$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a238878c-935e-3300-a0e0-52c7a1ad173a.roa File: a238878c-935e-3300-a0e0-52c7a1ad173a.roa (raw, json) Hash identifier: SqyXudCuUC9gd+TKuLEpeMWv8pN1a7XetcneGOQVepk= Subject key identifier: 42:12:10:43:17:35:F8:DE:34:F4:22:91:D8:58:31:E7:AD:03:B2:14 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584DEF3B503723C73F215D7E7800 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a238878c-935e-3300-a0e0-52c7a1ad173a.roa Signing time: Sun 24 May 2026 00:39:17 +0000 ROA not before: Sun 24 May 2026 00:39:17 +0000 ROA not after: Sat 22 Aug 2026 00:39:17 +0000 asID: 44559 IP address blocks: 172.120.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:3b:50:37:23:c7:3f:21:5d:7e:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 24 00:39:17 2026 GMT Not After : Aug 22 00:39:17 2026 GMT Subject: CN=46918580-9ec5-44d7-8abd-c2d7be7a9232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:f5:f6:de:a9:5c:4c:4b:52:bf:b7:20:93: 6e:02:03:74:ff:48:3c:2c:7f:37:0e:e9:8d:f4:46: c3:1b:96:28:a6:fe:af:22:7d:c4:ee:77:01:34:b5: d0:fe:96:5d:b8:47:1e:a2:fa:bb:d1:3c:21:e2:5c: 4c:64:a8:29:5c:34:bd:e6:a6:0b:a3:c9:c8:64:a5: 34:6a:24:9c:ec:24:96:37:fe:2e:e0:0c:dd:37:b1: 96:41:cc:7e:21:72:17:bf:2e:4f:e2:4d:45:80:b9: 24:c0:80:65:9a:42:e6:d0:12:89:8f:db:49:aa:1c: c9:9c:c4:ff:9f:44:31:29:05:91:c6:48:8e:5f:c1: 04:06:34:8b:92:06:4d:95:09:4d:cb:51:a6:3a:0f: f3:a4:32:4a:52:48:2b:a0:08:97:4b:b3:52:f0:b0: 3a:27:45:7e:2a:59:73:39:74:e6:ce:98:aa:25:8a: 40:b1:cf:6a:53:51:bc:f0:cc:0b:2e:35:53:bc:05: 7c:cb:28:68:1a:a5:41:54:04:2f:06:96:50:76:02: 28:bd:f0:14:bd:95:da:14:52:a4:41:e5:70:11:3f: 96:10:6e:bb:49:74:b5:ad:7f:a2:d6:4e:5f:ad:e0: 10:5a:76:28:25:42:9d:dd:b6:89:6c:6c:44:95:da: 68:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:12:10:43:17:35:F8:DE:34:F4:22:91:D8:58:31:E7:AD:03:B2:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a238878c-935e-3300-a0e0-52c7a1ad173a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:fc:89:87:be:49:cb:90:df:46:8b:f0:80:49:d7:d2:b3:28: 7b:df:2f:8c:a4:1f:83:18:79:d7:b4:8a:db:95:ee:11:95:7b: 06:91:c3:11:b4:c6:53:78:10:91:9e:99:4f:bb:0f:ea:f2:6a: 65:d9:bf:43:f4:73:c6:8f:72:01:81:1e:23:96:bb:5b:4a:d2: d0:73:0d:a2:9c:50:6b:21:f0:5a:89:11:47:e2:c6:68:af:f2: 46:ae:26:f6:fe:43:38:49:e7:54:1b:46:79:3b:09:2f:0c:e2: ba:29:62:4c:48:ee:52:90:05:be:85:e1:c5:0a:ac:14:b7:fc: 9e:6c:08:22:c9:7f:38:d9:31:67:d2:e8:61:1f:36:45:d5:6c: f5:1c:62:64:11:f2:c5:64:63:40:04:a6:25:c0:23:28:3a:92: 02:ca:7c:e3:76:1e:c0:ce:7f:c4:90:88:46:6c:32:68:b8:f6: b0:a3:a3:58:88:f6:e3:40:96:08:46:24:1c:db:9b:e8:f3:33: 22:6d:89:de:12:4a:36:76:87:bc:20:6d:fb:6e:5d:dc:57:6a: f4:36:f3:ba:5c:a7:43:dc:da:6f:80:73:dc:42:e5:d1:ae:bc: bc:cb:ff:75:63:a8:a1:07:a6:ac:39:87:56:74:0f:5a:ed:ef: 3c:51:03:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vO1A3I8c/IV1+eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDUyNDAwMzkxN1oXDTI2MDgyMjAwMzkxN1owLzEtMCsGA1UEAxMk NDY5MTg1ODAtOWVjNS00NGQ3LThhYmQtYzJkN2JlN2E5MjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYL19t6pXExLUr+3IJNuAgN0/0g8LH83DumN 9EbDG5Yopv6vIn3E7ncBNLXQ/pZduEceovq70Twh4lxMZKgpXDS95qYLo8nIZKU0 aiSc7CSWN/4u4AzdN7GWQcx+IXIXvy5P4k1FgLkkwIBlmkLm0BKJj9tJqhzJnMT/ n0QxKQWRxkiOX8EEBjSLkgZNlQlNy1GmOg/zpDJKUkgroAiXS7NS8LA6J0V+Kllz OXTmzpiqJYpAsc9qU1G88MwLLjVTvAV8yyhoGqVBVAQvBpZQdgIovfAUvZXaFFKk QeVwET+WEG67SXS1rX+i1k5freAQWnYoJUKd3baJbGxEldpojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEISEEMXNfjeNPQikdhYMeetA7IUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTIzODg3OGMtOTM1ZS0z MzAwLWEwZTAtNTJjN2ExYWQxNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHihMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH8iYe+ScuQ30aL8IBJ19KzKHvfL4ykH4MYede0ituV7hGVewaRwxG0 xlN4EJGemU+7D+ryamXZv0P0c8aPcgGBHiOWu1tK0tBzDaKcUGsh8FqJEUfixmiv 8kauJvb+QzhJ51QbRnk7CS8M4ropYkxI7lKQBb6F4cUKrBS3/J5sCCLJfzjZMWfS 6GEfNkXVbPUcYmQR8sVkY0AEpiXAIyg6kgLKfON2HsDOf8SQiEZsMmi49rCjo1iI 9uNAlghGJBzbm+jzMyJtid4SSjZ2h7wgbftuXdxXavQ287pcp0Pc2m+Ac9xC5dGu vLzL/3VjqKEHpqw5h1Z0D1rt7zxRA9o= -----END CERTIFICATE-----Generated at Tue May 26 05:32:22 2026 by rpki-client