$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa File: d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa (raw, json) Hash identifier: Z6zfwmftbzqInTRl+5vbi982Fi14Htii7BmuQCMmYL4= Subject key identifier: 5B:62:28:06:51:12:3C:49:E1:E1:1B:2C:CA:D5:EE:E5:79:9D:56:CA Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D02CC1246CB0857ED4992F0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa Signing time: Mon 09 Mar 2026 17:25:39 +0000 ROA not before: Mon 09 Mar 2026 17:25:39 +0000 ROA not after: Sun 07 Jun 2026 17:25:39 +0000 asID: 398781 IP address blocks: 172.120.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:02:cc:12:46:cb:08:57:ed:49:92:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:25:39 2026 GMT Not After : Jun 7 17:25:39 2026 GMT Subject: CN=687d5b3b-2b78-413a-bd4c-188ccdd7480e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:24:f4:7b:f6:69:be:fa:f0:e8:25:52:10: dd:51:45:d1:3a:20:3e:7b:31:20:01:d7:4c:07:6d: 6c:4d:d7:00:66:8d:2f:40:ed:80:ac:bc:8e:ac:ab: b5:84:7c:de:26:a5:9c:de:c9:16:cd:a7:48:9e:e0: 16:83:e4:63:79:96:26:80:7a:73:48:68:c0:4b:30: 17:f3:3b:fc:14:6d:17:05:5c:6e:7a:f1:f2:18:ba: b0:79:b0:0f:57:3d:e0:e6:d8:68:69:09:56:61:e0: da:93:6f:f4:bf:97:0b:34:28:5e:10:4a:f4:af:64: d2:88:58:96:e7:2e:b2:01:66:53:cd:b7:70:61:1f: 03:c4:29:23:ba:be:c2:ba:42:6b:f2:b0:c4:1d:e7: 0d:72:25:fc:d5:f1:d7:f3:b2:6d:77:c9:b3:33:d3: 98:de:03:b2:c5:1f:92:4b:34:45:46:a0:3b:2b:7e: 90:9f:0f:72:94:63:4b:c4:e3:fb:ea:44:62:d3:cd: 20:6f:b1:be:37:59:25:58:38:62:c3:8d:0f:4a:4a: bb:86:53:e6:11:b9:33:4d:95:c0:a9:bb:cc:47:75: fd:e5:94:5b:20:f0:50:ac:31:ce:a5:0d:5f:5a:43: 47:10:f8:b2:c0:76:1d:ae:c9:72:7a:e2:34:04:54: aa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:62:28:06:51:12:3C:49:E1:E1:1B:2C:CA:D5:EE:E5:79:9D:56:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fab3bb-c363-3c49-af01-151d6c5cfa00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a2:f5:b7:1b:00:45:fc:b2:74:e1:1a:7d:17:68:51:e6:06: 0c:ba:c7:7f:bf:23:e6:e2:6e:37:dc:ec:ec:07:72:f9:ba:5b: 08:d8:23:72:d2:28:b3:8a:19:44:ee:f6:34:79:77:c6:45:b4: 5d:e0:ef:60:20:38:95:da:e8:02:3c:4b:93:e9:f3:97:ab:69: 82:a3:72:73:58:5a:6a:56:fa:15:87:ca:80:a0:3f:e7:cd:d3: 9e:4f:7d:c4:89:2f:a8:76:0b:a1:fc:52:84:bd:a0:dc:58:23: 02:f0:70:4e:ea:0a:27:84:6d:87:f8:24:13:5d:b8:5e:f5:a9: ff:9a:8d:45:cf:f4:40:6a:2a:61:a3:76:11:36:96:45:98:bc: b9:06:0c:f8:c0:41:ec:08:10:df:8c:3d:e5:9f:a9:a6:55:30: 2e:ff:f3:29:53:de:a9:fe:2e:31:b8:32:63:55:95:98:d5:10: b4:f9:79:81:1c:74:02:1f:4a:d9:6c:0c:6f:45:3c:12:cd:c2: 59:ca:59:7f:26:cb:8e:c6:15:ca:71:af:3a:41:a7:fc:b5:f4: f0:0b:26:9d:06:bc:a1:0a:5e:2c:d2:f3:d3:39:58:b1:7c:b5: db:38:2b:31:db:6e:b4:57:d6:c5:0b:35:54:08:f9:9b:44:e4: 05:36:af:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dAswSRssIV+1JkvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MjUzOVoXDTI2MDYwNzE3MjUzOVowLzEtMCsGA1UEAxMk Njg3ZDViM2ItMmI3OC00MTNhLWJkNGMtMTg4Y2NkZDc0ODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xsk9Hv2ab768OglUhDdUUXROiA+ezEgAddM B21sTdcAZo0vQO2ArLyOrKu1hHzeJqWc3skWzadInuAWg+RjeZYmgHpzSGjASzAX 8zv8FG0XBVxuevHyGLqwebAPVz3g5thoaQlWYeDak2/0v5cLNCheEEr0r2TSiFiW 5y6yAWZTzbdwYR8DxCkjur7CukJr8rDEHecNciX81fHX87Jtd8mzM9OY3gOyxR+S SzRFRqA7K36Qnw9ylGNLxOP76kRi080gb7G+N1klWDhiw40PSkq7hlPmEbkzTZXA qbvMR3X95ZRbIPBQrDHOpQ1fWkNHEPiywHYdrslyeuI0BFSqGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtiKAZREjxJ4eEbLMrV7uV5nVbKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDBmYWIzYmItYzM2My0z YzQ5LWFmMDEtMTUxZDZjNWNmYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGii9bcbAEX8snThGn0XaFHmBgy6x3+/I+bibjfc7OwHcvm6WwjYI3LS KLOKGUTu9jR5d8ZFtF3g72AgOJXa6AI8S5Pp85eraYKjcnNYWmpW+hWHyoCgP+fN 055PfcSJL6h2C6H8UoS9oNxYIwLwcE7qCieEbYf4JBNduF71qf+ajUXP9EBqKmGj dhE2lkWYvLkGDPjAQewIEN+MPeWfqaZVMC7/8ylT3qn+LjG4MmNVlZjVELT5eYEc dAIfStlsDG9FPBLNwlnKWX8my47GFcpxrzpBp/y19PALJp0GvKEKXizS89M5WLF8 tds4KzHbbrRX1sULNVQI+ZtE5AU2r+4= -----END CERTIFICATE-----Generated at Mon Mar 23 18:48:48 2026 by rpki-client