$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f195ad0b-b108-323e-a508-5b77d225654e.roa File: f195ad0b-b108-323e-a508-5b77d225654e.roa (raw, json) Hash identifier: m+PMEQ8veLlXegV8m/c9FIqnSG7MpLFJ6IVyIhMqSLo= Subject key identifier: 19:5A:A0:ED:B0:F8:80:B7:C7:C0:3B:70:72:A6:9D:80:ED:B6:4F:91 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D1D035C6D592FA875BBB63580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f195ad0b-b108-323e-a508-5b77d225654e.roa Signing time: Mon 09 Mar 2026 17:26:47 +0000 ROA not before: Mon 09 Mar 2026 17:26:47 +0000 ROA not after: Sun 07 Jun 2026 17:26:47 +0000 asID: 398781 IP address blocks: 172.121.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:03:5c:6d:59:2f:a8:75:bb:b6:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 9 17:26:47 2026 GMT Not After : Jun 7 17:26:47 2026 GMT Subject: CN=787ae305-a7be-4e2d-a898-62281427b261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:44:93:c3:e0:0e:4f:57:02:17:0e:32:e7: d0:74:04:fc:13:1c:b1:67:61:fd:d5:64:95:aa:68: f7:7f:57:e4:a2:20:82:02:f4:65:90:9b:5a:a7:f5: 77:b3:80:16:60:b0:e0:aa:d8:37:af:41:6e:8d:df: f0:58:bc:9b:62:0d:95:11:bf:ed:67:81:8b:96:38: 17:22:fd:c4:15:6a:99:24:82:3b:65:15:fc:05:b0: 3b:8f:e4:86:f6:88:a3:54:a6:77:5e:f5:f7:4d:ef: 8b:e4:61:b6:2c:df:b3:c7:6e:c3:36:62:b0:03:87: 0d:37:ea:95:da:88:6c:5c:05:39:38:7b:32:ff:c7: cf:76:3e:e8:ab:af:da:2b:07:6f:b9:fa:cf:64:5a: 1e:85:d2:e3:b7:03:a5:b8:ee:5d:06:9e:94:9b:db: e3:06:32:d5:04:d9:43:cd:b3:88:6e:be:b4:29:33: 4a:27:00:9f:15:99:7d:20:89:23:82:ac:a8:47:7e: 97:a5:45:ba:36:cf:45:49:ac:6f:12:ab:60:3d:3d: 23:ba:15:66:8d:f2:9c:2d:1f:21:fb:95:61:2e:e5: 53:2e:85:b8:ed:e1:a6:67:73:54:79:5d:62:36:a5: d5:1c:83:a1:29:4a:75:f0:88:9e:7c:3c:f3:66:53: 09:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5A:A0:ED:B0:F8:80:B7:C7:C0:3B:70:72:A6:9D:80:ED:B6:4F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f195ad0b-b108-323e-a508-5b77d225654e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ef:28:18:f3:2b:1a:f8:32:a7:4a:8e:b5:8a:0f:78:8d:73: d7:00:0d:3e:17:2e:b5:d9:1d:f5:c8:2c:02:40:cf:09:4d:57: e6:76:76:fc:03:73:b3:91:34:4d:28:8e:58:20:16:e5:df:a1: 2d:75:31:da:3a:e9:84:5c:52:9a:fe:11:b2:32:b2:3a:1e:3b: f8:ae:d0:e7:31:bc:41:a6:5d:d2:16:5c:c1:9e:a9:ed:b4:9d: f0:9c:8e:89:3c:74:fb:db:88:4b:55:5a:98:c0:29:7e:b7:41: 19:c2:8f:5c:fd:8f:da:e0:c5:6f:3a:d8:5e:9d:cd:31:0a:59: 33:7d:cd:80:44:ee:2c:fc:08:3d:3f:37:96:be:56:bc:57:7b: 19:97:b8:59:21:9f:46:32:c0:4b:fe:8e:62:9b:79:84:16:ae: be:ef:c7:b4:ef:ad:ff:8c:00:84:5d:4d:a1:a5:6a:7a:c1:7f: 18:f7:4b:48:f0:c4:98:3d:45:97:42:cc:a6:89:da:4e:b2:1b: b0:41:3a:4c:6e:14:17:7e:80:00:86:8e:9f:83:81:37:54:ac: 50:ae:91:1a:6b:70:3d:83:98:79:6f:00:ef:78:19:41:79:1c: e5:74:83:b4:49:79:d3:a7:86:2c:9c:db:c8:0b:56:57:ae:72: cd:51:ce:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dA1xtWS+odbu2NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwOTE3MjY0N1oXDTI2MDYwNzE3MjY0N1owLzEtMCsGA1UEAxMk Nzg3YWUzMDUtYTdiZS00ZTJkLWE4OTgtNjIyODE0MjdiMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4JEk8PgDk9XAhcOMufQdAT8ExyxZ2H91WSV qmj3f1fkoiCCAvRlkJtap/V3s4AWYLDgqtg3r0Fujd/wWLybYg2VEb/tZ4GLljgX Iv3EFWqZJII7ZRX8BbA7j+SG9oijVKZ3XvX3Te+L5GG2LN+zx27DNmKwA4cNN+qV 2ohsXAU5OHsy/8fPdj7oq6/aKwdvufrPZFoehdLjtwOluO5dBp6Um9vjBjLVBNlD zbOIbr60KTNKJwCfFZl9IIkjgqyoR36XpUW6Ns9FSaxvEqtgPT0juhVmjfKcLR8h +5VhLuVTLoW47eGmZ3NUeV1iNqXVHIOhKUp18IiefDzzZlMJbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlaoO2w+IC3x8A7cHKmnYDttk+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjE5NWFkMGItYjEwOC0z MjNlLWE1MDgtNWI3N2QyMjU2NTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTvKBjzKxr4MqdKjrWKD3iNc9cADT4XLrXZHfXILAJAzwlNV+Z2dvwD c7ORNE0ojlggFuXfoS11Mdo66YRcUpr+EbIysjoeO/iu0OcxvEGmXdIWXMGeqe20 nfCcjok8dPvbiEtVWpjAKX63QRnCj1z9j9rgxW862F6dzTEKWTN9zYBE7iz8CD0/ N5a+VrxXexmXuFkhn0YywEv+jmKbeYQWrr7vx7Tvrf+MAIRdTaGlanrBfxj3S0jw xJg9RZdCzKaJ2k6yG7BBOkxuFBd+gACGjp+DgTdUrFCukRprcD2DmHlvAO94GUF5 HOV0g7RJedOnhiyc28gLVleucs1RzsA= -----END CERTIFICATE-----Generated at Mon Mar 23 18:52:44 2026 by rpki-client