$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2ce3c03-847c-3f3c-8e5a-520258572200.roa File: a2ce3c03-847c-3f3c-8e5a-520258572200.roa (raw, json) Hash identifier: hwMWcSIRh5Jozj2EQrQ5ibVV9p0FsnS8hyEEV4SPDyA= Subject key identifier: CA:FD:9E:BF:AA:A2:85:A3:A7:09:F2:22:15:28:2E:05:E1:CE:E0:BD Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584E104EDED89B3E11F3E4EDA720 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2ce3c03-847c-3f3c-8e5a-520258572200.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 18779 IP address blocks: 172.120.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:de:d8:9b:3e:11:f3:e4:ed:a7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=1369b62a-b9f2-40b2-af86-06ee8e36c381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e9:cd:fd:f7:6e:62:b1:ff:73:65:a0:d5:0d: f4:9f:b7:82:ba:c7:d2:5f:df:91:a1:74:54:50:a7: 19:67:39:47:c6:6b:3f:e4:c7:21:1b:d8:4d:ab:26: ca:cd:28:c3:e6:b8:c3:53:ab:fb:0c:3e:ed:11:4e: db:2c:27:33:49:75:2f:82:5b:cd:c3:99:3a:33:91: 2f:7d:79:85:8c:48:2e:3d:56:12:b8:10:ae:fd:52: 7b:ac:b0:3d:39:a7:16:c7:50:60:25:61:67:94:3c: ad:c6:3a:1a:46:2e:84:af:ae:1e:9a:9a:d0:70:4f: fc:82:5b:6e:49:43:87:da:71:74:d4:f6:c8:0c:3e: dc:bb:c9:5b:28:d7:93:a4:3c:05:81:96:f9:54:18: 00:74:67:7e:5e:83:df:25:66:11:d5:da:9d:19:fa: 6e:fd:37:44:b9:33:0a:96:f7:0a:11:b9:4a:e8:f7: 99:54:5e:ee:3d:99:34:11:b3:f3:16:64:c3:54:cd: 35:99:88:e3:60:47:3b:4e:70:c4:67:33:85:59:1c: c1:56:1f:78:20:b7:b1:d8:36:1a:41:58:70:5a:8e: 15:5d:f2:50:de:e9:af:41:4a:9c:1c:2b:d5:9e:b1: c8:6d:c0:3d:82:58:20:e0:c9:af:0f:4e:81:5b:c4: 7a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FD:9E:BF:AA:A2:85:A3:A7:09:F2:22:15:28:2E:05:E1:CE:E0:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2ce3c03-847c-3f3c-8e5a-520258572200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:be:e9:cf:f6:e1:f0:ea:b3:82:6e:00:e6:68:12:9e:17:17: 09:83:a3:48:7d:55:d2:aa:a9:dd:f5:eb:01:58:2a:1b:24:70: 0a:8b:11:48:9a:03:2f:01:18:9e:69:21:19:7f:0b:ca:e9:1e: 67:09:3c:8b:4c:31:db:2d:36:95:05:52:51:e3:5c:ba:cf:87: e9:ea:cb:d0:2a:4e:a5:24:d1:1a:c0:8a:e4:1c:f6:07:41:af: d2:00:69:52:76:f9:02:22:a4:db:31:2c:c9:06:e5:45:e4:d0: 8a:6c:77:65:2c:2f:6b:7c:26:b0:2a:a1:02:d2:7c:8d:14:cf: 00:5f:ed:6d:00:99:fc:ea:b3:a6:16:23:24:a5:65:c0:bf:f1: 6c:5f:6a:b1:a2:d1:15:78:e9:3a:a3:1e:46:ec:4d:1d:d4:ab: 68:39:86:f0:a8:43:86:9b:cc:e8:7b:93:04:25:7b:5e:31:fa: ae:1e:d8:27:e2:43:94:d7:4d:50:1a:d7:86:23:92:3a:e4:f7: 8c:a1:5a:f5:85:c0:a6:e1:59:88:0a:a0:5d:27:35:8f:45:5c: 5b:89:e6:1f:3f:31:64:df:12:df:a6:1a:5b:17:4b:f3:ed:62: cb:e0:32:62:33:ae:00:12:3e:33:f9:63:af:eb:be:64:70:9d: 4c:2f:88:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTt7Ymz4R8+TtpyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MTM2OWI2MmEtYjlmMi00MGIyLWFmODYtMDZlZThlMzZjMzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1unN/fduYrH/c2Wg1Q30n7eCusfSX9+RoXRU UKcZZzlHxms/5MchG9hNqybKzSjD5rjDU6v7DD7tEU7bLCczSXUvglvNw5k6M5Ev fXmFjEguPVYSuBCu/VJ7rLA9OacWx1BgJWFnlDytxjoaRi6Er64emprQcE/8gltu SUOH2nF01PbIDD7cu8lbKNeTpDwFgZb5VBgAdGd+XoPfJWYR1dqdGfpu/TdEuTMK lvcKEblK6PeZVF7uPZk0EbPzFmTDVM01mYjjYEc7TnDEZzOFWRzBVh94ILex2DYa QVhwWo4VXfJQ3umvQUqcHCvVnrHIbcA9glgg4MmvD06BW8R6CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr9nr+qooWjpwnyIhUoLgXhzuC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTJjZTNjMDMtODQ3Yy0z ZjNjLThlNWEtNTIwMjU4NTcyMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe+6c/24fDqs4JuAOZoEp4XFwmDo0h9VdKqqd316wFYKhskcAqLEUia Ay8BGJ5pIRl/C8rpHmcJPItMMdstNpUFUlHjXLrPh+nqy9AqTqUk0RrAiuQc9gdB r9IAaVJ2+QIipNsxLMkG5UXk0Ipsd2UsL2t8JrAqoQLSfI0UzwBf7W0Amfzqs6YW IySlZcC/8WxfarGi0RV46TqjHkbsTR3Uq2g5hvCoQ4abzOh7kwQle14x+q4e2Cfi Q5TXTVAa14Yjkjrk94yhWvWFwKbhWYgKoF0nNY9FXFuJ5h8/MWTfEt+mGlsXS/Pt YsvgMmIzrgASPjP5Y6/rvmRwnUwviDY= -----END CERTIFICATE-----Generated at Sun Jun 14 20:17:35 2026 by rpki-client