$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e40953f-c6af-323c-8542-3c0a8a44329b.roa File: 8e40953f-c6af-323c-8542-3c0a8a44329b.roa (raw, json) Hash identifier: P1sedtg/oxu/IVxj24Gk3tmeaxpzY11ukJIAPOUSCgs= Subject key identifier: 0E:BD:6D:D9:2A:7E:C2:54:74:BE:6D:3A:92:A3:D4:DD:D4:7E:8E:EB Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584CD487F4BE126FD8FBFABC8980 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e40953f-c6af-323c-8542-3c0a8a44329b.roa Signing time: Wed 11 Feb 2026 18:19:57 +0000 ROA not before: Wed 11 Feb 2026 18:19:57 +0000 ROA not after: Tue 12 May 2026 17:19:57 +0000 asID: 18779 IP address blocks: 172.120.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:87:f4:be:12:6f:d8:fb:fa:bc:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 11 18:19:57 2026 GMT Not After : May 12 17:19:57 2026 GMT Subject: CN=32102130-21f3-4520-acaa-3a5052800636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3b:c7:56:fc:e7:4d:04:43:e8:b3:6c:9f:1b: bf:b0:cd:6b:02:b1:7e:3b:65:d3:05:e9:77:01:fe: a0:6d:3a:6c:c4:22:21:58:c4:aa:5f:55:9a:07:b4: 57:66:9d:c1:ab:94:84:65:e3:4e:98:a1:96:73:39: 72:e1:61:09:ab:a2:92:e5:d1:fa:e6:ca:7e:f9:b1: 81:76:57:d2:8b:cd:b5:dd:5a:cc:c6:37:3c:a4:95: 60:ab:e0:78:c2:f5:c3:01:5f:96:3d:c5:2b:21:e4: 22:5d:cc:ab:c5:c4:2a:30:0c:71:30:e3:36:ed:a3: 4b:bf:c0:72:41:75:04:b8:cd:68:b5:5f:fb:9e:28: d7:1e:13:e5:b0:bf:ac:0a:7e:b9:32:ee:4c:f6:50: ca:0d:dc:d3:ca:69:cc:f3:06:e5:27:70:c3:9b:5f: 91:9a:b2:eb:12:84:3b:6d:aa:17:c0:79:36:4c:3a: 00:b0:e8:6e:49:11:a6:a3:f0:cd:27:b2:59:5d:51: ee:74:b0:03:01:71:9d:9b:b1:33:c3:3e:6c:b8:37: 60:fc:0c:ba:17:26:fd:49:0c:ba:51:22:36:d6:ac: 77:bc:a3:b6:57:d0:9e:60:7d:46:a0:aa:1c:7a:72: 3a:c4:5b:d0:d5:1b:d4:4d:9a:59:aa:38:5d:c1:66: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BD:6D:D9:2A:7E:C2:54:74:BE:6D:3A:92:A3:D4:DD:D4:7E:8E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8e40953f-c6af-323c-8542-3c0a8a44329b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:33:da:61:57:aa:c3:9e:a3:04:77:bf:b7:e1:40:67:e1:93: d7:c6:18:a9:29:ce:e2:6c:48:07:2e:d7:11:95:27:46:84:68: 8d:d7:af:64:cc:d9:a5:f2:c4:ce:4a:a8:e2:d9:c4:fa:c6:74: b6:e3:36:99:36:e7:a9:f4:4d:40:13:27:1d:ec:ea:76:8c:da: 1b:74:56:92:96:22:99:a9:a3:c7:75:3b:9b:b7:89:cb:6f:d2: 1f:e3:7c:d6:2a:fa:a8:32:87:9c:ae:86:5e:d7:e0:e5:7a:a9: 6c:32:ea:e0:26:3e:89:8e:a5:05:95:03:53:d9:86:e2:a8:18: 68:a7:1f:4f:d2:5c:b9:4a:61:dd:cb:fb:5e:2c:12:7b:c0:8d: 19:7b:ce:90:01:27:ed:43:db:82:7c:b3:b8:19:db:b6:21:5d: 7a:0b:ce:6b:2b:9f:c2:79:b7:e2:9e:54:d9:76:39:05:d4:74: 1d:f3:6a:4f:3b:e0:c6:80:20:98:83:fc:67:19:e1:35:e1:c1: de:23:20:e8:e7:db:9e:9f:0b:c7:e2:92:fa:54:d9:a8:d4:99: 30:2f:16:0f:69:29:20:a7:f7:63:c2:e0:c8:ad:14:c5:ea:26: fd:74:c6:98:82:6d:fd:29:26:0d:4b:99:13:09:b9:18:22:75: 11:7f:0c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUh/S+Em/Y+/q8iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDIxMTE4MTk1N1oXDTI2MDUxMjE3MTk1N1owLzEtMCsGA1UEAxMk MzIxMDIxMzAtMjFmMy00NTIwLWFjYWEtM2E1MDUyODAwNjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTvHVvznTQRD6LNsnxu/sM1rArF+O2XTBel3 Af6gbTpsxCIhWMSqX1WaB7RXZp3Bq5SEZeNOmKGWczly4WEJq6KS5dH65sp++bGB dlfSi8213VrMxjc8pJVgq+B4wvXDAV+WPcUrIeQiXcyrxcQqMAxxMOM27aNLv8By QXUEuM1otV/7nijXHhPlsL+sCn65Mu5M9lDKDdzTymnM8wblJ3DDm1+RmrLrEoQ7 baoXwHk2TDoAsOhuSRGmo/DNJ7JZXVHudLADAXGdm7Ezwz5suDdg/Ay6Fyb9SQy6 USI21qx3vKO2V9CeYH1GoKocenI6xFvQ1RvUTZpZqjhdwWZnzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA69bdkqfsJUdL5tOpKj1N3Ufo7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGU0MDk1M2YtYzZhZi0z MjNjLTg1NDItM2MwYThhNDQzMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUz2mFXqsOeowR3v7fhQGfhk9fGGKkpzuJsSAcu1xGVJ0aEaI3Xr2TM 2aXyxM5KqOLZxPrGdLbjNpk256n0TUATJx3s6naM2ht0VpKWIpmpo8d1O5u3ictv 0h/jfNYq+qgyh5yuhl7X4OV6qWwy6uAmPomOpQWVA1PZhuKoGGinH0/SXLlKYd3L +14sEnvAjRl7zpABJ+1D24J8s7gZ27YhXXoLzmsrn8J5t+KeVNl2OQXUdB3zak87 4MaAIJiD/GcZ4TXhwd4jIOjn256fC8fikvpU2ajUmTAvFg9pKSCn92PC4MitFMXq Jv10xpiCbf0pJg1LmRMJuRgidRF/DKk= -----END CERTIFICATE-----Generated at Tue Feb 24 15:44:48 2026 by rpki-client