$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfaed422-9b67-336e-817a-2b9fa1020c75.roa File: bfaed422-9b67-336e-817a-2b9fa1020c75.roa (raw, json) Hash identifier: PlEwfc1bHheFZgR+qZ6cdxTVgOBFM7Te7iZ2cdwiOTE= Subject key identifier: DA:96:43:AC:F7:52:D8:3C:3E:7A:F6:D9:99:94:12:8E:3A:A5:BD:77 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D0406D20A814E5651B2E880 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfaed422-9b67-336e-817a-2b9fa1020c75.roa Signing time: Mon 09 Mar 2026 17:28:08 +0000 ROA not before: Mon 09 Mar 2026 17:28:08 +0000 ROA not after: Sun 07 Jun 2026 17:28:08 +0000 asID: 398781 IP address blocks: 172.121.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:04:06:d2:0a:81:4e:56:51:b2:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:28:08 2026 GMT Not After : Jun 7 17:28:08 2026 GMT Subject: CN=d3990d8d-397a-476c-b26c-3b642994d766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:11:78:a6:21:d6:eb:25:f2:38:b1:83:42: 7c:33:07:54:09:df:67:e1:23:96:49:f8:8c:02:7f: e5:cf:48:4b:e5:86:4f:dc:ba:b7:ab:e6:10:52:cf: ca:20:e6:72:3a:84:bb:be:b0:22:9c:17:e5:82:c2: c4:fd:67:5f:a1:ea:8e:f2:6d:ac:b2:2d:1a:27:dd: 30:ae:f7:c6:d7:69:a4:71:86:1a:a6:c4:b6:c0:fe: b9:3f:9b:ce:8f:85:14:9b:70:20:d6:8a:5f:ca:aa: 8f:77:5f:70:4e:dc:c9:36:53:2c:51:52:ed:17:2c: fd:17:6c:76:c1:3b:e9:d4:5f:c7:55:b9:05:0f:c6: f7:bd:1f:5e:4c:19:c9:b4:38:58:32:02:9d:ab:7b: af:11:1c:e5:f7:47:74:f2:35:57:a5:9b:5f:99:12: 9e:76:aa:b0:0a:93:a0:24:c2:54:ce:af:6b:55:df: a3:6f:40:3c:31:6a:13:6e:8b:46:0a:85:8a:ad:89: be:ef:21:7f:4a:cf:c7:e9:9f:ab:e1:2d:91:8e:55: bc:1c:dc:87:88:aa:a1:be:74:09:c5:d5:7d:4c:6f: 23:c6:39:cb:9a:87:d6:f3:47:17:09:9a:43:47:49: 12:54:75:2f:99:ef:1b:f3:1f:f5:5f:c1:b8:2c:ae: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:96:43:AC:F7:52:D8:3C:3E:7A:F6:D9:99:94:12:8E:3A:A5:BD:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfaed422-9b67-336e-817a-2b9fa1020c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:98:31:67:4e:8d:60:18:17:4e:b6:72:15:54:f9:b6:31:98: cd:6c:66:99:b1:68:ba:c9:ec:01:35:f5:31:4c:e0:5b:c2:e6: 98:27:41:a0:bd:ef:6b:57:7b:ed:f2:a9:08:ab:92:85:85:6b: 20:7a:03:0d:2c:b2:b9:e3:0d:8f:72:9f:6b:d7:99:4b:48:a8: 12:3c:41:70:bc:e6:ce:aa:13:38:e4:5d:9e:85:f7:7f:66:ce: c3:b5:34:55:09:24:10:f3:46:14:ed:07:0d:3e:94:a0:20:6d: f3:75:b6:60:51:53:ea:4c:15:79:50:a3:56:2f:5d:1c:d8:9c: 98:cf:72:16:51:62:4a:6c:ae:8a:53:34:f6:4d:13:fb:34:8d: 32:16:a2:8d:d5:63:79:bc:53:cf:58:66:9f:9d:45:89:92:e1: 7a:b7:c9:c2:ee:8c:4f:9c:a1:c6:7c:27:4e:44:aa:d8:67:6c: 3b:ed:5e:d7:28:db:2d:1e:fc:73:14:12:5e:27:0f:4b:10:00: c3:39:36:0a:84:25:56:41:60:80:7a:a3:b1:e3:37:64:7d:87: bc:a0:33:c7:a1:f5:55:f6:cd:48:78:5f:01:39:58:ef:80:38: 02:95:6a:c6:42:2a:65:9a:19:ed:64:40:af:ae:c7:ce:37:6b: 1c:7c:f2:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dBAbSCoFOVlGy6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MjgwOFoXDTI2MDYwNzE3MjgwOFowLzEtMCsGA1UEAxMk ZDM5OTBkOGQtMzk3YS00NzZjLWIyNmMtM2I2NDI5OTRkNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqsReKYh1usl8jixg0J8MwdUCd9n4SOWSfiM An/lz0hL5YZP3Lq3q+YQUs/KIOZyOoS7vrAinBflgsLE/WdfoeqO8m2ssi0aJ90w rvfG12mkcYYapsS2wP65P5vOj4UUm3Ag1opfyqqPd19wTtzJNlMsUVLtFyz9F2x2 wTvp1F/HVbkFD8b3vR9eTBnJtDhYMgKdq3uvERzl90d08jVXpZtfmRKedqqwCpOg JMJUzq9rVd+jb0A8MWoTbotGCoWKrYm+7yF/Ss/H6Z+r4S2RjlW8HNyHiKqhvnQJ xdV9TG8jxjnLmofW80cXCZpDR0kSVHUvme8b8x/1X8G4LK7IYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqWQ6z3Utg8Pnr22ZmUEo46pb13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmZhZWQ0MjItOWI2Ny0z MzZlLTgxN2EtMmI5ZmExMDIwYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByYMWdOjWAYF062chVU+bYxmM1sZpmxaLrJ7AE19TFM4FvC5pgnQaC9 72tXe+3yqQirkoWFayB6Aw0ssrnjDY9yn2vXmUtIqBI8QXC85s6qEzjkXZ6F939m zsO1NFUJJBDzRhTtBw0+lKAgbfN1tmBRU+pMFXlQo1YvXRzYnJjPchZRYkpsropT NPZNE/s0jTIWoo3VY3m8U89YZp+dRYmS4Xq3ycLujE+cocZ8J05EqthnbDvtXtco 2y0e/HMUEl4nD0sQAMM5NgqEJVZBYIB6o7HjN2R9h7ygM8eh9VX2zUh4XwE5WO+A OAKVasZCKmWaGe1kQK+ux843axx88kw= -----END CERTIFICATE-----Generated at Mon Mar 23 18:48:47 2026 by rpki-client