$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd856bb-5e8c-3d6a-8591-d50d9d3a789f.roa File: acd856bb-5e8c-3d6a-8591-d50d9d3a789f.roa (raw, json) Hash identifier: Dgj47iVoEYYIp9+UdP3wv8OBao98gQVHh9VszFnHR94= Subject key identifier: 1B:FC:51:71:CA:2F:26:90:C4:5E:13:3B:C8:24:CA:3C:E8:04:FE:79 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D04CF22A6AB9A145BB12300 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd856bb-5e8c-3d6a-8591-d50d9d3a789f.roa Signing time: Mon 09 Mar 2026 17:29:42 +0000 ROA not before: Mon 09 Mar 2026 17:29:42 +0000 ROA not after: Sun 07 Jun 2026 17:29:42 +0000 asID: 398781 IP address blocks: 172.252.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:04:cf:22:a6:ab:9a:14:5b:b1:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:29:42 2026 GMT Not After : Jun 7 17:29:42 2026 GMT Subject: CN=8c886ebf-cb03-4fe8-9749-e6098068441b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:38:59:9a:3d:1e:a3:01:56:5a:f8:29:70: 7b:97:8c:ab:21:6b:03:db:b7:a3:0c:64:3b:77:f4: 95:91:be:63:15:36:bc:bb:dd:f3:7e:ec:fa:a6:fb: 68:eb:5e:99:c4:2c:b1:1f:d1:8c:c8:b5:b0:4c:5c: 2e:f1:9d:2a:f9:93:86:b9:a1:8d:95:46:bc:da:d1: f6:3a:38:7b:e0:1c:91:3f:2d:2b:6c:6e:54:bd:41: 8e:28:d9:ed:a9:79:3c:5d:68:f5:bd:9f:dc:07:e0: 76:f9:79:52:1c:d2:ce:36:48:98:61:a3:30:dc:44: 65:d9:f4:ff:fa:13:89:c7:a3:1f:c2:cc:5f:0c:3d: 63:31:e6:a4:f1:16:eb:95:51:a5:84:f5:80:07:74: e0:25:6d:c7:e8:73:8a:8f:54:64:a2:56:f8:16:38: 73:75:61:ab:fd:a6:fc:8d:c5:6f:6c:3e:7e:0c:0e: 40:51:a2:e6:a9:5a:0e:90:a7:46:27:59:15:8b:f5: 9d:b4:c1:ff:2f:7a:00:13:e5:f1:7a:f1:f8:7a:10: 70:09:99:60:9c:f9:05:dc:87:e6:0a:5c:bf:5e:f9: 26:ec:eb:40:49:14:42:37:d5:aa:04:18:e3:09:7b: 9b:85:10:cb:ca:02:ca:d9:ca:fa:79:35:a2:5e:04: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FC:51:71:CA:2F:26:90:C4:5E:13:3B:C8:24:CA:3C:E8:04:FE:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acd856bb-5e8c-3d6a-8591-d50d9d3a789f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0e:6e:0a:6a:08:69:4d:ed:cd:69:d7:87:c0:f0:a4:19:c1: 59:f4:90:79:9d:ab:8e:a8:3f:0c:4d:14:e7:8b:25:89:d1:3c: 32:2d:8a:cf:83:a0:b0:23:4d:44:72:e1:8f:e0:a0:76:e0:b5: 70:9a:d7:4d:fa:69:ae:f4:51:c7:d0:4e:23:c0:ff:a4:2b:fb: f9:7d:dc:04:7b:8f:17:ac:77:2b:cc:bf:04:b9:e6:09:ac:35: cc:3d:66:03:64:4a:ed:eb:7d:3d:9c:fd:5b:65:28:73:c4:2a: ae:b8:31:bf:ad:c0:95:14:29:d5:39:0f:3f:87:95:57:0d:4f: 47:01:36:25:a4:b5:08:d6:cb:ca:9c:9e:89:c1:c7:93:28:ba: ee:da:6c:70:19:e9:58:8d:13:a8:00:60:9a:c7:97:96:33:88: a5:42:24:8e:ec:b7:45:dc:f7:09:33:e4:76:5a:fe:e3:8c:d8: a9:aa:cf:bf:b2:99:07:6e:0f:d6:c1:60:95:c0:24:6b:07:f5: a3:b3:95:32:52:93:99:da:1a:08:74:5d:ca:4c:9b:70:39:fb: 8a:d3:67:94:b5:f2:ae:3c:88:6b:ec:b8:75:fd:a6:81:5d:1b: 6a:59:4a:4d:0f:d9:c9:6a:76:68:9a:4c:52:24:e3:99:99:ac: 95:d2:fc:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dBM8ipquaFFuxIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3Mjk0MloXDTI2MDYwNzE3Mjk0MlowLzEtMCsGA1UEAxMk OGM4ODZlYmYtY2IwMy00ZmU4LTk3NDktZTYwOTgwNjg0NDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc04WZo9HqMBVlr4KXB7l4yrIWsD27ejDGQ7 d/SVkb5jFTa8u93zfuz6pvto616ZxCyxH9GMyLWwTFwu8Z0q+ZOGuaGNlUa82tH2 Ojh74ByRPy0rbG5UvUGOKNntqXk8XWj1vZ/cB+B2+XlSHNLONkiYYaMw3ERl2fT/ +hOJx6MfwsxfDD1jMeak8RbrlVGlhPWAB3TgJW3H6HOKj1Rkolb4FjhzdWGr/ab8 jcVvbD5+DA5AUaLmqVoOkKdGJ1kVi/WdtMH/L3oAE+XxevH4ehBwCZlgnPkF3Ifm Cly/Xvkm7OtASRRCN9WqBBjjCXubhRDLygLK2cr6eTWiXgRJhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBv8UXHKLyaQxF4TO8gkyjzoBP55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWNkODU2YmItNWU4Yy0z ZDZhLTg1OTEtZDUwZDlkM2E3ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYObgpqCGlN7c1p14fA8KQZwVn0kHmdq46oPwxNFOeLJYnRPDItis+D oLAjTURy4Y/goHbgtXCa1036aa70UcfQTiPA/6Qr+/l93AR7jxesdyvMvwS55gms Ncw9ZgNkSu3rfT2c/VtlKHPEKq64Mb+twJUUKdU5Dz+HlVcNT0cBNiWktQjWy8qc nonBx5Mouu7abHAZ6ViNE6gAYJrHl5YziKVCJI7st0Xc9wkz5HZa/uOM2Kmqz7+y mQduD9bBYJXAJGsH9aOzlTJSk5naGgh0XcpMm3A5+4rTZ5S18q48iGvsuHX9poFd G2pZSk0P2clqdmiaTFIk45mZrJXS/B0= -----END CERTIFICATE-----Generated at Mon Mar 23 18:48:19 2026 by rpki-client