$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42b3f3a5-18bf-3695-bde0-4e2c7e424a88.roa File: 42b3f3a5-18bf-3695-bde0-4e2c7e424a88.roa (raw, json) Hash identifier: 7mbAJl605AVU7OVdIb1DjSqO/mq43TSqxLS+guzxZHw= Subject key identifier: 5D:79:6D:21:78:4A:66:B3:9F:2D:71:57:9A:B2:92:8A:F4:1F:6D:0B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584CAA272BB98E4AE33DA3712980 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42b3f3a5-18bf-3695-bde0-4e2c7e424a88.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 5650 IP address blocks: 172.120.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:2b:b9:8e:4a:e3:3d:a3:71:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=3fcbcbd2-33d0-4a72-bbfc-3f915a6047ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b0:b0:5a:20:ab:8f:14:83:e8:a0:5b:60:a8: f1:ce:82:22:95:0b:c2:1c:76:ed:ae:b9:09:d9:62: e4:03:ed:38:75:4f:8e:29:37:f0:69:d9:5d:5c:53: b0:57:cb:3f:53:bd:f3:2c:7e:7b:c4:8a:28:bc:2e: 32:e4:0d:0d:a9:aa:d3:7c:31:95:13:1b:22:45:cc: f9:be:c9:13:3d:90:a0:c9:58:c3:02:f9:75:3d:d7: c0:d8:a9:8f:af:8f:bb:49:80:80:47:f2:ab:12:ee: 7d:2d:f1:f4:6b:91:da:61:cc:2a:15:c4:61:4e:88: c1:f7:44:9d:2d:6c:77:27:e9:9b:ec:91:a5:40:64: 55:1a:8e:2d:10:54:c3:fa:f9:ca:a5:a9:1f:4d:2d: e9:97:00:65:e0:33:fe:5a:ce:3e:b3:4b:a5:75:f8: 4a:f5:8f:49:65:3d:9d:7d:0d:57:a1:2b:c6:8a:e2: f6:85:32:ed:83:56:49:9b:f8:d5:96:94:68:8f:af: 14:a9:4d:0d:f2:5f:66:be:39:17:9e:b5:3c:41:bc: a1:70:20:76:03:7d:a8:67:25:38:92:e1:f8:88:31: be:9a:a4:aa:99:f5:4d:6b:0d:7f:b3:fe:c2:c4:63: 9b:b1:c9:f0:71:97:dd:02:b0:9e:65:97:c1:88:79: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:79:6D:21:78:4A:66:B3:9F:2D:71:57:9A:B2:92:8A:F4:1F:6D:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42b3f3a5-18bf-3695-bde0-4e2c7e424a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0c:99:22:d3:ea:7e:ad:41:8b:8b:0b:54:69:29:fe:5a:06: 59:47:b7:5c:6e:82:ad:8c:9f:95:9d:c7:74:bb:f6:58:f2:89: d5:f3:6d:45:27:eb:87:af:67:7e:ec:89:f6:6c:c9:c5:e4:0d: 89:91:c7:e6:8f:f5:36:51:b8:df:40:a5:c5:46:f2:c2:12:d4: fd:6d:ad:71:49:98:9d:71:d1:0b:2f:16:fd:10:f2:31:bc:94: 98:55:f5:2f:e9:25:2a:c2:3b:b3:ca:f3:27:e9:0f:27:68:5f: 6f:bc:31:70:78:34:9a:c3:50:e5:4f:27:ef:08:f3:78:cf:fb: b3:96:f5:92:53:20:aa:6f:a4:d7:21:76:6f:ca:f3:b9:76:7a: 74:fa:d1:eb:8a:0b:0f:89:4e:5e:0e:db:ed:cb:e2:99:90:29: f2:32:2a:5d:3c:e1:8b:88:7e:ab:0c:22:1f:ac:51:1d:e9:02: fb:f9:ae:9f:73:a1:6f:7b:53:2e:c2:24:83:77:a1:48:61:ef: 2c:bb:65:d0:6a:c7:25:2b:0f:7f:b0:4a:52:a6:f0:f0:00:ab: 65:d4:6a:9f:f9:06:35:95:e2:e5:4e:95:4a:59:0d:a2:f2:92: 39:ec:b0:23:ad:e6:55:2d:9f:30:99:61:85:90:61:3d:51:08: 7a:93:52:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJyu5jkrjPaNxKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk M2ZjYmNiZDItMzNkMC00YTcyLWJiZmMtM2Y5MTVhNjA0N2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrCwWiCrjxSD6KBbYKjxzoIilQvCHHbtrrkJ 2WLkA+04dU+OKTfwadldXFOwV8s/U73zLH57xIoovC4y5A0NqarTfDGVExsiRcz5 vskTPZCgyVjDAvl1PdfA2KmPr4+7SYCAR/KrEu59LfH0a5HaYcwqFcRhTojB90Sd LWx3J+mb7JGlQGRVGo4tEFTD+vnKpakfTS3plwBl4DP+Ws4+s0uldfhK9Y9JZT2d fQ1XoSvGiuL2hTLtg1ZJm/jVlpRoj68UqU0N8l9mvjkXnrU8QbyhcCB2A32oZyU4 kuH4iDG+mqSqmfVNaw1/s/7CxGObscnwcZfdArCeZZfBiHnQWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF15bSF4Smazny1xV5qykor0H20LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDJiM2YzYTUtMThiZi0z Njk1LWJkZTAtNGUyYzdlNDI0YTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIMmSLT6n6tQYuLC1RpKf5aBllHt1xugq2Mn5Wdx3S79ljyidXzbUUn 64evZ37sifZsycXkDYmRx+aP9TZRuN9ApcVG8sIS1P1trXFJmJ1x0QsvFv0Q8jG8 lJhV9S/pJSrCO7PK8yfpDydoX2+8MXB4NJrDUOVPJ+8I83jP+7OW9ZJTIKpvpNch dm/K87l2enT60euKCw+JTl4O2+3L4pmQKfIyKl084YuIfqsMIh+sUR3pAvv5rp9z oW97Uy7CJIN3oUhh7yy7ZdBqxyUrD3+wSlKm8PAAq2XUap/5BjWV4uVOlUpZDaLy kjnssCOt5lUtnzCZYYWQYT1RCHqTUtk= -----END CERTIFICATE-----Generated at Sun Mar 1 19:00:59 2026 by rpki-client