$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fffbff41-2b8f-3bae-8e48-152d7683df11.roa File: fffbff41-2b8f-3bae-8e48-152d7683df11.roa (raw, json) Hash identifier: xm6VCm6zdIyKtggjxnEHwY3naBKDfIF0S8/QZrbku1w= Subject key identifier: 9D:54:CB:36:19:A1:A0:67:8D:10:40:F5:2A:1B:F6:1D:C5:15:18:B0 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D0A779EFBAA550C2263F9E980 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fffbff41-2b8f-3bae-8e48-152d7683df11.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 18779 IP address blocks: 172.120.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:9e:fb:aa:55:0c:22:63:f9:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=6732fcb5-af12-4047-af4a-7d68a09c21d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:52:0e:9c:ca:23:e9:aa:61:ed:2a:4f:02: 74:86:99:96:c8:36:ca:0a:1a:50:ba:3d:cc:16:eb: 4b:b8:ea:1f:79:7a:00:12:c4:6f:f6:04:43:73:47: ea:01:d2:4b:e4:cb:de:73:ed:09:95:61:c5:2a:f7: fa:12:5a:84:e7:69:e6:0e:ec:ad:1f:00:8a:f2:b0: d6:65:73:f0:19:ff:4f:87:c5:f6:9e:b0:aa:11:da: 4b:da:b4:66:24:60:71:8c:96:64:5f:5a:b0:35:c1: 52:a0:85:16:20:02:0b:ec:33:86:58:1f:b1:32:be: 9f:2f:1e:4b:b5:71:f5:09:4e:45:5e:c1:31:3e:32: 78:b0:e5:70:f4:b8:5d:bc:7f:89:21:29:52:c1:62: 38:ff:43:97:61:41:66:a2:72:05:19:68:36:5f:9d: 54:d1:6e:83:4e:6a:c7:7d:bc:ce:47:44:92:63:3a: 24:96:2a:5d:81:71:cf:e9:2a:c3:90:77:89:97:1a: 67:07:9e:02:56:f1:99:b8:fe:1d:56:bf:6f:9f:df: 46:31:7a:e3:1e:77:d0:50:80:83:21:03:ba:43:1c: cd:d1:0e:5f:f3:64:4b:2a:03:21:94:54:ab:ca:6e: fb:df:73:54:d3:5a:c2:cb:10:6f:3d:84:92:75:8c: cf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:54:CB:36:19:A1:A0:67:8D:10:40:F5:2A:1B:F6:1D:C5:15:18:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fffbff41-2b8f-3bae-8e48-152d7683df11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:1b:85:03:45:b4:77:d0:1e:4c:ca:1d:ed:77:95:74:b4:66: 8e:f6:0f:c6:73:01:db:ed:e3:c9:10:75:ec:eb:d5:b7:80:65: 30:be:2f:f2:af:e6:b2:bd:5d:e8:fd:03:77:6d:17:e5:23:a0: c8:e2:80:2c:8e:c1:18:0b:69:0f:37:08:f5:34:d6:f4:ef:48: 1d:e5:a9:c4:d6:85:33:d7:0e:08:76:38:16:62:be:c1:3c:82: 37:4f:67:21:2d:00:50:ed:8d:1c:82:7b:db:e8:42:4b:68:58: a0:fb:48:16:81:fa:f5:fb:56:d7:b9:9f:27:3c:76:65:37:83: d3:67:60:e8:31:84:e8:e3:24:1b:b2:2b:c4:8f:e8:f6:41:8d: 12:b4:80:ed:fe:da:9f:c4:0c:a1:b7:7c:3b:58:30:43:b7:2b: a7:13:68:f6:4b:a8:67:74:e2:a7:aa:bf:09:3e:e8:95:fd:00: 1e:09:83:cc:9b:8c:06:c5:6e:7b:40:3c:d2:7c:e8:e4:82:d6: b1:f4:75:ac:b1:7b:fb:81:fa:dd:1b:4c:2d:2b:4d:c1:ec:64: 85:c6:86:2e:fc:ab:f2:59:56:49:19:48:cb:2f:76:4b:d6:6a: 2b:ca:dd:64:5d:5b:49:3c:c8:51:5d:b1:bf:6d:8e:35:e9:5a: aa:b0:cc:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd577qlUMImP56YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk NjczMmZjYjUtYWYxMi00MDQ3LWFmNGEtN2Q2OGEwOWMyMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9JSDpzKI+mqYe0qTwJ0hpmWyDbKChpQuj3M FutLuOofeXoAEsRv9gRDc0fqAdJL5Mvec+0JlWHFKvf6ElqE52nmDuytHwCK8rDW ZXPwGf9Ph8X2nrCqEdpL2rRmJGBxjJZkX1qwNcFSoIUWIAIL7DOGWB+xMr6fLx5L tXH1CU5FXsExPjJ4sOVw9LhdvH+JISlSwWI4/0OXYUFmonIFGWg2X51U0W6DTmrH fbzOR0SSYzoklipdgXHP6SrDkHeJlxpnB54CVvGZuP4dVr9vn99GMXrjHnfQUICD IQO6QxzN0Q5f82RLKgMhlFSrym7733NU01rCyxBvPYSSdYzPuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1UyzYZoaBnjRBA9Sob9h3FFRiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmZmYmZmNDEtMmI4Zi0z YmFlLThlNDgtMTUyZDc2ODNkZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkbhQNFtHfQHkzKHe13lXS0Zo72D8ZzAdvt48kQdezr1beAZTC+L/Kv 5rK9Xej9A3dtF+UjoMjigCyOwRgLaQ83CPU01vTvSB3lqcTWhTPXDgh2OBZivsE8 gjdPZyEtAFDtjRyCe9voQktoWKD7SBaB+vX7Vte5nyc8dmU3g9NnYOgxhOjjJBuy K8SP6PZBjRK0gO3+2p/EDKG3fDtYMEO3K6cTaPZLqGd04qeqvwk+6JX9AB4Jg8yb jAbFbntAPNJ86OSC1rH0dayxe/uB+t0bTC0rTcHsZIXGhi78q/JZVkkZSMsvdkvW aivK3WRdW0k8yFFdsb9tjjXpWqqwzLA= -----END CERTIFICATE-----Generated at Thu Mar 12 12:03:43 2026 by rpki-client