$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7196997-dd00-3de2-aff6-8f2432502651.roa File: a7196997-dd00-3de2-aff6-8f2432502651.roa (raw, json) Hash identifier: 7A9HPZc2AS7DKFFSR0b2Fe9hnSMBcrA/JKHV3kBHYBA= Subject key identifier: DE:AF:A2:1B:23:B9:5E:0A:39:A6:03:3C:CC:74:21:82:94:69:4C:34 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D00CC5620AA3930D68616A0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7196997-dd00-3de2-aff6-8f2432502651.roa Signing time: Mon 09 Mar 2026 17:21:38 +0000 ROA not before: Mon 09 Mar 2026 17:21:38 +0000 ROA not after: Sun 07 Jun 2026 17:21:38 +0000 asID: 398781 IP address blocks: 172.120.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:00:cc:56:20:aa:39:30:d6:86:16:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:21:38 2026 GMT Not After : Jun 7 17:21:38 2026 GMT Subject: CN=3d4687a3-d58a-4e32-8d16-49ba263d10ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:bd:75:8f:a6:75:c4:78:cf:98:3c:da:69: 1c:88:e4:4e:ab:a1:99:6b:40:8a:36:43:0f:b7:26: 70:26:6c:8a:26:ea:57:14:57:fc:4d:9e:c7:5f:08: 12:4b:bb:c3:ec:e3:c9:db:90:d3:60:96:5f:39:f9: b8:2f:ae:d4:81:3c:55:48:74:fe:3d:e2:b8:c1:d3: 5c:a5:07:f8:27:25:4e:e8:60:26:ec:58:dd:6e:21: 84:88:93:19:b7:ac:cd:e1:97:76:c5:20:32:e3:b3: fc:ba:d4:15:a6:a4:4a:f6:ee:9a:3f:03:97:05:9e: 4a:45:af:d0:f3:ae:3d:f2:ad:79:5b:25:f3:01:70: 56:89:73:fb:d6:e1:6e:ce:05:9a:3b:0c:96:14:c9: cf:3c:83:e9:6c:f2:b9:94:37:30:c9:73:68:18:37: 30:08:e2:fc:46:26:e2:bb:e0:ad:46:6f:41:2b:42: 09:a5:ef:85:5a:b0:d8:ec:34:21:e0:d0:c4:c4:bb: 2d:7b:62:15:56:a2:f0:21:46:3b:bb:61:37:67:ff: 9a:f6:24:b0:8d:33:15:f6:58:e4:b8:53:9a:b0:e5: a6:bc:41:89:01:d8:38:74:52:bb:af:03:86:d7:be: e0:de:9d:40:c6:e7:9a:67:e9:aa:cb:3f:19:5a:1e: dd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AF:A2:1B:23:B9:5E:0A:39:A6:03:3C:CC:74:21:82:94:69:4C:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7196997-dd00-3de2-aff6-8f2432502651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4a:e1:77:9c:d5:3d:84:a3:8d:d0:24:28:f1:38:0e:d7:f2: 5b:94:78:6a:c8:cb:d2:68:7b:2a:8d:60:c1:af:5c:e9:b7:f7: cb:a9:f0:9c:84:2a:56:6b:67:2a:02:09:5f:16:7c:66:8a:cd: fd:99:92:09:ea:d1:ad:e1:b4:26:2a:98:fa:ff:dd:1e:78:a3: e4:89:af:74:d5:4b:4c:6f:3d:36:a9:54:c4:fc:48:96:52:68: 97:ce:53:05:d5:c3:45:b5:54:fd:75:42:58:fc:5d:89:11:8d: 52:5d:46:14:7c:1c:96:5c:db:09:8e:c9:e9:7d:47:af:ce:29: 1c:6e:88:fe:1e:fc:f4:a6:1e:70:a4:e2:2f:1a:42:fd:4b:ca: 7e:9c:ec:27:28:47:df:ca:3e:39:3a:3e:67:cb:a2:b1:75:b6: 60:25:28:2b:68:07:80:20:16:6a:2e:91:7f:78:e7:87:ab:50: cb:e9:45:bd:c5:d2:d5:4b:7e:b6:97:6a:da:02:04:07:93:d9: 16:43:21:c6:a9:31:54:a8:aa:2f:5e:27:77:19:40:44:92:80: 96:e1:5f:28:e0:86:2c:b9:8c:4d:ca:72:b9:3e:d0:8f:c2:f6: 33:cd:a0:8f:da:d3:2f:66:63:91:11:3b:d8:bc:e2:67:12:1a: f3:57:c7:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dAMxWIKo5MNaGFqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MjEzOFoXDTI2MDYwNzE3MjEzOFowLzEtMCsGA1UEAxMk M2Q0Njg3YTMtZDU4YS00ZTMyLThkMTYtNDliYTI2M2QxMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivC9dY+mdcR4z5g82mkciOROq6GZa0CKNkMP tyZwJmyKJupXFFf8TZ7HXwgSS7vD7OPJ25DTYJZfOfm4L67UgTxVSHT+PeK4wdNc pQf4JyVO6GAm7FjdbiGEiJMZt6zN4Zd2xSAy47P8utQVpqRK9u6aPwOXBZ5KRa/Q 86498q15WyXzAXBWiXP71uFuzgWaOwyWFMnPPIPpbPK5lDcwyXNoGDcwCOL8Ribi u+CtRm9BK0IJpe+FWrDY7DQh4NDExLste2IVVqLwIUY7u2E3Z/+a9iSwjTMV9ljk uFOasOWmvEGJAdg4dFK7rwOG177g3p1AxueaZ+mqyz8ZWh7dOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6vohsjuV4KOaYDPMx0IYKUaUw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTcxOTY5OTctZGQwMC0z ZGUyLWFmZjYtOGYyNDMyNTAyNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNK4Xec1T2Eo43QJCjxOA7X8luUeGrIy9JoeyqNYMGvXOm398up8JyE KlZrZyoCCV8WfGaKzf2Zkgnq0a3htCYqmPr/3R54o+SJr3TVS0xvPTapVMT8SJZS aJfOUwXVw0W1VP11Qlj8XYkRjVJdRhR8HJZc2wmOyel9R6/OKRxuiP4e/PSmHnCk 4i8aQv1Lyn6c7CcoR9/KPjk6PmfLorF1tmAlKCtoB4AgFmoukX9454erUMvpRb3F 0tVLfraXatoCBAeT2RZDIcapMVSoqi9eJ3cZQESSgJbhXyjghiy5jE3Kcrk+0I/C 9jPNoI/a0y9mY5ERO9i84mcSGvNXx9o= -----END CERTIFICATE-----Generated at Mon Mar 23 18:52:44 2026 by rpki-client