$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a091b9a-2a06-3f97-9879-9dc836551426.roa File: 2a091b9a-2a06-3f97-9879-9dc836551426.roa (raw, json) Hash identifier: dbPxfN8btxjsdL7jyLVk/wr5aL8ZT/8XM6W/pFBUSIc= Subject key identifier: 5C:85:C5:94:E6:71:F1:23:E1:89:65:49:F9:79:6B:7B:AB:CE:F0:1E Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B6D2CC474D232EA078B303F00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a091b9a-2a06-3f97-9879-9dc836551426.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 6939 IP address blocks: 172.120.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:c4:74:d2:32:ea:07:8b:30:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=b0b24afd-254d-456e-b8ba-3e39b66f8c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:77:e3:cf:b6:ce:4c:bc:ab:43:94:9f:13: e2:c4:73:ab:8d:e4:48:14:8c:b5:e5:18:a3:7d:72: 10:9e:0e:43:bd:0f:46:79:0b:63:67:3e:e6:0e:2a: 0e:2c:23:f5:37:ff:f9:22:b5:b4:da:bf:6d:78:81: 00:b8:3e:9d:e3:d3:fb:5f:dc:b2:e9:ca:93:b5:73: d8:01:a8:03:61:4c:ff:f7:05:85:db:34:4e:75:c5: 69:39:fb:26:21:8c:e1:57:b4:4b:bf:8d:91:1f:b6: 89:82:ce:bc:5c:97:f0:ec:c3:49:6e:16:c3:72:85: 82:25:42:69:17:17:8d:d7:cb:43:d4:96:6c:8f:0c: 11:df:bf:0c:fc:13:33:5f:e3:21:bf:04:e9:61:ff: e8:14:34:09:ca:4c:02:47:a5:5f:10:27:76:73:a5: 6b:0b:8b:8a:c2:05:ff:41:61:2d:d2:ec:c0:8b:ce: ab:82:a8:cd:42:ac:fa:d7:fb:84:62:ac:0b:61:ce: 08:ae:f9:df:97:06:ee:c4:64:f9:60:b8:cd:98:18: 88:19:b2:93:99:e6:91:f5:e6:89:d1:2c:59:be:61: aa:3d:44:11:cb:74:57:31:08:61:7c:83:0c:b9:90: 6c:ee:b5:55:1a:9a:1b:89:98:51:c3:d3:8c:ab:d6: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:85:C5:94:E6:71:F1:23:E1:89:65:49:F9:79:6B:7B:AB:CE:F0:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a091b9a-2a06-3f97-9879-9dc836551426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:88:1f:6b:6c:ab:2d:6a:6d:e8:85:2d:c5:48:bb:41:52:e4: 8f:ec:cb:34:7b:3e:a2:6f:04:0a:ac:c7:a1:2f:85:5f:f4:3e: bb:d2:28:bb:ec:48:81:ed:81:57:87:6f:ca:fd:ab:f0:b6:5e: ca:c6:82:2a:e4:51:f3:ff:ae:76:cc:70:60:cc:95:8d:6d:01: d6:fb:d0:e1:2b:bf:6d:b3:7b:49:e5:9c:33:30:d1:b4:8b:fc: 6b:dd:0e:f3:04:d3:6e:fc:e8:6e:9a:38:8b:4d:9f:da:50:79: 4e:7b:33:11:44:23:a4:84:5e:94:36:c1:3a:dc:8c:22:0e:01: 8b:3f:14:e4:38:b5:49:fd:5f:c5:71:4c:95:02:3f:07:b8:07: 29:09:4d:d9:36:83:72:2f:a5:61:1d:49:91:cd:a2:ab:79:6e: a2:1f:18:e3:da:ff:1b:1c:5d:df:4e:20:7e:cf:65:23:1c:ab: 54:55:d2:d5:15:55:e6:d5:32:36:f6:fe:ae:6b:9f:f1:b4:8b: 02:29:ea:92:b5:52:a9:8f:65:7a:7c:11:47:a6:2e:61:4c:f3: 8c:ac:80:6c:d1:a7:62:09:be:fc:5a:46:20:f7:10:c6:c0:42: b2:3f:96:03:0d:bc:c0:ac:aa:87:81:b6:9b:cd:25:fd:48:ce: 08:f9:0d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLMR00jLqB4swPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YjBiMjRhZmQtMjU0ZC00NTZlLWI4YmEtM2UzOWI2NmY4YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLR348+2zky8q0OUnxPixHOrjeRIFIy15Rij fXIQng5DvQ9GeQtjZz7mDioOLCP1N//5IrW02r9teIEAuD6d49P7X9yy6cqTtXPY AagDYUz/9wWF2zROdcVpOfsmIYzhV7RLv42RH7aJgs68XJfw7MNJbhbDcoWCJUJp FxeN18tD1JZsjwwR378M/BMzX+MhvwTpYf/oFDQJykwCR6VfECd2c6VrC4uKwgX/ QWEt0uzAi86rgqjNQqz61/uEYqwLYc4IrvnflwbuxGT5YLjNmBiIGbKTmeaR9eaJ 0SxZvmGqPUQRy3RXMQhhfIMMuZBs7rVVGpobiZhRw9OMq9aLTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyFxZTmcfEj4YllSfl5a3urzvAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmEwOTFiOWEtMmEwNi0z Zjk3LTk4NzktOWRjODM2NTUxNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHg6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACIH2tsqy1qbeiFLcVIu0FS5I/syzR7PqJvBAqsx6EvhV/0PrvSKLvs SIHtgVeHb8r9q/C2XsrGgirkUfP/rnbMcGDMlY1tAdb70OErv22ze0nlnDMw0bSL /GvdDvME02786G6aOItNn9pQeU57MxFEI6SEXpQ2wTrcjCIOAYs/FOQ4tUn9X8Vx TJUCPwe4BykJTdk2g3IvpWEdSZHNoqt5bqIfGOPa/xscXd9OIH7PZSMcq1RV0tUV VebVMjb2/q5rn/G0iwIp6pK1UqmPZXp8EUemLmFM84ysgGzRp2IJvvxaRiD3EMbA QrI/lgMNvMCsqoeBtpvNJf1Izgj5DeQ= -----END CERTIFICATE-----Generated at Sat Oct 11 11:11:34 2025 by rpki-client