$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa File: da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa (raw, json) Hash identifier: /UMg9e0B5JDD6HeB1yUOkEAiSQw/h9vr07+LexSoHIo= Subject key identifier: 96:48:C6:1E:11:0A:05:63:39:7F:29:BA:C0:0D:77:8C:B7:FC:88:FD Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D7A054EAB8C41DEEF457267C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 214238 IP address blocks: 172.120.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:4e:ab:8c:41:de:ef:45:72:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=bd03376d-8000-4305-b12d-eab7fe27a457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:60:62:e5:e1:ac:04:85:be:40:bd:df:3e: 4b:98:f3:18:15:5a:16:a3:47:91:29:42:d4:0c:96: b7:70:92:0b:be:89:ed:63:df:de:52:94:08:4b:a6: 08:59:a2:1f:c8:10:9c:33:31:3a:af:c9:b3:53:04: 89:f0:46:2b:03:6f:ac:3c:ec:89:40:82:75:0c:19: 92:03:ab:2e:2c:9c:26:eb:da:8e:f8:18:9f:dc:7e: e0:64:88:98:65:b5:24:43:d9:57:68:3d:5d:89:88: 11:59:76:f6:00:45:e5:17:78:d9:bf:b7:18:bf:ad: 2f:01:3f:0c:1a:b4:b3:48:ee:67:46:28:1c:8f:c4: b3:95:1a:4c:02:6f:2f:7b:45:02:7f:ca:67:93:c8: 59:d2:a0:43:64:8e:09:8c:d1:0c:92:58:11:47:16: 27:80:9b:3c:b3:a1:82:2e:f8:69:5f:1a:b3:65:dd: 49:9e:94:39:3c:b1:99:ac:22:a2:44:a9:13:19:9c: 21:35:db:59:cf:9f:25:63:0a:84:63:75:38:4e:65: 2f:3e:05:06:42:17:d4:71:7a:00:91:eb:41:fa:51: bb:63:d5:ed:b8:9d:69:66:36:ce:02:28:ce:c1:b2: b7:eb:95:69:e9:0a:5f:ef:fc:89:c0:c5:78:b6:a9: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:48:C6:1E:11:0A:05:63:39:7F:29:BA:C0:0D:77:8C:B7:FC:88:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d1:71:a0:1f:3d:88:46:6c:ab:41:aa:96:bd:e3:f4:97:a5: 7c:6d:17:ab:77:89:61:bf:da:ad:89:6e:5f:45:1e:fc:b2:ce: 40:e9:fc:49:37:35:b5:35:78:ea:ea:98:27:01:2a:8a:6f:1c: 4a:96:c4:b0:72:06:2f:06:5c:75:6e:b0:7d:92:18:b9:86:d6: 82:2a:c6:7e:ac:25:ef:2a:59:16:36:4a:b9:56:b9:21:5b:90: 18:06:d2:1d:c4:42:d1:0b:28:a3:4c:b1:fc:67:54:6e:12:18: ca:48:c6:92:3f:88:92:4b:b1:a1:a2:a4:24:ca:ad:d2:19:61: f6:47:1d:d2:6c:ef:c7:be:58:87:0e:3c:49:3a:df:b1:6e:19: d0:71:43:da:2b:ed:8b:e2:23:cb:a4:e3:c2:66:f2:7a:09:3c: fc:19:15:87:c0:54:de:ba:5c:45:7f:f1:1a:cc:19:e8:27:9b: a4:72:aa:ce:c3:29:b6:58:f5:ad:7c:6c:61:03:a6:1d:1b:26: 87:c7:20:48:e7:4e:14:a1:68:d8:42:62:5b:fb:ea:cd:a9:2a: a6:82:12:1a:d6:d7:19:d4:a2:11:11:2e:fa:1f:a5:64:1a:6e: 6e:9c:e9:3f:38:2b:60:36:29:06:95:39:cc:d2:c6:eb:4f:02: 33:34:da:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BU6rjEHe70VyZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YmQwMzM3NmQtODAwMC00MzA1LWIxMmQtZWFiN2ZlMjdhNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7RgYuXhrASFvkC93z5LmPMYFVoWo0eRKULU DJa3cJILvontY9/eUpQIS6YIWaIfyBCcMzE6r8mzUwSJ8EYrA2+sPOyJQIJ1DBmS A6suLJwm69qO+Bif3H7gZIiYZbUkQ9lXaD1diYgRWXb2AEXlF3jZv7cYv60vAT8M GrSzSO5nRigcj8SzlRpMAm8ve0UCf8pnk8hZ0qBDZI4JjNEMklgRRxYngJs8s6GC LvhpXxqzZd1JnpQ5PLGZrCKiRKkTGZwhNdtZz58lYwqEY3U4TmUvPgUGQhfUcXoA ketB+lG7Y9XtuJ1pZjbOAijOwbK365Vp6Qpf7/yJwMV4tqnGXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZIxh4RCgVjOX8pusANd4y3/Ij9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGExY2FlNmMtMWU5NS0z NWIwLTlhMDAtZDJjNWE0NmYxNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3RcaAfPYhGbKtBqpa94/SXpXxtF6t3iWG/2q2Jbl9FHvyyzkDp/Ek3 NbU1eOrqmCcBKopvHEqWxLByBi8GXHVusH2SGLmG1oIqxn6sJe8qWRY2SrlWuSFb kBgG0h3EQtELKKNMsfxnVG4SGMpIxpI/iJJLsaGipCTKrdIZYfZHHdJs78e+WIcO PEk637FuGdBxQ9or7YviI8uk48Jm8noJPPwZFYfAVN66XEV/8RrMGegnm6Ryqs7D KbZY9a18bGEDph0bJofHIEjnThShaNhCYlv76s2pKqaCEhrW1xnUohERLvofpWQa bm6c6T84K2A2KQaVOczSxutPAjM02t8= -----END CERTIFICATE-----Generated at Fri Apr 17 18:46:43 2026 by rpki-client