$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca0df677-9d67-3e0f-9de7-a2793c2b4ed7.roa File: ca0df677-9d67-3e0f-9de7-a2793c2b4ed7.roa (raw, json) Hash identifier: ne9TB0AuR1HaPl4rF/vFSUQ6unHwEZr5iYy3ZMq6IyE= Subject key identifier: D0:31:D7:2D:90:BF:D7:37:C1:3B:4E:F2:C4:72:A6:B2:83:EE:82:CE Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D07789351B2592CC5622400 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca0df677-9d67-3e0f-9de7-a2793c2b4ed7.roa Signing time: Mon 09 Mar 2026 17:35:04 +0000 ROA not before: Mon 09 Mar 2026 17:35:04 +0000 ROA not after: Sun 07 Jun 2026 17:35:04 +0000 asID: 398781 IP address blocks: 172.120.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:07:78:93:51:b2:59:2c:c5:62:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:35:04 2026 GMT Not After : Jun 7 17:35:04 2026 GMT Subject: CN=a3e8168c-cbf8-46cb-a3bd-09acad222d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:4e:c3:ef:b5:c0:63:d6:cd:b4:68:90:11: 26:8b:b6:ae:3a:14:1a:42:3b:22:2d:d7:ca:b7:d5: 6c:0f:30:cc:8c:b6:27:76:f1:5a:58:71:dd:f6:c9: 70:4a:09:83:7c:32:75:91:91:50:52:4a:c5:f3:47: 07:bf:12:79:86:3a:eb:55:fe:4f:92:5a:63:70:ae: 6e:83:b7:0b:26:18:cc:97:a2:cf:6f:be:ce:aa:80: 0c:d3:c1:d7:41:61:8d:59:ed:14:83:5d:44:16:31: 18:1e:30:d4:07:bd:b6:74:4a:41:a9:f4:fa:e5:fb: ca:8a:a6:02:c6:10:7f:45:1e:25:a0:3a:fc:4f:e2: 3d:06:8c:94:f6:c4:f1:f2:4e:82:23:7f:f0:9c:a0: b8:74:05:2d:7f:1d:b2:60:a7:ef:0d:42:96:37:1d: 5d:4a:04:73:7f:3d:e0:64:a9:41:bd:9b:47:3f:da: 5e:7c:43:d6:4e:4f:a8:5a:e9:4d:49:ee:07:9c:05: 95:60:a2:43:6a:c8:a4:63:53:d5:f2:6a:f6:b5:ee: 44:53:0d:2c:22:4c:f3:ed:df:08:5f:33:00:19:44: cd:14:06:0c:34:a4:c3:9b:8f:ac:75:7d:c9:f1:de: c5:88:f3:43:13:56:ba:8f:b2:0b:6e:b0:f6:58:cb: 04:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:31:D7:2D:90:BF:D7:37:C1:3B:4E:F2:C4:72:A6:B2:83:EE:82:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca0df677-9d67-3e0f-9de7-a2793c2b4ed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:15:bf:f8:21:13:74:c2:8a:e8:f6:d4:25:f8:d6:d1:ec:2d: 3b:09:0d:8c:3b:2e:2e:60:ff:a7:e0:b8:60:b8:54:f9:b4:6d: ac:f0:13:fa:c7:7f:75:e0:be:13:8b:e7:e1:de:57:9c:9b:4b: 06:cc:36:43:a1:64:ae:c9:67:57:2a:86:b6:13:86:dd:3a:c6: 2d:74:3c:2e:65:88:b6:e5:09:2f:79:40:12:0e:e9:dd:70:9c: 44:d6:ab:90:31:1e:d0:e6:29:3e:e2:8e:94:16:90:95:d2:24: a4:cc:0f:81:f7:10:17:c1:03:5d:1b:64:2d:b0:0b:ce:1f:9f: da:37:35:16:5d:7d:2d:1d:a9:1f:1f:3b:e4:d4:f9:ad:60:58: 74:c3:2e:73:f4:7a:29:85:b1:d4:3d:e8:99:cc:29:84:1b:2c: ca:2d:47:05:98:1c:f3:76:32:37:e7:04:1d:33:50:50:01:4a: 18:a6:25:2c:f3:b8:fa:9f:e3:b7:83:2d:cb:7e:43:39:e5:7b: cb:61:bb:85:56:78:58:47:bf:dc:fd:7a:9a:94:5b:32:d3:95: 84:5a:c8:52:8b:ac:fe:c9:5c:7e:c6:6d:3c:8f:08:18:6d:b5: df:a9:fd:d0:74:3c:34:21:cd:6e:f6:7e:ab:f9:3f:92:aa:7f: a4:11:8c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dB3iTUbJZLMViJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MzUwNFoXDTI2MDYwNzE3MzUwNFowLzEtMCsGA1UEAxMk YTNlODE2OGMtY2JmOC00NmNiLWEzYmQtMDlhY2FkMjIyZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyxOw++1wGPWzbRokBEmi7auOhQaQjsiLdfK t9VsDzDMjLYndvFaWHHd9slwSgmDfDJ1kZFQUkrF80cHvxJ5hjrrVf5PklpjcK5u g7cLJhjMl6LPb77OqoAM08HXQWGNWe0Ug11EFjEYHjDUB722dEpBqfT65fvKiqYC xhB/RR4loDr8T+I9BoyU9sTx8k6CI3/wnKC4dAUtfx2yYKfvDUKWNx1dSgRzfz3g ZKlBvZtHP9pefEPWTk+oWulNSe4HnAWVYKJDasikY1PV8mr2te5EUw0sIkzz7d8I XzMAGUTNFAYMNKTDm4+sdX3J8d7FiPNDE1a6j7ILbrD2WMsEbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAx1y2Qv9c3wTtO8sRyprKD7oLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2EwZGY2NzctOWQ2Ny0z ZTBmLTlkZTctYTI3OTNjMmI0ZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAVv/ghE3TCiuj21CX41tHsLTsJDYw7Li5g/6fguGC4VPm0bazwE/rH f3XgvhOL5+HeV5ybSwbMNkOhZK7JZ1cqhrYTht06xi10PC5liLblCS95QBIO6d1w nETWq5AxHtDmKT7ijpQWkJXSJKTMD4H3EBfBA10bZC2wC84fn9o3NRZdfS0dqR8f O+TU+a1gWHTDLnP0eimFsdQ96JnMKYQbLMotRwWYHPN2MjfnBB0zUFABShimJSzz uPqf47eDLct+Qznle8thu4VWeFhHv9z9epqUWzLTlYRayFKLrP7JXH7GbTyPCBht td+p/dB0PDQhzW72fqv5P5Kqf6QRjPI= -----END CERTIFICATE-----Generated at Mon Mar 23 18:48:21 2026 by rpki-client