$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0faa607e-51eb-3479-9f26-4331ef5dddb8.roa File: 0faa607e-51eb-3479-9f26-4331ef5dddb8.roa (raw, json) Hash identifier: UmHBLHlgco6kdtcP4S8mCwdn2JeZx+5dmR+Q/60pkCI= Subject key identifier: 04:BC:77:10:C5:D2:66:87:43:23:E3:1A:D9:C2:07:95:B5:83:89:34 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A84976D5FC29E0F60A9145300 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0faa607e-51eb-3479-9f26-4331ef5dddb8.roa Signing time: Mon 14 Jul 2025 17:32:34 +0000 ROA not before: Mon 14 Jul 2025 17:32:34 +0000 ROA not after: Sun 12 Oct 2025 17:32:34 +0000 asID: 44559 IP address blocks: 172.120.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:97:6d:5f:c2:9e:0f:60:a9:14:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 14 17:32:34 2025 GMT Not After : Oct 12 17:32:34 2025 GMT Subject: CN=c70ba516-df69-48c3-bee1-088e5632852b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:74:d8:49:53:3e:e6:0f:70:e7:02:a8:71: a7:fb:40:f4:1c:69:26:c8:ec:27:ef:78:6f:e8:68: 88:38:70:e6:d1:d2:2b:37:6f:b5:84:72:ae:56:f8: 7f:f5:31:69:79:44:e9:55:ea:c6:72:b7:50:c5:ac: be:57:89:d7:41:63:64:b2:1b:be:1c:2c:39:36:5d: 64:df:56:42:15:5b:8e:68:dc:ad:7a:99:da:fb:fa: 01:72:43:68:73:19:ca:3a:21:f3:85:17:d5:10:f3: aa:3e:75:16:80:e4:da:fb:a6:5a:e6:54:a1:1c:91: b6:a1:b4:1d:e3:a4:d4:b0:9d:11:e7:c7:01:98:c1: db:98:5b:72:ef:29:f0:fb:40:ca:e2:69:cb:78:5d: 39:32:36:6b:69:6a:b7:87:00:a3:3a:85:b6:e2:52: c9:63:6b:66:b3:ad:27:27:9e:5c:1d:0e:a9:87:15: c4:a3:02:1c:35:82:d3:28:9d:0b:81:33:10:0e:32: 43:aa:78:b7:2f:01:59:0d:fd:ce:35:97:ba:71:4c: 8e:47:a8:38:45:b1:3d:3b:5d:e7:a9:8f:45:bd:7e: 97:b3:4f:60:e1:07:13:63:54:50:0c:ad:c3:f3:89: d8:5f:19:ee:b4:2b:cb:4f:a0:bd:75:0e:85:1e:a4: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BC:77:10:C5:D2:66:87:43:23:E3:1A:D9:C2:07:95:B5:83:89:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0faa607e-51eb-3479-9f26-4331ef5dddb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:dc:6b:6f:f0:b3:d3:91:03:a7:47:c1:28:78:75:73:48:89: f7:3c:44:e5:df:dd:bf:2a:1b:ec:0f:0f:46:f0:4d:a5:61:d1: 05:60:64:4d:b5:08:14:f3:ca:56:b6:41:96:92:0f:ac:e1:b5: 7d:cf:64:50:07:cc:f6:41:04:57:5c:0b:82:a8:19:dd:7d:66: f3:10:8b:21:8d:95:bc:bc:9b:9f:95:3f:2b:fa:a8:2f:14:5b: 80:5e:e5:85:2e:87:dc:76:b9:88:7b:75:06:58:b8:97:f1:2f: a7:70:19:c0:30:f1:bc:84:51:cd:d5:53:33:a5:ba:72:c4:d1: 71:e3:53:e6:ba:58:61:51:a9:e7:fe:1f:21:72:13:51:c1:c0: 89:84:b0:25:7c:dd:50:7d:0e:3a:bc:83:ca:1b:a4:b4:41:44: cc:da:bf:73:f9:9c:e0:4d:27:4e:06:5b:c0:bd:94:03:c5:ad: 22:bf:1e:ef:2d:5c:36:68:88:31:eb:bc:59:91:f6:87:45:ed: cd:88:1f:dc:2d:0c:5e:06:20:e9:04:35:5f:14:e1:04:4f:05: e6:c5:13:10:70:8b:d7:05:c2:cf:de:e9:7f:cc:18:f3:bd:57: 08:f2:be:1d:d3:07:39:6b:bf:9f:8f:0e:d9:9b:c3:5f:eb:ff: e5:d9:56:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEl21fwp4PYKkUUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxNDE3MzIzNFoXDTI1MTAxMjE3MzIzNFowLzEtMCsGA1UEAxMk YzcwYmE1MTYtZGY2OS00OGMzLWJlZTEtMDg4ZTU2MzI4NTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6J02ElTPuYPcOcCqHGn+0D0HGkmyOwn73hv 6GiIOHDm0dIrN2+1hHKuVvh/9TFpeUTpVerGcrdQxay+V4nXQWNkshu+HCw5Nl1k 31ZCFVuOaNytepna+/oBckNocxnKOiHzhRfVEPOqPnUWgOTa+6Za5lShHJG2obQd 46TUsJ0R58cBmMHbmFty7ynw+0DK4mnLeF05MjZraWq3hwCjOoW24lLJY2tms60n J55cHQ6phxXEowIcNYLTKJ0LgTMQDjJDqni3LwFZDf3ONZe6cUyOR6g4RbE9O13n qY9FvX6Xs09g4QcTY1RQDK3D84nYXxnutCvLT6C9dQ6FHqSrCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS8dxDF0maHQyPjGtnCB5W1g4k0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGZhYTYwN2UtNTFlYi0z NDc5LTlmMjYtNDMzMWVmNWRkZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvca2/ws9ORA6dHwSh4dXNIifc8ROXf3b8qG+wPD0bwTaVh0QVgZE21 CBTzyla2QZaSD6zhtX3PZFAHzPZBBFdcC4KoGd19ZvMQiyGNlby8m5+VPyv6qC8U W4Be5YUuh9x2uYh7dQZYuJfxL6dwGcAw8byEUc3VUzOlunLE0XHjU+a6WGFRqef+ HyFyE1HBwImEsCV83VB9Djq8g8obpLRBRMzav3P5nOBNJ04GW8C9lAPFrSK/Hu8t XDZoiDHrvFmR9odF7c2IH9wtDF4GIOkENV8U4QRPBebFExBwi9cFws/e6X/MGPO9 Vwjyvh3TBzlrv5+PDtmbw1/r/+XZVlQ= -----END CERTIFICATE-----Generated at Mon Jul 21 08:38:49 2025 by rpki-client