$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09de452e-3c76-31fb-85a2-5104d5aabd1e.roa File: 09de452e-3c76-31fb-85a2-5104d5aabd1e.roa (raw, json) Hash identifier: rPkvhpsRDZYv3Z+a74fE9sw6bJAsxsUtie2K6pBbD2Y= Subject key identifier: C5:47:3C:43:1C:9A:23:67:98:CB:87:D2:B4:34:A6:08:DF:C7:F3:1C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D7A05271EC1C809DC4C065F80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09de452e-3c76-31fb-85a2-5104d5aabd1e.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 214238 IP address blocks: 172.120.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:27:1e:c1:c8:09:dc:4c:06:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=462ca9db-4ea7-4a88-a5ed-218cd86d4e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:c8:da:5e:d7:09:cf:0e:74:3c:83:d1:8e: 04:b2:57:73:84:c4:3c:cd:83:b1:50:ff:0f:ab:5c: ba:9f:dd:e0:41:b7:a6:7a:43:1e:4b:a7:e3:80:58: 27:66:56:59:14:49:25:6e:d4:70:18:41:2e:cc:0d: fe:75:ed:05:68:48:03:20:93:9a:0d:41:a6:46:ce: ac:4f:af:4b:a6:c5:1e:28:ef:f1:bd:5f:13:c6:9b: 56:37:78:94:fd:4c:21:69:dc:e0:33:d4:28:e7:f2: c9:95:a0:50:5a:20:dc:63:93:d5:b2:bf:fa:9d:1e: c3:f4:52:ef:6a:d9:91:1b:a8:88:ec:2c:4b:16:8c: 08:82:ad:75:00:50:16:2d:a9:66:3f:98:7c:52:50: 78:95:fd:8f:2e:0d:c6:57:6a:8b:72:56:93:c3:b9: 5c:ac:e9:3e:3d:2e:64:43:f3:cc:e1:44:ff:92:85: de:72:b8:59:32:c0:21:a1:f7:79:cc:50:83:f6:f5: 4d:d1:1f:fb:2f:1c:59:7d:e5:33:47:d4:38:6c:4f: 38:71:af:3e:64:f6:4e:f8:66:ea:ad:54:63:9f:9e: c1:51:3f:21:3f:e7:dd:79:bc:8c:85:58:fd:16:a7: 68:16:a1:fe:13:94:f8:31:de:82:f6:06:96:cc:cc: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:47:3C:43:1C:9A:23:67:98:CB:87:D2:B4:34:A6:08:DF:C7:F3:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09de452e-3c76-31fb-85a2-5104d5aabd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6f:c7:97:39:47:02:c7:d9:64:1f:1d:19:e5:7f:39:31:ce: 37:98:75:dc:b5:83:58:5a:60:2b:9b:8a:3f:79:11:2c:50:3d: df:c7:21:59:08:92:00:d2:83:70:41:a8:64:fa:24:f5:b3:51: 5f:76:4b:c3:71:0f:c9:f2:3e:6b:af:a2:dc:2c:18:e8:c1:be: 5a:5f:b7:48:be:e3:6b:28:9c:19:74:94:bd:96:f8:b5:da:4a: 23:4c:31:08:41:39:85:d9:10:b9:dd:d5:2f:24:16:fd:09:cd: b4:18:d7:3b:ac:2e:41:37:88:f1:cf:f0:1e:e0:f7:18:4b:58: 5b:04:6b:a1:16:a8:d3:1f:97:f8:bd:06:7c:7e:52:25:05:e6: 52:b6:7d:f9:59:6c:42:a2:9d:57:c0:c5:04:f2:2b:88:85:0e: a7:75:3b:a2:8c:1b:23:1e:98:7f:0e:ae:6b:5e:fc:57:31:2d: 1a:13:df:42:58:5a:96:18:14:1a:c0:69:d6:c0:2b:de:dd:d0: 8d:d5:b6:c8:3e:1c:a7:72:f0:a3:1b:d9:88:07:d2:77:33:9b: f7:fb:3d:a2:8a:b3:75:14:2d:b9:af:ad:10:26:04:e2:52:c3: b6:c2:41:36:95:65:15:7d:b7:f8:f1:fe:00:c0:70:a5:2e:cf: 3e:34:80:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BScewcgJ3EwGX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NDYyY2E5ZGItNGVhNy00YTg4LWE1ZWQtMjE4Y2Q4NmQ0ZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn/I2l7XCc8OdDyD0Y4EsldzhMQ8zYOxUP8P q1y6n93gQbemekMeS6fjgFgnZlZZFEklbtRwGEEuzA3+de0FaEgDIJOaDUGmRs6s T69LpsUeKO/xvV8TxptWN3iU/UwhadzgM9Qo5/LJlaBQWiDcY5PVsr/6nR7D9FLv atmRG6iI7CxLFowIgq11AFAWLalmP5h8UlB4lf2PLg3GV2qLclaTw7lcrOk+PS5k Q/PM4UT/koXecrhZMsAhofd5zFCD9vVN0R/7LxxZfeUzR9Q4bE84ca8+ZPZO+Gbq rVRjn57BUT8hP+fdebyMhVj9FqdoFqH+E5T4Md6C9gaWzMzfYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVHPEMcmiNnmMuH0rQ0pgjfx/McMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDlkZTQ1MmUtM2M3Ni0z MWZiLTg1YTItNTEwNGQ1YWFiZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRvx5c5RwLH2WQfHRnlfzkxzjeYddy1g1haYCubij95ESxQPd/HIVkI kgDSg3BBqGT6JPWzUV92S8NxD8nyPmuvotwsGOjBvlpft0i+42sonBl0lL2W+LXa SiNMMQhBOYXZELnd1S8kFv0JzbQY1zusLkE3iPHP8B7g9xhLWFsEa6EWqNMfl/i9 Bnx+UiUF5lK2fflZbEKinVfAxQTyK4iFDqd1O6KMGyMemH8Ormte/FcxLRoT30JY WpYYFBrAadbAK97d0I3Vtsg+HKdy8KMb2YgH0nczm/f7PaKKs3UULbmvrRAmBOJS w7bCQTaVZRV9t/jx/gDAcKUuzz40gPU= -----END CERTIFICATE-----Generated at Sat Apr 18 00:05:10 2026 by rpki-client