$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cfbf9720-a158-3976-8311-6de56f997234.roa File: cfbf9720-a158-3976-8311-6de56f997234.roa (raw, json) Hash identifier: 21NEiN4LrHcNhyz/+Fv+8vaUDwWdrHP2tASAtPh5iVo= Subject key identifier: A3:CA:B0:DC:DB:0F:07:F2:09:E2:73:BC:4D:4C:1B:B4:0E:A2:78:53 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D88651168AE5E0FD959D120 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cfbf9720-a158-3976-8311-6de56f997234.roa Signing time: Mon 09 Mar 2026 21:54:50 +0000 ROA not before: Mon 09 Mar 2026 21:54:50 +0000 ROA not after: Sun 07 Jun 2026 21:54:50 +0000 asID: 398781 IP address blocks: 172.252.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:88:65:11:68:ae:5e:0f:d9:59:d1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 21:54:50 2026 GMT Not After : Jun 7 21:54:50 2026 GMT Subject: CN=524fcd34-7ef5-43cc-8e87-ed0e3f8e3913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:9b:20:ab:e0:e3:93:8e:e1:4a:c0:a9:dd: 8a:fc:97:54:c6:23:09:8b:ff:8f:93:c2:7d:91:9b: 9b:b5:57:9e:32:1a:e9:b8:7b:4e:97:70:6a:cc:70: 32:6b:17:07:57:e2:f7:fc:44:8c:03:cc:56:d2:fe: d1:8c:c3:4f:ec:0d:cc:22:ec:63:66:da:35:47:75: 04:52:ec:51:66:7a:cf:31:21:80:92:ba:ea:cd:f8: 5e:3a:ac:19:1d:cc:8f:90:70:0d:e3:e3:01:a3:f5: b5:f7:61:2c:9d:ac:93:a8:dd:20:97:06:0f:0a:16: 4a:51:5b:ab:65:7a:a5:6b:b7:43:60:e7:a9:7a:66: 24:90:75:ff:9b:49:35:bf:61:48:27:dd:68:67:19: 0e:82:cf:52:22:22:ae:34:c8:8f:3d:e8:97:ba:44: 74:e5:c4:4a:d1:61:f9:db:9e:21:9e:50:66:5e:f4: 8c:66:c7:47:d5:4a:3c:1f:68:74:38:cf:7b:b0:c6: 62:c6:02:b9:1a:8e:24:8c:d1:39:72:94:b5:a7:52: 84:d9:4c:1a:b2:13:41:0e:17:6f:23:4c:28:cc:af: e6:ae:ac:e0:50:72:e1:e9:b1:26:ba:47:8e:bb:f7: 69:01:b2:6e:6b:c8:35:36:70:d3:25:2c:76:39:f3: c9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CA:B0:DC:DB:0F:07:F2:09:E2:73:BC:4D:4C:1B:B4:0E:A2:78:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cfbf9720-a158-3976-8311-6de56f997234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:46:45:8a:20:4a:48:8d:b6:f4:23:3d:9b:c8:c9:b8:aa:b8: b9:c6:85:e2:4b:b9:34:3b:dc:c7:38:67:d1:fe:52:93:6f:b7: fd:bc:44:73:85:8c:1f:67:fa:aa:ef:46:5e:ee:67:84:03:a8: fc:51:19:0f:4b:f3:15:a6:01:c1:0d:02:45:d5:32:b3:3f:24: a5:d5:9f:f0:ec:46:59:f9:78:57:79:cc:16:2b:33:21:93:05: cf:19:b4:00:ef:5d:67:16:af:ca:79:6f:bb:6a:2e:32:04:0c: 8f:11:3e:76:b3:4b:59:bf:49:7a:f0:97:a5:4f:ea:3d:3d:49: 1c:f9:e9:fd:0e:fd:db:5e:6d:0d:d0:84:c9:44:16:1a:eb:cc: 1b:26:80:02:bc:8f:42:32:c5:90:01:ff:a8:ac:9d:83:5f:cd: 8c:cb:4f:b3:c0:51:95:7e:fd:c5:2a:69:d5:37:d0:49:66:ee: 0a:6e:4c:51:3b:4d:26:06:6b:e6:40:16:20:6c:bb:8c:ac:7f: ca:5b:54:0b:ff:f8:52:0c:c3:01:50:cf:52:99:e5:a5:39:52: f6:dc:d5:1d:62:e7:f3:69:36:ea:2e:0b:e7:89:14:2f:c0:15: 1f:42:33:15:e9:0f:ab:a6:ee:cd:9a:f1:6d:70:01:c3:7e:83: 0c:82:95:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0diGURaK5eD9lZ0SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTIxNTQ1MFoXDTI2MDYwNzIxNTQ1MFowLzEtMCsGA1UEAxMk NTI0ZmNkMzQtN2VmNS00M2NjLThlODctZWQwZTNmOGUzOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCubIKvg45OO4UrAqd2K/JdUxiMJi/+Pk8J9 kZubtVeeMhrpuHtOl3BqzHAyaxcHV+L3/ESMA8xW0v7RjMNP7A3MIuxjZto1R3UE UuxRZnrPMSGAkrrqzfheOqwZHcyPkHAN4+MBo/W192EsnayTqN0glwYPChZKUVur ZXqla7dDYOepemYkkHX/m0k1v2FIJ91oZxkOgs9SIiKuNMiPPeiXukR05cRK0WH5 254hnlBmXvSMZsdH1Uo8H2h0OM97sMZixgK5Go4kjNE5cpS1p1KE2UwashNBDhdv I0wozK/mrqzgUHLh6bEmukeOu/dpAbJua8g1NnDTJSx2OfPJkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPKsNzbDwfyCeJzvE1MG7QOonhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2ZiZjk3MjAtYTE1OC0z OTc2LTgzMTEtNmRlNTZmOTk3MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPw8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1GRYogSkiNtvQjPZvIybiquLnGheJLuTQ73Mc4Z9H+UpNvt/28RHOF jB9n+qrvRl7uZ4QDqPxRGQ9L8xWmAcENAkXVMrM/JKXVn/DsRln5eFd5zBYrMyGT Bc8ZtADvXWcWr8p5b7tqLjIEDI8RPnazS1m/SXrwl6VP6j09SRz56f0O/dtebQ3Q hMlEFhrrzBsmgAK8j0IyxZAB/6isnYNfzYzLT7PAUZV+/cUqadU30Elm7gpuTFE7 TSYGa+ZAFiBsu4ysf8pbVAv/+FIMwwFQz1KZ5aU5Uvbc1R1i5/NpNuouC+eJFC/A FR9CMxXpD6um7s2a8W1wAcN+gwyClao= -----END CERTIFICATE-----Generated at Mon Mar 23 18:54:45 2026 by rpki-client