$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b58b471e-789a-352a-b06e-69c305930655.roa File: b58b471e-789a-352a-b06e-69c305930655.roa (raw, json) Hash identifier: vb20WGVhZ4YLEkUo+il9N8YDVAMbz0ak02YJ+4rrfR4= Subject key identifier: 92:1E:D7:85:15:6A:EC:C6:C2:18:87:0E:12:BA:D9:7C:9F:BD:05:42 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D010EF0515574686D88D680 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b58b471e-789a-352a-b06e-69c305930655.roa Signing time: Mon 09 Mar 2026 17:22:09 +0000 ROA not before: Mon 09 Mar 2026 17:22:09 +0000 ROA not after: Sun 07 Jun 2026 17:22:09 +0000 asID: 398781 IP address blocks: 172.120.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:01:0e:f0:51:55:74:68:6d:88:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:22:09 2026 GMT Not After : Jun 7 17:22:09 2026 GMT Subject: CN=1fe1d13b-87f3-4298-a08a-dacac2dee94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:93:c2:f3:97:ea:5b:80:bc:15:db:e3:0c: 4f:6c:87:bd:4b:b5:01:ac:8d:61:1c:52:e2:0e:e8: f7:ab:9c:c4:d7:0e:8f:3e:a5:9e:60:5e:91:8a:dd: 7c:a5:dd:d0:cb:9a:9e:62:5a:d7:76:da:cf:3a:84: 09:20:65:d5:cf:16:b7:5d:41:d8:1d:cb:51:b9:41: 80:83:37:11:3b:20:7e:81:8b:11:18:73:2b:6b:da: 71:d7:de:61:64:7f:8a:5a:bf:e5:c7:2d:43:cb:a6: 89:2e:d7:b6:e5:ee:62:2c:59:85:f9:55:31:a5:36: 40:eb:13:c3:ad:ed:7c:19:59:38:e6:01:bb:b6:25: 40:c5:19:36:d7:05:e1:1b:05:5f:bd:b0:54:8c:10: 40:35:99:34:87:6a:00:f4:30:71:c8:4d:d4:2f:14: 20:6c:2f:c0:2c:6d:4a:db:1d:ba:92:71:26:34:d4: 00:11:20:eb:20:4e:81:1a:ad:aa:cb:18:2f:91:43: 17:b5:d5:cf:11:51:3c:5e:fd:73:ea:0a:80:0b:72: ad:df:5c:cb:7f:fa:7c:d7:22:cc:43:24:dd:4a:dc: 3b:02:54:91:c8:3b:0f:f7:2a:c6:32:ae:54:69:16: cd:18:28:28:4a:39:e0:26:e1:1c:44:b4:fa:fa:8e: 8b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1E:D7:85:15:6A:EC:C6:C2:18:87:0E:12:BA:D9:7C:9F:BD:05:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b58b471e-789a-352a-b06e-69c305930655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c6:46:16:f8:e2:12:af:55:1a:57:75:e8:3c:70:e5:6a:70: a5:3e:2f:e5:46:57:c5:52:13:31:bb:5e:ea:c5:70:eb:42:d5: ee:ee:3e:8b:37:f9:04:6a:25:11:54:66:0b:a9:36:14:88:bf: 52:a1:83:ef:59:ed:21:2b:ec:2e:61:78:b3:64:5f:14:40:2c: 15:33:83:ed:01:23:03:fe:a5:d3:b0:37:c2:2e:b5:05:8a:9c: 36:cd:c5:20:36:9a:94:7d:91:bf:83:f6:94:84:9b:7a:a3:d6: 21:71:e9:cb:62:a9:df:80:48:4b:d0:14:fe:2d:61:24:39:0b: b2:c1:8d:0a:5b:9e:fd:c1:14:2a:52:64:80:8c:35:b2:12:26: 33:9d:93:94:2d:1c:e6:73:ee:82:7b:36:d2:8b:af:7a:a3:c4: 50:bf:c2:ed:60:ec:d6:38:94:9e:02:38:1f:b1:b4:ef:8a:58: eb:76:b4:5d:84:d5:1b:35:9a:48:fc:86:f6:0c:1d:53:b2:f9: b6:49:80:ea:ab:bb:40:d6:e3:80:33:58:ad:98:73:27:00:23: a3:05:3d:e6:3e:89:1a:fa:03:82:e5:4b:84:7e:5e:bc:0d:4b: 06:8d:c6:7f:bf:84:64:e0:77:56:0b:30:46:f6:5d:fd:17:91: a4:4d:bd:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dAQ7wUVV0aG2I1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MjIwOVoXDTI2MDYwNzE3MjIwOVowLzEtMCsGA1UEAxMk MWZlMWQxM2ItODdmMy00Mjk4LWEwOGEtZGFjYWMyZGVlOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOGTwvOX6luAvBXb4wxPbIe9S7UBrI1hHFLi Duj3q5zE1w6PPqWeYF6Rit18pd3Qy5qeYlrXdtrPOoQJIGXVzxa3XUHYHctRuUGA gzcROyB+gYsRGHMra9px195hZH+KWr/lxy1Dy6aJLte25e5iLFmF+VUxpTZA6xPD re18GVk45gG7tiVAxRk21wXhGwVfvbBUjBBANZk0h2oA9DBxyE3ULxQgbC/ALG1K 2x26knEmNNQAESDrIE6BGq2qyxgvkUMXtdXPEVE8Xv1z6gqAC3Kt31zLf/p81yLM QyTdStw7AlSRyDsP9yrGMq5UaRbNGCgoSjngJuEcRLT6+o6LcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIe14UVauzGwhiHDhK62XyfvQVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjU4YjQ3MWUtNzg5YS0z NTJhLWIwNmUtNjljMzA1OTMwNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTGRhb44hKvVRpXdeg8cOVqcKU+L+VGV8VSEzG7XurFcOtC1e7uPos3 +QRqJRFUZgupNhSIv1Khg+9Z7SEr7C5heLNkXxRALBUzg+0BIwP+pdOwN8IutQWK nDbNxSA2mpR9kb+D9pSEm3qj1iFx6ctiqd+ASEvQFP4tYSQ5C7LBjQpbnv3BFCpS ZICMNbISJjOdk5QtHOZz7oJ7NtKLr3qjxFC/wu1g7NY4lJ4COB+xtO+KWOt2tF2E 1Rs1mkj8hvYMHVOy+bZJgOqru0DW44AzWK2YcycAI6MFPeY+iRr6A4LlS4R+XrwN SwaNxn+/hGTgd1YLMEb2Xf0XkaRNvZA= -----END CERTIFICATE-----Generated at Mon Mar 23 18:52:44 2026 by rpki-client