$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d1a87a0-f55f-3691-b6c9-18f95beffa4e.roa File: 0d1a87a0-f55f-3691-b6c9-18f95beffa4e.roa (raw, json) Hash identifier: IfsV9m6fFROLklDAc2Ka2veQVIdkIprXwS6rIc88awo= Subject key identifier: 33:C0:7A:3E:77:E7:D0:69:25:E5:67:29:0E:F7:D2:77:F1:65:D4:76 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A698B359210CD806BB397AF00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d1a87a0-f55f-3691-b6c9-18f95beffa4e.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 18779 IP address blocks: 172.120.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:35:92:10:cd:80:6b:b3:97:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=24e393b1-c7b3-43ae-8740-9fa47cea9d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:38:ee:51:da:d8:a0:a3:7c:71:4a:d7:8d: df:9a:4e:60:b1:a4:ae:75:ed:bd:c6:79:1d:f5:b2: 5f:70:36:25:1e:96:d9:7f:b3:d0:11:e0:2c:19:c1: 38:0a:af:0f:32:cb:15:47:99:10:f8:fd:4c:ac:60: 34:3f:57:2d:66:9b:b7:9f:d0:53:57:a2:1b:1d:0a: 62:74:d7:d1:6c:86:85:4f:f5:65:a4:20:97:3a:53: 73:91:eb:42:c0:7c:77:8e:14:b8:da:5b:62:bf:ae: 0a:fc:3a:d0:f9:91:9b:3e:91:e1:15:ea:cd:46:c8: 39:64:de:10:6e:69:72:de:88:eb:41:b0:d3:eb:dd: 29:a6:2f:f7:54:57:89:3d:53:d3:04:b4:e5:b9:80: ef:08:d5:1a:fa:ac:a9:85:d2:eb:aa:31:83:e7:0d: 9d:82:78:30:2c:61:b7:42:da:82:d6:a5:fe:5d:a1: 97:98:96:27:63:72:65:7d:ae:fb:98:62:be:0e:72: b0:ea:b3:73:fb:f9:dd:d0:6e:68:a5:b8:45:1d:17: 89:20:37:d8:72:bc:cd:7d:9c:9c:3c:b4:16:34:c6: cd:26:fc:97:bf:0e:26:d9:34:56:47:18:a3:86:41: 1c:6a:46:53:d5:72:9f:6c:79:ac:b0:9c:97:1a:9c: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C0:7A:3E:77:E7:D0:69:25:E5:67:29:0E:F7:D2:77:F1:65:D4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d1a87a0-f55f-3691-b6c9-18f95beffa4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:06:2b:e8:08:fe:a6:9f:e1:3b:77:d0:53:7c:88:44:3b:05: fe:4d:43:d1:93:65:c0:7b:20:da:45:ac:c2:46:86:11:12:06: b3:15:22:6a:bd:ec:c5:2b:3e:a8:0b:ea:cb:44:ba:62:d4:07: 82:c3:1b:33:ac:e0:9e:bf:ad:45:b4:b2:18:fa:d3:d9:b9:25: f1:e0:d0:56:35:88:b3:b3:35:34:a6:aa:37:e4:c2:7b:db:37: 8a:55:f3:b5:47:51:c2:c5:5e:5b:5b:af:ff:ab:5d:05:b0:f0: bc:ca:aa:7d:2f:f5:cc:fb:4d:57:09:7f:88:a0:f8:aa:9a:d6: 4b:ff:26:ec:85:64:62:72:30:9a:e2:66:02:08:55:8f:8b:7a: 64:6a:b3:e0:21:13:85:f7:02:b4:d3:53:41:b7:5f:25:7e:2f: 0a:d7:2b:e0:1e:47:e7:5b:04:d3:c0:2a:b0:99:af:fa:7a:f6: 47:46:94:4b:ba:98:6b:45:2f:ed:65:39:2d:8c:48:fd:10:72: d7:f0:8e:14:fe:f4:07:43:ae:62:79:ab:01:aa:1a:15:cc:63: 77:95:06:f8:4b:f9:a3:d0:3e:e3:fb:66:e2:a9:b0:45:a9:36: a4:3f:cc:f5:45:f1:53:c4:e4:98:e7:24:af:4d:f6:03:14:dd: ad:3c:5c:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppizWSEM2Aa7OXrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk MjRlMzkzYjEtYzdiMy00M2FlLTg3NDAtOWZhNDdjZWE5ZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiI47lHa2KCjfHFK143fmk5gsaSude29xnkd 9bJfcDYlHpbZf7PQEeAsGcE4Cq8PMssVR5kQ+P1MrGA0P1ctZpu3n9BTV6IbHQpi dNfRbIaFT/VlpCCXOlNzketCwHx3jhS42ltiv64K/DrQ+ZGbPpHhFerNRsg5ZN4Q bmly3ojrQbDT690ppi/3VFeJPVPTBLTluYDvCNUa+qyphdLrqjGD5w2dgngwLGG3 QtqC1qX+XaGXmJYnY3Jlfa77mGK+DnKw6rNz+/nd0G5opbhFHReJIDfYcrzNfZyc PLQWNMbNJvyXvw4m2TRWRxijhkEcakZT1XKfbHmssJyXGpzXsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPAej5359BpJeVnKQ730nfxZdR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGQxYTg3YTAtZjU1Zi0z NjkxLWI2YzktMThmOTViZWZmYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkGK+gI/qaf4Tt30FN8iEQ7Bf5NQ9GTZcB7INpFrMJGhhESBrMVImq9 7MUrPqgL6stEumLUB4LDGzOs4J6/rUW0shj609m5JfHg0FY1iLOzNTSmqjfkwnvb N4pV87VHUcLFXltbr/+rXQWw8LzKqn0v9cz7TVcJf4ig+Kqa1kv/JuyFZGJyMJri ZgIIVY+LemRqs+AhE4X3ArTTU0G3XyV+LwrXK+AeR+dbBNPAKrCZr/p69kdGlEu6 mGtFL+1lOS2MSP0QctfwjhT+9AdDrmJ5qwGqGhXMY3eVBvhL+aPQPuP7ZuKpsEWp NqQ/zPVF8VPE5JjnJK9N9gMU3a08XNk= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:18 2025 by rpki-client