$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b7f80dd-2ef0-3e36-8ca3-878fd6436eda.roa File: 1b7f80dd-2ef0-3e36-8ca3-878fd6436eda.roa (raw, json) Hash identifier: RXU6nJisk+vWEpG2hVTNGozFlr5aaYRpiXMAfu343QU= Subject key identifier: 97:1D:D9:5F:6A:0A:95:DB:C9:58:39:6E:34:58:93:16:80:50:7E:E0 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B758CA39223E64AACA22F9E80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b7f80dd-2ef0-3e36-8ca3-878fd6436eda.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 62240 IP address blocks: 172.120.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:a3:92:23:e6:4a:ac:a2:2f:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=48c71b3f-b82b-49fa-85bc-9176a4f4b10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:4c:17:1f:11:0d:be:c8:a8:32:b7:34:75: 00:31:0c:1d:af:39:d1:d7:91:24:90:b9:f8:20:d5: 83:f7:b6:b3:82:85:49:cd:ef:54:e0:c1:4c:83:bd: 17:f9:c4:14:53:a9:41:49:b5:03:28:d6:60:f6:d1: 6c:a2:51:c5:19:33:ea:ed:b9:27:cf:4e:20:28:23: 08:a9:5f:10:5b:db:50:36:c3:f5:d4:fc:b9:eb:73: a0:3b:64:f2:0d:f4:65:ea:c4:7d:ae:46:53:9e:b2: 62:33:75:3a:f8:59:38:c3:58:b7:e5:f6:5d:85:6a: 71:df:5b:42:eb:03:e9:7d:ff:c0:4f:8e:2c:1d:3a: 1c:37:17:06:67:82:ff:88:83:34:83:cd:4d:6d:be: 36:55:b8:71:68:73:bb:e6:a3:5e:7d:c6:bc:61:30: 3e:c5:b9:ab:38:0a:f4:0b:4b:c6:24:17:14:ed:ed: 46:df:92:ac:cb:8b:c0:05:de:8b:6f:c6:5b:8d:31: a6:f1:01:77:fb:05:57:7a:64:8d:b1:65:02:2d:2d: 0f:62:ad:c4:f7:7a:d1:fd:05:de:b6:b5:f0:93:f2: 58:70:b0:2b:98:79:3f:83:1f:0e:f7:f3:82:d9:43: 18:c1:ac:12:f0:88:82:3f:9e:ba:54:a3:8c:37:1b: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1D:D9:5F:6A:0A:95:DB:C9:58:39:6E:34:58:93:16:80:50:7E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b7f80dd-2ef0-3e36-8ca3-878fd6436eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:8a:63:45:92:17:02:e9:38:ca:65:36:81:22:d2:e9:f2:bb: 49:9b:ab:34:72:14:c5:a4:03:fc:41:50:26:cb:41:b6:b4:56: 9e:fe:4a:2e:3a:b3:45:0c:45:e3:81:62:66:25:b2:73:e9:76: f5:33:0c:01:94:07:1f:92:2f:cb:0b:1c:6c:bb:e6:01:04:13: d2:f4:4f:29:48:10:43:e3:c1:6a:f6:0a:8b:50:dc:55:d2:80: c7:1d:5a:b6:83:80:2a:46:11:af:fa:a5:8e:3b:04:ef:f6:10: 79:f5:07:aa:49:40:6a:73:95:ec:46:aa:21:9a:6d:be:6f:ac: 97:91:5a:3e:a1:33:49:e8:df:d8:03:25:4a:90:bd:19:e9:0d: 2f:cd:a5:b0:9c:6b:88:44:9b:29:53:08:04:fc:26:ae:75:a5: 62:d3:e1:d1:e4:06:e2:cb:f9:d5:14:83:cc:47:a4:b6:40:5a: a2:7f:83:d2:cc:73:2e:7f:e7:f4:c8:0c:43:ea:2f:57:39:97: 95:71:8e:cb:74:26:c5:9c:63:80:1e:dc:2a:e4:1b:e9:14:3e: 32:1c:0e:93:9f:96:18:0b:4d:db:34:14:08:48:5a:49:2b:db: 60:22:5c:20:78:19:3a:70:72:39:99:02:c6:35:08:0b:82:84: 2d:bc:01:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jKOSI+ZKrKIvnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk NDhjNzFiM2YtYjgyYi00OWZhLTg1YmMtOTE3NmE0ZjRiMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF1MFx8RDb7IqDK3NHUAMQwdrznR15EkkLn4 INWD97azgoVJze9U4MFMg70X+cQUU6lBSbUDKNZg9tFsolHFGTPq7bknz04gKCMI qV8QW9tQNsP11Py563OgO2TyDfRl6sR9rkZTnrJiM3U6+Fk4w1i35fZdhWpx31tC 6wPpff/AT44sHTocNxcGZ4L/iIM0g81Nbb42VbhxaHO75qNefca8YTA+xbmrOAr0 C0vGJBcU7e1G35Ksy4vABd6Lb8ZbjTGm8QF3+wVXemSNsWUCLS0PYq3E93rR/QXe trXwk/JYcLArmHk/gx8O9/OC2UMYwawS8IiCP566VKOMNxvg/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcd2V9qCpXbyVg5bjRYkxaAUH7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWI3ZjgwZGQtMmVmMC0z ZTM2LThjYTMtODc4ZmQ2NDM2ZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqKY0WSFwLpOMplNoEi0unyu0mbqzRyFMWkA/xBUCbLQba0Vp7+Si46 s0UMReOBYmYlsnPpdvUzDAGUBx+SL8sLHGy75gEEE9L0TylIEEPjwWr2CotQ3FXS gMcdWraDgCpGEa/6pY47BO/2EHn1B6pJQGpzlexGqiGabb5vrJeRWj6hM0no39gD JUqQvRnpDS/NpbCca4hEmylTCAT8Jq51pWLT4dHkBuLL+dUUg8xHpLZAWqJ/g9LM cy5/5/TIDEPqL1c5l5Vxjst0JsWcY4Ae3CrkG+kUPjIcDpOflhgLTds0FAhIWkkr 22AiXCB4GTpwcjmZAsY1CAuChC28AWE= -----END CERTIFICATE-----Generated at Sat Oct 11 11:17:49 2025 by rpki-client