$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8fc99d5-1339-34a2-a930-f8c178942713.roa File: c8fc99d5-1339-34a2-a930-f8c178942713.roa (raw, json) Hash identifier: cCn4kwpv/phhWf5jW/ZfFQxm4X5UzeLUC0/M4y7jeKQ= Subject key identifier: 7F:8B:1F:6E:8E:03:07:87:3B:10:DA:9A:25:8D:B7:56:22:0A:08:96 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D014F3B9452D4B440A55200 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8fc99d5-1339-34a2-a930-f8c178942713.roa Signing time: Mon 09 Mar 2026 17:22:39 +0000 ROA not before: Mon 09 Mar 2026 17:22:39 +0000 ROA not after: Sun 07 Jun 2026 17:22:39 +0000 asID: 398781 IP address blocks: 172.120.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:01:4f:3b:94:52:d4:b4:40:a5:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:22:39 2026 GMT Not After : Jun 7 17:22:39 2026 GMT Subject: CN=b2e1140a-8fc8-4d04-a15f-c0388568bcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:d5:01:ae:31:b8:15:b5:6b:38:8f:54:8e: ad:f0:38:db:f5:46:b3:22:11:fd:e3:07:bc:bf:35: 4c:13:31:c5:bb:89:82:09:b0:c7:ac:d4:77:1d:f0: 05:c4:b3:48:6d:38:0e:a9:a9:c3:4d:c1:9d:10:f1: f7:cb:64:d8:f4:77:1f:31:1e:82:b4:37:eb:ac:94: 7b:b4:ff:d9:52:27:45:8c:ee:d6:27:2e:97:90:a7: 52:f5:f4:3d:76:1b:5a:1d:71:f1:77:cd:10:d0:63: 4b:8b:cb:91:52:83:16:9e:cd:ac:bd:63:89:3a:3f: 1f:4c:d5:b8:2d:ba:71:18:ac:76:94:84:8b:d1:83: 6d:a5:11:bc:81:26:b2:c6:8c:82:09:9e:10:74:83: 6a:af:60:b0:cd:2b:b3:09:89:0e:5d:43:85:54:b9: c3:e6:6c:ad:3d:88:e3:f3:b7:1d:c7:29:46:4d:fd: b7:7c:6e:31:9c:d5:78:b1:1c:a9:cb:ed:4a:03:fa: 05:0b:e2:2b:a4:6d:33:c2:be:1d:bf:b4:f5:17:58: 1a:12:ec:ac:5d:52:a0:5d:a0:e7:a4:ec:ba:d1:11: c9:ee:3e:f4:5c:f5:a8:3e:f9:4a:9a:9f:2e:8b:9f: 61:06:74:dc:68:87:12:8e:71:9a:1c:d0:60:2d:51: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8B:1F:6E:8E:03:07:87:3B:10:DA:9A:25:8D:B7:56:22:0A:08:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8fc99d5-1339-34a2-a930-f8c178942713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5e:64:d4:46:26:dd:fb:e1:47:be:ab:29:a7:5b:e7:07:e8: 80:bf:6f:16:85:d3:82:5c:46:a8:dc:93:6f:c0:0d:88:26:1d: e8:a2:66:b1:51:2f:33:f5:ee:42:6a:5d:91:c5:dd:d1:91:b3: e6:db:0b:ba:f2:52:15:01:6e:50:e1:11:a8:90:b5:f3:99:af: 85:ca:b1:09:3c:b1:67:13:c7:a5:12:3a:10:1d:ac:6e:6d:4a: 5c:cc:06:6b:b5:b3:46:bd:0b:ba:75:20:d0:e7:db:1c:01:a4: 3c:df:43:78:64:81:07:89:b9:08:a7:68:30:3d:ad:59:25:9c: 51:5c:44:f7:f6:b0:88:bc:69:cc:4b:ab:05:0b:bf:22:4c:f9: 3d:80:fd:e0:e3:c8:7b:6f:3c:13:a0:16:56:83:80:92:ae:91: a4:b8:30:48:20:77:45:ad:09:41:11:f8:ea:53:9e:c2:e8:27: 38:a3:d2:16:1f:90:9e:e3:18:a8:16:bb:26:fd:67:63:d9:44: 7a:c7:cc:f8:50:8b:eb:f5:64:19:cf:7c:3a:24:11:2f:24:fc: 34:bf:20:a8:7a:86:1f:f7:14:4c:b3:84:1d:a0:82:3d:0f:a5: fa:f2:ab:80:e7:35:77:d2:0d:46:db:a7:09:43:c5:a4:22:9a: ab:5b:4e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dAU87lFLUtEClUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MjIzOVoXDTI2MDYwNzE3MjIzOVowLzEtMCsGA1UEAxMk YjJlMTE0MGEtOGZjOC00ZDA0LWExNWYtYzAzODg1NjhiY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vLVAa4xuBW1aziPVI6t8Djb9UazIhH94we8 vzVMEzHFu4mCCbDHrNR3HfAFxLNIbTgOqanDTcGdEPH3y2TY9HcfMR6CtDfrrJR7 tP/ZUidFjO7WJy6XkKdS9fQ9dhtaHXHxd80Q0GNLi8uRUoMWns2svWOJOj8fTNW4 LbpxGKx2lISL0YNtpRG8gSayxoyCCZ4QdINqr2CwzSuzCYkOXUOFVLnD5mytPYjj 87cdxylGTf23fG4xnNV4sRypy+1KA/oFC+IrpG0zwr4dv7T1F1gaEuysXVKgXaDn pOy60RHJ7j70XPWoPvlKmp8ui59hBnTcaIcSjnGaHNBgLVF1cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+LH26OAweHOxDamiWNt1YiCgiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzhmYzk5ZDUtMTMzOS0z NGEyLWE5MzAtZjhjMTc4OTQyNzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADReZNRGJt374Ue+qymnW+cH6IC/bxaF04JcRqjck2/ADYgmHeiiZrFR LzP17kJqXZHF3dGRs+bbC7ryUhUBblDhEaiQtfOZr4XKsQk8sWcTx6USOhAdrG5t SlzMBmu1s0a9C7p1INDn2xwBpDzfQ3hkgQeJuQinaDA9rVklnFFcRPf2sIi8acxL qwULvyJM+T2A/eDjyHtvPBOgFlaDgJKukaS4MEggd0WtCUER+OpTnsLoJzij0hYf kJ7jGKgWuyb9Z2PZRHrHzPhQi+v1ZBnPfDokES8k/DS/IKh6hh/3FEyzhB2ggj0P pfryq4DnNXfSDUbbpwlDxaQimqtbTqg= -----END CERTIFICATE-----Generated at Mon Mar 23 18:54:45 2026 by rpki-client