$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2085c6f8-633f-3c59-a73f-c4624fc22745.roa File: 2085c6f8-633f-3c59-a73f-c4624fc22745.roa (raw, json) Hash identifier: SmmBrZsil3havQvtf5SsmG3wqodUrC4T0HKC1JpSz6A= Subject key identifier: 45:C2:3E:48:37:24:C5:1B:81:51:70:3B:6B:89:91:FB:C0:D8:90:8C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A85307F835A0CC725B02BB810 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2085c6f8-633f-3c59-a73f-c4624fc22745.roa Signing time: Mon 14 Jul 2025 22:40:59 +0000 ROA not before: Mon 14 Jul 2025 22:40:59 +0000 ROA not after: Sun 12 Oct 2025 22:40:59 +0000 asID: 44559 IP address blocks: 172.120.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:30:7f:83:5a:0c:c7:25:b0:2b:b8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 14 22:40:59 2025 GMT Not After : Oct 12 22:40:59 2025 GMT Subject: CN=ef975109-a64a-449b-92e8-97ba6db76238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:04:e5:8a:1a:e1:26:25:f1:2d:83:05:8c:f0: 97:11:23:f9:8f:81:1e:04:92:0a:bf:ca:f1:39:8a: a3:d4:b0:58:9e:c3:6d:e9:82:40:e0:58:e0:51:8d: be:88:7f:33:5c:18:c0:10:0b:f7:a9:30:1b:9a:d9: 0f:9a:2e:07:82:e8:51:03:fc:94:93:8d:2a:ab:16: 2d:6b:0b:52:2a:da:e1:38:ac:6d:00:33:29:d0:ae: af:35:96:2e:a3:6a:be:39:8c:2a:bd:d3:eb:3d:17: d8:a1:bb:bc:8b:64:ef:03:a1:4b:26:e8:38:4d:79: 1e:25:76:26:43:6a:91:5b:4f:49:9c:4b:be:a5:27: b6:04:83:87:44:ca:c6:87:a1:0d:32:30:a1:bc:a8: 38:f1:c5:31:e7:35:9f:64:b3:6e:5d:6a:3f:2e:fa: af:49:d5:0a:6c:8c:35:c0:ed:2f:c3:e2:1e:e5:19: d7:87:b4:a9:2b:b5:b4:10:78:e4:6e:d0:12:90:91: 1c:36:0b:9e:8e:47:a7:49:2a:5e:dd:25:0c:11:61: 07:d1:99:62:94:90:97:dd:e9:54:e5:24:f5:8c:da: 1f:c0:41:ce:dc:e4:38:68:78:ad:2c:86:6d:fc:cf: 91:6a:db:13:5e:16:86:42:21:d7:5b:85:8b:05:fe: b9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C2:3E:48:37:24:C5:1B:81:51:70:3B:6B:89:91:FB:C0:D8:90:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2085c6f8-633f-3c59-a73f-c4624fc22745.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:60:d1:0c:15:a9:33:fd:dc:8d:ca:51:cb:1c:95:f3:56:63: 89:81:51:eb:3e:9c:e3:28:d9:e8:6d:18:92:d6:a1:19:81:23: f0:3e:4c:8b:dd:13:8b:ba:1e:3b:ff:32:82:34:07:35:06:2e: 66:48:8b:f2:c4:09:77:52:66:ff:93:8b:cb:0d:e0:0a:a1:af: 0a:b6:49:14:37:1f:2f:fb:75:05:da:da:59:8b:3a:91:d6:62: ad:43:02:9e:04:78:92:86:9e:f5:9b:0a:fe:d1:6d:b9:2a:75: bf:89:bf:2a:2c:5e:e8:9e:66:0d:76:7c:ce:1b:3e:9d:74:c8: ee:8e:da:d1:8c:d3:e3:ce:90:b6:97:e9:d2:9e:d5:d9:cf:52: 42:1c:4e:ed:b8:ed:d5:f3:84:04:98:6d:fe:a2:ad:7a:fe:00: 7f:40:38:39:86:8f:11:a5:a4:7d:89:95:9d:34:cc:bd:59:6b: 33:a7:1f:22:20:e6:16:de:b2:6b:d9:4f:c3:4c:5f:18:e1:4d: 50:9d:e6:a8:fa:1a:3f:42:26:68:a8:c2:7f:8a:d6:cd:09:54: f3:33:b2:25:11:57:d2:27:2e:76:31:cd:b4:c8:ba:b4:42:ab: 71:e8:01:2a:ef:56:57:b5:59:54:d3:ad:83:e7:e1:ae:57:ea: d1:a8:83:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFMH+DWgzHJbAruBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxNDIyNDA1OVoXDTI1MTAxMjIyNDA1OVowLzEtMCsGA1UEAxMk ZWY5NzUxMDktYTY0YS00NDliLTkyZTgtOTdiYTZkYjc2MjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkATlihrhJiXxLYMFjPCXESP5j4EeBJIKv8rx OYqj1LBYnsNt6YJA4FjgUY2+iH8zXBjAEAv3qTAbmtkPmi4HguhRA/yUk40qqxYt awtSKtrhOKxtADMp0K6vNZYuo2q+OYwqvdPrPRfYobu8i2TvA6FLJug4TXkeJXYm Q2qRW09JnEu+pSe2BIOHRMrGh6ENMjChvKg48cUx5zWfZLNuXWo/LvqvSdUKbIw1 wO0vw+Ie5RnXh7SpK7W0EHjkbtASkJEcNguejkenSSpe3SUMEWEH0ZlilJCX3elU 5ST1jNofwEHO3OQ4aHitLIZt/M+RatsTXhaGQiHXW4WLBf65UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXCPkg3JMUbgVFwO2uJkfvA2JCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjA4NWM2ZjgtNjMzZi0z YzU5LWE3M2YtYzQ2MjRmYzIyNzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1g0QwVqTP93I3KUcsclfNWY4mBUes+nOMo2ehtGJLWoRmBI/A+TIvd E4u6Hjv/MoI0BzUGLmZIi/LECXdSZv+Ti8sN4Aqhrwq2SRQ3Hy/7dQXa2lmLOpHW Yq1DAp4EeJKGnvWbCv7Rbbkqdb+JvyosXuieZg12fM4bPp10yO6O2tGM0+POkLaX 6dKe1dnPUkIcTu247dXzhASYbf6irXr+AH9AODmGjxGlpH2JlZ00zL1ZazOnHyIg 5hbesmvZT8NMXxjhTVCd5qj6Gj9CJmiown+K1s0JVPMzsiURV9InLnYxzbTIurRC q3HoASrvVle1WVTTrYPn4a5X6tGog6A= -----END CERTIFICATE-----Generated at Tue Jul 22 04:19:10 2025 by rpki-client