$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fcf953c-f3ee-3527-9770-b10cc6f5a9a3.roa File: 3fcf953c-f3ee-3527-9770-b10cc6f5a9a3.roa (raw, json) Hash identifier: yO7pmMfHF843IOvS/hpHkIJYgBT/ViUVNmrGHpmbbB8= Subject key identifier: B2:38:ED:0B:A9:34:9D:F7:B0:F8:E4:AB:3C:46:A4:C1:64:88:26:95 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D7A052751232579AC80EF5398 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fcf953c-f3ee-3527-9770-b10cc6f5a9a3.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 214238 IP address blocks: 172.120.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:27:51:23:25:79:ac:80:ef:53:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=2a72b379-d56b-4e9f-9b98-afdca91690ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1d:06:ef:78:e9:f6:c9:24:cf:19:82:1e:dc: 90:03:eb:11:0e:01:77:0b:1b:d7:36:3f:e4:59:0e: 4b:30:b9:eb:58:fd:c2:e4:f2:8f:f4:7c:e7:28:a7: b1:a4:4f:e2:17:6f:56:84:36:9e:7b:a8:10:ca:9a: 1c:e4:28:66:f5:fe:6c:e6:3c:12:5d:14:ce:e7:db: 06:26:c9:e2:f5:16:36:68:1c:53:6f:b7:13:2c:ed: 43:ab:28:77:c7:56:84:60:11:cc:b7:02:1d:cd:ab: 9e:69:fa:0f:48:28:ba:ad:a6:46:04:1e:70:36:ab: aa:f8:97:62:a7:9a:a9:00:bc:68:b4:6a:d3:21:6c: ed:5a:ce:16:3c:5b:f7:bc:0b:0f:39:31:a6:63:7b: 41:e5:2c:d9:8c:4d:a4:77:23:2b:88:72:15:01:af: a3:a5:1d:c3:ce:d9:6d:ba:b6:04:e5:5c:3f:71:38: 25:d9:47:79:4c:07:a8:a9:6e:1c:74:21:83:13:38: f5:51:d1:c6:f3:5f:81:5f:1a:c4:2c:bc:9c:1f:81: ae:73:cc:de:be:a0:67:11:a9:f1:a2:94:0c:1e:f5: 4e:c6:7b:03:92:ec:3a:d2:0e:ed:92:27:3a:31:2d: c2:bf:6d:1b:1f:79:be:8f:9c:b8:24:d6:8c:fb:47: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:38:ED:0B:A9:34:9D:F7:B0:F8:E4:AB:3C:46:A4:C1:64:88:26:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3fcf953c-f3ee-3527-9770-b10cc6f5a9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8e:38:a2:3e:1c:fa:3b:be:a1:e8:61:2c:f8:a6:d5:b9:bb: a7:4b:ec:50:8b:64:53:30:eb:46:7e:8c:a9:75:ef:1c:12:91: d6:1f:28:e1:84:a0:fe:94:a3:4d:d4:e2:71:bf:8e:94:8a:47: 70:f8:66:57:39:5f:26:ce:f4:42:cf:f2:ba:44:1f:39:9b:56: e6:84:e1:8a:80:f7:55:88:39:81:c3:c9:8d:52:b3:8d:c3:5e: 3b:61:8a:5d:ae:3b:d9:d3:67:22:72:8c:0d:2f:24:b8:a7:27: 99:65:26:40:42:4a:aa:35:fc:83:8d:08:5e:ad:23:54:19:18: d1:9d:08:97:8c:f9:06:d9:52:eb:2d:30:9a:d6:95:54:4c:00: 1e:3a:23:a7:46:8d:76:7b:96:fb:61:e1:a3:b5:e9:7f:7c:76: bc:5a:aa:96:e8:ba:85:e3:6c:ba:8f:da:8e:0d:e3:e6:fd:b3: 49:a3:7f:c5:f1:e4:35:3a:29:c4:ff:7e:67:26:46:ff:ef:8c: 31:95:d1:03:4c:28:6a:4f:4f:20:fb:a9:70:6c:d1:c2:d0:86: 67:9a:6f:9c:9a:d0:85:35:e8:10:58:d5:f8:b6:ba:84:e7:59: 0e:1a:e1:eb:df:2c:ff:26:58:fb:59:cc:49:f3:a0:b8:18:41: 15:35:84:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSdRIyV5rIDvU5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk MmE3MmIzNzktZDU2Yi00ZTlmLTliOTgtYWZkY2E5MTY5MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh0G73jp9skkzxmCHtyQA+sRDgF3CxvXNj/k WQ5LMLnrWP3C5PKP9HznKKexpE/iF29WhDaee6gQypoc5Chm9f5s5jwSXRTO59sG Jsni9RY2aBxTb7cTLO1Dqyh3x1aEYBHMtwIdzaueafoPSCi6raZGBB5wNquq+Jdi p5qpALxotGrTIWztWs4WPFv3vAsPOTGmY3tB5SzZjE2kdyMriHIVAa+jpR3Dztlt urYE5Vw/cTgl2Ud5TAeoqW4cdCGDEzj1UdHG81+BXxrELLycH4Guc8zevqBnEanx opQMHvVOxnsDkuw60g7tkic6MS3Cv20bH3m+j5y4JNaM+0cvGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI47QupNJ33sPjkqzxGpMFkiCaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2ZjZjk1M2MtZjNlZS0z NTI3LTk3NzAtYjEwY2M2ZjVhOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKOOKI+HPo7vqHoYSz4ptW5u6dL7FCLZFMw60Z+jKl17xwSkdYfKOGE oP6Uo03U4nG/jpSKR3D4Zlc5XybO9ELP8rpEHzmbVuaE4YqA91WIOYHDyY1Ss43D Xjthil2uO9nTZyJyjA0vJLinJ5llJkBCSqo1/IONCF6tI1QZGNGdCJeM+QbZUust MJrWlVRMAB46I6dGjXZ7lvth4aO16X98drxaqpbouoXjbLqP2o4N4+b9s0mjf8Xx 5DU6KcT/fmcmRv/vjDGV0QNMKGpPTyD7qXBs0cLQhmeab5ya0IU16BBY1fi2uoTn WQ4a4evfLP8mWPtZzEnzoLgYQRU1hCI= -----END CERTIFICATE-----Generated at Fri Apr 17 22:32:59 2026 by rpki-client