$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d25425b-86ab-36ff-ba74-71e093809dda.roa File: 8d25425b-86ab-36ff-ba74-71e093809dda.roa (raw, json) Hash identifier: 5kpWtp83q41zj96Q5jmmb78g8Xw5Pwp2dlUs41T5aZI= Subject key identifier: 87:71:12:CF:E5:23:1C:21:55:39:75:03:13:B2:3F:08:B7:56:B1:59 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D6AAAB1816AD10BEF798DA340 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d25425b-86ab-36ff-ba74-71e093809dda.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 834 IP address blocks: 172.121.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:b1:81:6a:d1:0b:ef:79:8d:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=7eb0ee34-610c-489f-9f09-1f32f1a8c446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b9:95:a6:9d:7a:09:74:d9:42:a2:55:4f:14: d3:67:60:dc:25:64:ce:69:5e:7d:34:8d:6c:fa:fd: cc:18:ee:06:83:a4:09:e4:27:6d:63:8c:78:b6:53: 2c:75:f9:c5:76:2a:9f:37:6b:d4:e6:1f:50:b2:be: 67:92:f7:fa:7a:14:15:35:90:2a:09:cf:cf:cd:99: 34:b6:9d:3f:50:1f:8e:91:86:50:ed:5b:91:14:ae: 2a:41:5b:5d:23:7c:5e:96:44:ff:08:92:3f:4c:72: 32:bf:1f:18:2b:86:da:13:b5:13:ea:6a:da:40:a6: c5:a5:8c:c7:19:4e:3b:d6:eb:2d:86:31:86:e6:2d: dd:dd:07:12:38:fd:88:3a:52:56:de:dc:74:4a:44: 3e:0a:71:1e:a8:21:7d:2f:04:e8:63:2f:3f:6b:ff: 3a:e0:e8:af:98:da:eb:b2:d3:ca:07:78:88:e1:6d: 52:a4:4e:3b:35:1f:1e:b3:7a:d5:fb:ad:fd:83:55: 37:46:c8:e5:a0:f4:34:e9:63:ce:5d:fe:f6:0f:43: fc:06:d7:ee:f5:05:8b:9c:32:9e:7a:56:ba:0b:80: ca:17:a7:2f:22:41:dc:e2:af:03:45:9c:7f:a3:85: 74:ad:24:92:44:4b:f3:90:e3:4e:b9:75:8e:39:53: 39:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:71:12:CF:E5:23:1C:21:55:39:75:03:13:B2:3F:08:B7:56:B1:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d25425b-86ab-36ff-ba74-71e093809dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:cc:72:b4:22:7d:55:a0:45:e3:f6:a7:b1:be:ea:e2:40:e3: 22:dc:67:50:1f:03:3b:a4:86:9e:2a:73:a7:e6:6c:62:94:f7: 0b:69:0a:26:cf:9f:4d:fd:58:8e:42:b4:6b:b9:a2:76:70:ac: cb:ba:f2:f4:95:fa:78:98:7e:a2:0a:47:c0:25:19:08:66:49: 48:a5:4e:6e:69:92:7b:78:c4:12:64:18:4c:6f:a8:73:95:6c: 50:e7:23:f8:98:12:b4:df:b8:95:d1:3a:ba:b5:cb:9a:02:4c: be:0f:d3:a4:97:d4:10:80:47:b0:1f:96:f1:14:3d:8c:8d:12: 5e:b5:c7:f0:bb:90:2f:fe:4b:d4:f5:70:11:4e:7d:60:88:23: 9e:62:8f:81:64:6e:cc:76:a4:0e:0a:d8:bb:e8:98:8d:25:90: 21:b1:74:07:73:e8:a2:14:ea:ec:7c:35:95:5e:e3:32:f9:db: 51:12:55:27:a1:80:79:58:ba:49:d6:b2:72:08:9a:df:fe:b6: 38:9e:01:8c:c9:77:a8:50:4e:4e:7e:b2:d2:8d:fe:92:fc:79: 82:5d:aa:dc:20:1e:a4:bc:5e:42:ff:bb:b4:4b:b1:33:89:7f: 21:9c:60:3b:5a:40:b7:d6:ff:f0:c6:32:b5:79:32:56:73:69: 37:17:90:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqrGBatEL73mNo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk N2ViMGVlMzQtNjEwYy00ODlmLTlmMDktMWYzMmYxYThjNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrmVpp16CXTZQqJVTxTTZ2DcJWTOaV59NI1s +v3MGO4Gg6QJ5CdtY4x4tlMsdfnFdiqfN2vU5h9Qsr5nkvf6ehQVNZAqCc/PzZk0 tp0/UB+OkYZQ7VuRFK4qQVtdI3xelkT/CJI/THIyvx8YK4baE7UT6mraQKbFpYzH GU471usthjGG5i3d3QcSOP2IOlJW3tx0SkQ+CnEeqCF9LwToYy8/a/864OivmNrr stPKB3iI4W1SpE47NR8es3rV+639g1U3RsjloPQ06WPOXf72D0P8Btfu9QWLnDKe ela6C4DKF6cvIkHc4q8DRZx/o4V0rSSSREvzkONOuXWOOVM55QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdxEs/lIxwhVTl1AxOyPwi3VrFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGQyNTQyNWItODZhYi0z NmZmLWJhNzQtNzFlMDkzODA5ZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXMcrQifVWgReP2p7G+6uJA4yLcZ1AfAzukhp4qc6fmbGKU9wtpCibP n039WI5CtGu5onZwrMu68vSV+niYfqIKR8AlGQhmSUilTm5pknt4xBJkGExvqHOV bFDnI/iYErTfuJXROrq1y5oCTL4P06SX1BCAR7AflvEUPYyNEl61x/C7kC/+S9T1 cBFOfWCII55ij4Fkbsx2pA4K2LvomI0lkCGxdAdz6KIU6ux8NZVe4zL521ESVSeh gHlYuknWsnIImt/+tjieAYzJd6hQTk5+stKN/pL8eYJdqtwgHqS8XkL/u7RLsTOJ fyGcYDtaQLfW//DGMrV5MlZzaTcXkJI= -----END CERTIFICATE-----Generated at Fri Apr 10 23:18:00 2026 by rpki-client