$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ac90137-f932-3a22-9b16-9d7ab19d7918.roa File: 1ac90137-f932-3a22-9b16-9d7ab19d7918.roa (raw, json) Hash identifier: zLuEZbVc6xHXkg0pysLUBXBHTW7d0X+dpJnrmgfY2rU= Subject key identifier: 7A:87:E4:4D:8C:0A:E0:4E:A3:A8:E0:12:0E:42:68:2B:07:72:A6:15 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A8494F0C6A3E408AE8F6EDE00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ac90137-f932-3a22-9b16-9d7ab19d7918.roa Signing time: Mon 14 Jul 2025 17:27:34 +0000 ROA not before: Mon 14 Jul 2025 17:27:34 +0000 ROA not after: Sun 12 Oct 2025 17:27:34 +0000 asID: 44559 IP address blocks: 172.120.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:94:f0:c6:a3:e4:08:ae:8f:6e:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 14 17:27:34 2025 GMT Not After : Oct 12 17:27:34 2025 GMT Subject: CN=a7c4b11a-3c2b-4e95-8104-8520dad66a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:66:f6:7a:f3:7e:12:ac:39:ea:10:b9:08:a6: 23:b5:f6:87:bb:87:b9:f0:a1:28:7b:57:fd:3d:92: 8e:88:c4:9a:68:62:1c:98:9a:17:5c:8d:70:d6:12: 45:1b:23:12:b1:e6:72:49:78:ea:bf:02:7e:f8:9a: 97:bb:aa:5e:ca:6e:5d:71:39:4f:54:8d:54:5e:c6: a1:fd:f0:e2:1a:7d:ec:08:e3:ac:6c:9a:f2:78:33: 7c:87:ab:68:4c:d5:41:d7:06:ed:ad:3f:82:37:6d: ae:b3:94:eb:ae:e9:81:12:cb:37:38:d9:2a:9b:24: 27:90:0c:38:e1:eb:5d:a3:b6:8e:32:98:03:ca:17: e8:3b:32:6f:e9:9a:d9:0f:81:54:53:93:fe:2e:ee: d2:a2:6e:37:0c:be:de:35:03:8e:b2:26:7c:4d:1b: fc:97:29:b7:b4:6b:c1:33:97:e0:60:57:31:9e:23: f4:18:90:06:b1:41:cb:45:62:b4:a1:90:72:43:9a: ee:b5:71:83:c9:7d:70:33:ee:65:cf:3d:e1:f7:9c: 21:40:8e:59:62:62:ff:04:17:2e:42:ef:00:3c:34: bd:6f:2f:bf:f3:4c:b3:ad:50:dc:82:a1:2d:1f:d2: 6b:d2:70:52:c7:02:0b:36:c4:20:b5:f8:b0:04:32: 16:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:87:E4:4D:8C:0A:E0:4E:A3:A8:E0:12:0E:42:68:2B:07:72:A6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ac90137-f932-3a22-9b16-9d7ab19d7918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d3:a6:b7:42:6f:cf:04:53:4d:a0:34:fc:00:ea:02:52:8d: d9:01:23:3f:fa:c7:99:fe:7a:c2:cf:39:ea:57:b6:de:d6:40: 98:d8:74:1d:9c:d1:a2:80:ed:c7:a4:fa:31:95:b9:08:68:b0: 56:c2:58:da:65:46:59:32:ac:36:71:d9:be:68:0b:80:7f:76: 7e:97:e7:c2:82:aa:12:3a:8d:6d:d7:0e:61:57:d9:6e:05:0b: 7d:ad:b8:ca:94:c7:ed:c5:a0:3b:5a:4c:c3:04:bd:a1:87:d5: 2e:48:4d:f1:36:7e:31:54:99:21:93:a0:4b:8c:d9:18:53:ad: bd:06:2f:93:fc:ac:88:67:31:aa:a3:61:2f:3d:35:ec:30:4f: 84:a0:b7:7e:4e:08:99:de:5e:b2:e8:fb:ab:2b:0f:fb:a4:45: ab:3b:f5:3f:69:ba:40:9f:3f:d7:da:f3:f6:66:a1:58:c7:28: 04:db:74:c3:5e:c0:ac:d3:8f:9e:08:de:3e:1d:d4:cf:01:f4: 4e:86:15:b7:06:fa:bd:8d:c0:8d:07:50:16:12:16:c4:aa:c4: 8b:8d:8f:3a:52:b8:95:d5:14:69:e0:e5:d6:91:d8:65:2f:d2: 0e:6d:61:9d:5b:5e:09:03:51:a2:44:41:99:e7:76:97:90:a0: 61:82:bd:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqElPDGo+QIro9u3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxNDE3MjczNFoXDTI1MTAxMjE3MjczNFowLzEtMCsGA1UEAxMk YTdjNGIxMWEtM2MyYi00ZTk1LTgxMDQtODUyMGRhZDY2YTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12b2evN+Eqw56hC5CKYjtfaHu4e58KEoe1f9 PZKOiMSaaGIcmJoXXI1w1hJFGyMSseZySXjqvwJ++JqXu6peym5dcTlPVI1UXsah /fDiGn3sCOOsbJryeDN8h6toTNVB1wbtrT+CN22us5TrrumBEss3ONkqmyQnkAw4 4etdo7aOMpgDyhfoOzJv6ZrZD4FUU5P+Lu7Som43DL7eNQOOsiZ8TRv8lym3tGvB M5fgYFcxniP0GJAGsUHLRWK0oZByQ5rutXGDyX1wM+5lzz3h95whQI5ZYmL/BBcu Qu8APDS9by+/80yzrVDcgqEtH9Jr0nBSxwILNsQgtfiwBDIWOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqH5E2MCuBOo6jgEg5CaCsHcqYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWFjOTAxMzctZjkzMi0z YTIyLTliMTYtOWQ3YWIxOWQ3OTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/TprdCb88EU02gNPwA6gJSjdkBIz/6x5n+esLPOepXtt7WQJjYdB2c 0aKA7cek+jGVuQhosFbCWNplRlkyrDZx2b5oC4B/dn6X58KCqhI6jW3XDmFX2W4F C32tuMqUx+3FoDtaTMMEvaGH1S5ITfE2fjFUmSGToEuM2RhTrb0GL5P8rIhnMaqj YS89NewwT4Sgt35OCJneXrLo+6srD/ukRas79T9pukCfP9fa8/ZmoVjHKATbdMNe wKzTj54I3j4d1M8B9E6GFbcG+r2NwI0HUBYSFsSqxIuNjzpSuJXVFGng5daR2GUv 0g5tYZ1bXgkDUaJEQZnndpeQoGGCvVA= -----END CERTIFICATE-----Generated at Mon Jul 21 08:37:35 2025 by rpki-client