$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b396e6e3-3a45-3888-964c-70a9f910789e.roa File: b396e6e3-3a45-3888-964c-70a9f910789e.roa (raw, json) Hash identifier: PwILbJms1NwSaNNnRDNuScCck6jGkteSX4APdTtWyHs= Subject key identifier: CF:A9:65:48:28:67:A1:2C:FE:40:44:E8:3B:4D:27:3E:ED:9E:D9:2C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D00E0CAD3FAB07E330FD800 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b396e6e3-3a45-3888-964c-70a9f910789e.roa Signing time: Mon 09 Mar 2026 17:21:47 +0000 ROA not before: Mon 09 Mar 2026 17:21:47 +0000 ROA not after: Sun 07 Jun 2026 17:21:47 +0000 asID: 398781 IP address blocks: 172.120.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:00:e0:ca:d3:fa:b0:7e:33:0f:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:21:47 2026 GMT Not After : Jun 7 17:21:47 2026 GMT Subject: CN=ca954f3c-bee4-44a7-b680-a6676341c95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:66:17:a2:14:ad:bc:e5:b6:fb:b1:28:86: 1c:12:98:bd:aa:7c:97:38:06:ae:ec:1d:90:e1:1c: 04:b8:0e:ef:c1:3d:25:cb:01:2e:cb:8f:48:70:d8: 86:5f:8a:fd:5d:ca:7b:5a:52:42:6d:3d:95:ef:b0: 06:16:ce:c5:c5:ce:20:46:e1:48:b8:01:ff:ef:06: 68:18:bc:e6:df:80:34:49:a3:f8:6e:f7:58:5c:8e: 06:e0:cb:21:b8:af:14:f6:09:d7:6c:b7:bf:1b:11: 6e:09:86:f6:a8:ed:de:54:14:01:da:74:5c:a2:46: e4:33:93:fe:13:22:2a:86:e4:6c:23:e6:c0:2a:05: 17:6c:0d:58:d9:55:14:79:7e:97:13:de:6f:5b:f3: e3:05:20:04:ad:15:32:6b:bf:d7:4a:11:cd:cd:fd: 98:91:67:c1:5c:cb:12:69:6b:ee:e6:7f:f3:c3:af: 6d:1e:8f:81:a1:e5:cf:48:4f:4d:89:75:7f:a3:19: 49:26:44:c3:1b:10:1e:a6:6f:6b:9e:c0:39:72:cb: 6d:4c:9b:b1:e1:d4:24:fa:3c:f1:c4:e7:28:ab:08: 01:d4:b9:fe:c2:62:8d:9f:48:4e:f6:40:af:1a:32: d8:c5:74:82:e4:09:2a:26:ad:a0:9f:9e:39:09:4c: eb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A9:65:48:28:67:A1:2C:FE:40:44:E8:3B:4D:27:3E:ED:9E:D9:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b396e6e3-3a45-3888-964c-70a9f910789e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:47:71:a7:09:af:ee:6d:5a:70:18:a7:d6:3c:40:0e:56:a6: e9:d3:45:2e:c2:fc:64:53:55:7d:8d:c8:10:e3:99:21:49:11: 61:a9:8f:32:50:e3:2a:93:ac:a2:b0:12:e5:e6:ca:bb:a3:16: f7:66:3d:74:9a:cc:d5:76:8c:83:55:0e:8b:fe:18:e6:cc:ab: ef:e4:9c:dd:02:a0:cd:1e:c4:fe:13:8d:0e:27:7f:04:43:4b: 42:00:29:e3:90:fc:91:ef:50:8c:62:70:f0:49:b6:11:cf:19: 6a:4e:7b:da:ca:05:e2:3e:b1:cf:45:46:43:74:90:2c:75:8e: 38:20:13:7a:51:63:5d:ff:fa:2b:75:a0:f2:5c:67:10:02:ed: 0a:40:f4:63:12:56:32:7b:30:ea:79:5d:99:e1:3e:5e:8a:87: 3b:2c:44:5d:b3:5b:70:68:53:f1:f8:7d:5e:1b:35:39:ca:0c: 56:81:40:f4:02:19:dd:1b:98:49:b8:c9:19:a3:d1:b6:7a:86: a4:c2:2f:f7:25:ad:e6:e5:b3:b0:70:9d:09:e8:b6:05:a1:96: 08:89:11:2d:e5:2e:45:66:33:1d:b3:dc:ef:38:b9:a0:41:68: 07:20:3a:7a:a5:5a:1b:bb:c8:23:ad:e2:6d:52:6e:02:f9:50: cd:b3:d6:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dAODK0/qwfjMP2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MjE0N1oXDTI2MDYwNzE3MjE0N1owLzEtMCsGA1UEAxMk Y2E5NTRmM2MtYmVlNC00NGE3LWI2ODAtYTY2NzYzNDFjOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOdmF6IUrbzltvuxKIYcEpi9qnyXOAau7B2Q 4RwEuA7vwT0lywEuy49IcNiGX4r9Xcp7WlJCbT2V77AGFs7Fxc4gRuFIuAH/7wZo GLzm34A0SaP4bvdYXI4G4MshuK8U9gnXbLe/GxFuCYb2qO3eVBQB2nRcokbkM5P+ EyIqhuRsI+bAKgUXbA1Y2VUUeX6XE95vW/PjBSAErRUya7/XShHNzf2YkWfBXMsS aWvu5n/zw69tHo+BoeXPSE9NiXV/oxlJJkTDGxAepm9rnsA5csttTJux4dQk+jzx xOcoqwgB1Ln+wmKNn0hO9kCvGjLYxXSC5AkqJq2gn545CUzrOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+pZUgoZ6Es/kBE6DtNJz7tntksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjM5NmU2ZTMtM2E0NS0z ODg4LTk2NGMtNzBhOWY5MTA3ODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdHcacJr+5tWnAYp9Y8QA5WpunTRS7C/GRTVX2NyBDjmSFJEWGpjzJQ 4yqTrKKwEuXmyrujFvdmPXSazNV2jINVDov+GObMq+/knN0CoM0exP4TjQ4nfwRD S0IAKeOQ/JHvUIxicPBJthHPGWpOe9rKBeI+sc9FRkN0kCx1jjggE3pRY13/+it1 oPJcZxAC7QpA9GMSVjJ7MOp5XZnhPl6KhzssRF2zW3BoU/H4fV4bNTnKDFaBQPQC Gd0bmEm4yRmj0bZ6hqTCL/clrebls7BwnQnotgWhlgiJES3lLkVmMx2z3O84uaBB aAcgOnqlWhu7yCOt4m1SbgL5UM2z1mQ= -----END CERTIFICATE-----Generated at Mon Mar 23 18:54:45 2026 by rpki-client