$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2b43432-6769-3741-bfb2-58f41f56af5e.roa File: a2b43432-6769-3741-bfb2-58f41f56af5e.roa (raw, json) Hash identifier: /k3xPM3GGUO0kePiv4n0Mha8mfxa8ZNy0PxsFluqmzA= Subject key identifier: AF:5D:B7:28:51:8C:9C:4C:D2:76:E2:EC:75:08:CE:CC:61:C0:0D:EE Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D07798516E0FB3878794C00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2b43432-6769-3741-bfb2-58f41f56af5e.roa Signing time: Mon 09 Mar 2026 17:35:05 +0000 ROA not before: Mon 09 Mar 2026 17:35:05 +0000 ROA not after: Sun 07 Jun 2026 17:35:05 +0000 asID: 398781 IP address blocks: 172.120.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:07:79:85:16:e0:fb:38:78:79:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:35:05 2026 GMT Not After : Jun 7 17:35:05 2026 GMT Subject: CN=4c2aa899-6f56-4450-b55d-af4137f27873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e6:fb:8f:8c:f2:77:bd:95:75:aa:a9:f5:99: 24:e1:0a:52:24:e8:f9:87:66:85:60:32:aa:ff:5d: 39:bd:31:ee:c7:06:eb:78:ee:ed:62:00:5b:72:6b: 09:6f:2c:b2:f2:27:84:f9:e2:40:02:c6:07:3e:ce: 21:df:eb:d3:b7:af:25:b1:71:bb:7d:0a:76:2e:a1: ed:f6:53:39:02:c8:f9:63:7a:1b:d1:01:12:75:66: 58:6b:21:c6:23:5b:64:d4:22:db:91:4b:3f:ad:89: 30:19:74:62:ab:27:51:14:48:72:4d:24:8e:67:76: 68:af:a7:7e:33:77:35:c4:70:1c:62:70:94:f1:27: 98:91:9f:a4:79:45:ca:66:14:f9:14:c7:9f:05:08: fc:e0:93:fc:b4:3b:0a:65:c2:3a:31:e1:a6:c0:7b: 66:83:f9:b8:be:c6:cb:59:e7:f0:09:19:9f:5f:b2: bc:15:76:c1:55:f3:5d:39:1e:41:4c:f2:1d:d7:66: 2c:ba:44:dd:b2:ad:c4:4d:1a:e1:5e:86:b3:fd:1a: 8f:b6:53:31:3c:db:b8:5e:77:e7:55:c4:47:21:d6: a3:16:c1:4a:10:92:fa:82:75:90:75:4d:6e:14:62: bf:d9:6b:38:11:dc:4c:98:ff:87:2c:bf:62:b2:11: f1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5D:B7:28:51:8C:9C:4C:D2:76:E2:EC:75:08:CE:CC:61:C0:0D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2b43432-6769-3741-bfb2-58f41f56af5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e5:98:03:e9:df:c9:d9:39:a3:35:d6:20:2e:80:9f:69:9d: c5:4b:f4:2e:48:9c:28:38:13:a9:15:7e:86:8b:5f:11:ce:ce: b6:e5:c1:2c:78:a2:91:c8:c7:dd:28:bc:89:57:7e:e4:3f:d2: 7b:6d:ee:be:16:07:4d:f0:63:88:2e:cb:90:6f:41:42:10:18: e4:d2:8d:e4:db:3b:97:c8:60:1b:66:b2:38:a7:c2:63:b7:62: 30:49:26:0e:d4:17:ad:b0:ce:f9:34:a8:57:62:97:ec:67:d3: 33:29:61:15:97:dd:0c:c8:00:ea:45:3c:5c:8d:eb:9f:d9:a8: a2:57:25:28:c2:db:e6:85:e0:21:2b:3c:f7:af:dd:e2:34:39: 35:f2:1b:bc:b5:ff:87:53:1d:5e:a9:e7:9d:24:4e:93:3f:08: b9:78:48:6c:4e:af:92:57:28:97:1e:b5:ae:99:be:bb:42:dd: fa:76:d9:6a:a3:50:b1:b9:b5:7a:4c:7a:c9:3f:d7:8c:a7:89: 2f:92:d2:85:fc:f3:84:ae:40:46:60:23:d4:bb:1a:3e:a5:f6: c8:7b:1f:db:aa:2d:a6:ee:35:e6:f6:9d:78:09:b2:eb:fe:ba: 07:0b:4d:45:de:91:59:ed:34:03:95:9b:9a:65:af:c7:cd:8f: bf:ff:23:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dB3mFFuD7OHh5TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MzUwNVoXDTI2MDYwNzE3MzUwNVowLzEtMCsGA1UEAxMk NGMyYWE4OTktNmY1Ni00NDUwLWI1NWQtYWY0MTM3ZjI3ODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOb7j4zyd72Vdaqp9Zkk4QpSJOj5h2aFYDKq /105vTHuxwbreO7tYgBbcmsJbyyy8ieE+eJAAsYHPs4h3+vTt68lsXG7fQp2LqHt 9lM5Asj5Y3ob0QESdWZYayHGI1tk1CLbkUs/rYkwGXRiqydRFEhyTSSOZ3Zor6d+ M3c1xHAcYnCU8SeYkZ+keUXKZhT5FMefBQj84JP8tDsKZcI6MeGmwHtmg/m4vsbL WefwCRmfX7K8FXbBVfNdOR5BTPId12YsukTdsq3ETRrhXoaz/RqPtlMxPNu4Xnfn VcRHIdajFsFKEJL6gnWQdU1uFGK/2Ws4EdxMmP+HLL9ishHxBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9dtyhRjJxM0nbi7HUIzsxhwA3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTJiNDM0MzItNjc2OS0z NzQxLWJmYjItNThmNDFmNTZhZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHizMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHlmAPp38nZOaM11iAugJ9pncVL9C5InCg4E6kVfoaLXxHOzrblwSx4 opHIx90ovIlXfuQ/0ntt7r4WB03wY4guy5BvQUIQGOTSjeTbO5fIYBtmsjinwmO3 YjBJJg7UF62wzvk0qFdil+xn0zMpYRWX3QzIAOpFPFyN65/ZqKJXJSjC2+aF4CEr PPev3eI0OTXyG7y1/4dTHV6p550kTpM/CLl4SGxOr5JXKJceta6ZvrtC3fp22Wqj ULG5tXpMesk/14yniS+S0oX884SuQEZgI9S7Gj6l9sh7H9uqLabuNeb2nXgJsuv+ ugcLTUXekVntNAOVm5plr8fNj7//I1M= -----END CERTIFICATE-----Generated at Mon Mar 23 18:49:55 2026 by rpki-client