:ca:2f:37: 4f:27:9d:58:65:f3:86:88:05:c8:b4:89:73:cd:f3: 52:f8:a6:e6:18:22:46:c1:48:17:5b:8c:d5:e0:6f: 9d:63:16:af:7a:79:10:97:8f:be:8d:42:64:b1:57: 25:e4:78:24:c4:af:2c:77:3b:c3:9d:ab:89:d8:2e: c2:37:ef:2c:a1:c9:c2:ab:86:54:3e:ac:29:23:d4: a7:79:5e:74:0a:2c:93:45:d3:b8:4c:95:56:51:31: 61:b4:57:dd:86:81:03:4b:fa:6a:60:8e:1c:91:88: 1f:91:6a:ef:a8:0c:23:c7:70:b9:2a:43:41:69:09: 3d:f5:2f:18:f4:b7:d9:b4:b3:84:68:fe:19:98:81: c6:9f:03:53:68:fb:d8:91:d2:98:1b:d9:0b:95:29: 16:3b:91:9d:11:9c:07:fc:f4:65:ba:0e:a5:d4:35: b3:bf:0e:a6:6b:03:cd:20:50:82:bb:dc:5f:4d:6f: 8c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CE:20:F9:86:E5:46:E3:B0:D9:E6:7D:DC:88:58:08:AB:0D:40:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ba54d24-4cd8-3cab-9f2f-bc936a727dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:13:52:b5:c4:5a:7f:27:c4:25:d7:30:df:c9:cc:22:dc:bb: 63:f9:80:aa:1c:2a:bb:2b:5b:5f:18:3c:e8:32:d3:9b:47:ec: cd:ea:9d:fc:97:de:7f:80:2b:f2:08:0c:e4:11:69:bf:08:2a: fd:8e:c9:06:40:d6:75:3f:da:09:18:68:ac:2f:70:b4:40:31: d8:7e:e9:14:23:06:a3:96:4f:32:83:5e:ac:f1:2a:15:36:41: e8:73:c8:c7:5c:04:a8:7c:e7:82:24:36:2b:e8:43:96:63:72: 0d:f8:97:8f:30:65:e2:eb:81:70:c8:68:34:8a:7b:f0:45:c9: 35:24:e1:3e:ea:8a:65:61:ad:d6:8c:3a:10:36:8c:7a:36:bb: 27:56:82:18:16:f5:bb:81:77:5a:c2:2e:39:b2:20:aa:3d:6a: 5b:eb:2f:29:8b:73:6c:71:4d:1a:b3:8d:9b:c0:4f:32:d6:f9: 70:22:2e:eb:83:de:47:88:c9:30:5b:b5:07:cb:ba:57:09:74: 1d:10:ef:49:9a:5d:98:a9:fc:82:ff:a9:17:61:77:e6:ca:ee: c6:2a:ad:74:da:d9:f5:0a:bb:63:a2:bc:6d:de:3b:94:96:6c: 65:0f:c6:3f:07:97:7a:8c:c2:32:df:0f:88:b2:d2:a4:a9:4e: 57:f7:69:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0diGXVH5kOKcFrjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTIxNTQ1MFoXDTI2MDYwNzIxNTQ1MFowLzEtMCsGA1UEAxMk OTZlZWY3YmItYzNjZi00Y2M3LWIyODMtZWY3MGY4NTI2MTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrSGpIStbWETH5RKZH4Ej5CoAqG38BS7GOHi VDhC0rqjVoEJLjxHmGdkQchpYKthLMsrWGgEl3MGLZbNxBHBDqDhGl6hVAnKLzdP J51YZfOGiAXItIlzzfNS+KbmGCJGwUgXW4zV4G+dYxavenkQl4++jUJksVcl5Hgk xK8sdzvDnauJ2C7CN+8socnCq4ZUPqwpI9SneV50CiyTRdO4TJVWUTFhtFfdhoED S/pqYI4ckYgfkWrvqAwjx3C5KkNBaQk99S8Y9LfZtLOEaP4ZmIHGnwNTaPvYkdKY G9kLlSkWO5GdEZwH/PRlug6l1DWzvw6mawPNIFCCu9xfTW+MFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLOIPmG5UbjsNnmfdyIWAirDUBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGJhNTRkMjQtNGNkOC0z Y2FiLTlmMmYtYmM5MzZhNzI3ZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkTUrXEWn8nxCXXMN/JzCLcu2P5gKocKrsrW18YPOgy05tH7M3qnfyX 3n+AK/IIDOQRab8IKv2OyQZA1nU/2gkYaKwvcLRAMdh+6RQjBqOWTzKDXqzxKhU2 QehzyMdcBKh854IkNivoQ5Zjcg34l48wZeLrgXDIaDSKe/BFyTUk4T7qimVhrdaM OhA2jHo2uydWghgW9buBd1rCLjmyIKo9alvrLymLc2xxTRqzjZvATzLW+XAiLuuD 3keIyTBbtQfLulcJdB0Q70maXZip/IL/qRdhd+bK7sYqrXTa2fUKu2OivG3eO5SW bGUPxj8Hl3qMwjLfD4iy0qSpTlf3aXI= -----END CERTIFICATE-----Generated at Mon Mar 23 18:47:22 2026 by rpki-client