$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c159712-c770-3caa-aa1e-935b219e36f7.roa File: 2c159712-c770-3caa-aa1e-935b219e36f7.roa (raw, json) Hash identifier: FXtyxouGlwuXjttBlji0R+15N9ZGHPIeH84ONgWh/Rs= Subject key identifier: EE:B0:75:87:96:09:BD:4C:20:58:48:5B:2C:D0:01:D2:70:42:62:38 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B5F374ECD4DC0306BB30F08E0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c159712-c770-3caa-aa1e-935b219e36f7.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 3257 IP address blocks: 172.121.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:4e:cd:4d:c0:30:6b:b3:0f:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=d52a3e8e-c249-4584-b1de-be8634454877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:4d:27:b5:a1:fe:70:c9:60:5e:66:71:b5: cd:02:73:5b:e2:cc:a1:18:54:21:cd:e0:4d:55:9d: f0:c8:6f:f7:19:00:34:1e:a4:66:ac:5f:5f:a5:9a: 16:09:c3:48:69:9a:b8:07:18:8f:5a:2b:53:94:3b: 04:5f:37:f6:b2:8d:46:4b:22:97:d0:9b:1a:dc:ce: 54:1b:4a:07:a2:1a:3f:16:cc:59:ed:5f:0e:13:63: 9a:df:73:bc:1b:4b:08:cd:93:0e:dd:e8:d1:78:e1: ae:d1:1f:81:47:10:78:ae:01:61:f8:9c:8d:44:f6: c9:b6:84:71:da:20:ab:71:2a:15:e8:d3:e0:97:54: 3a:9b:11:0b:49:fb:59:a1:34:9c:25:2f:a5:ad:68: 0b:7c:bb:db:21:bf:f6:87:c7:11:e5:6f:73:43:c5: 09:ca:93:07:6e:35:59:dd:e7:b3:1e:91:73:bd:c6: 45:37:3a:a6:4b:95:13:47:69:05:41:3e:b4:d1:ac: 70:9f:45:44:5f:a9:10:ca:42:ff:a6:08:b7:8e:aa: 22:a8:ab:68:a9:4e:86:d3:5f:d2:d8:80:3a:bc:70: d7:b8:04:63:5a:24:74:92:d7:04:9b:1c:c8:d9:28: 1b:66:eb:00:fc:08:f7:77:a5:24:23:36:29:76:a2: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B0:75:87:96:09:BD:4C:20:58:48:5B:2C:D0:01:D2:70:42:62:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2c159712-c770-3caa-aa1e-935b219e36f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:49:f1:81:09:6a:18:e7:97:db:e4:bc:a6:be:dc:c4:c4:04: 89:72:2d:15:90:6c:ea:03:51:96:98:6f:6c:f9:9c:54:38:5f: 20:bd:55:ed:31:b5:7a:57:10:5e:e5:5e:03:b6:d9:f4:c7:fd: 69:84:ea:b1:e0:d3:f7:7e:db:59:93:26:dd:e2:cd:26:45:46: 96:45:42:e2:fc:9f:12:cc:9e:06:89:fd:87:e7:73:b3:5d:de: 5d:bf:b1:15:1b:92:3f:09:9b:92:69:67:cf:c8:fa:c2:19:44: ef:1e:6c:3a:7e:fc:72:cd:f9:ce:49:8b:0f:2b:fc:05:14:4f: bf:55:6e:23:fd:84:19:44:17:9a:12:29:9a:d1:6f:9f:84:ad: 3f:54:81:58:04:e4:cd:a4:15:6c:4c:88:8c:a0:4a:ad:65:9c: 07:be:99:28:96:ca:5a:0c:b7:ab:17:2b:9d:5c:30:55:c4:b2: fa:cd:b3:b1:8b:f1:b9:cb:a8:7d:ce:05:07:da:fb:4c:90:33: 91:08:f7:57:47:67:11:fb:5d:36:50:b2:b8:95:30:cc:e0:67: 9d:fe:65:e7:41:73:c6:ee:e3:bd:25:67:b4:d3:74:07:f1:6f: d0:ad:df:67:df:6f:c9:b4:dd:9a:f1:42:ba:a8:e5:f1:bd:ce: 3c:f7:db:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN07NTcAwa7MPCOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDUyYTNlOGUtYzI0OS00NTg0LWIxZGUtYmU4NjM0NDU0ODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxlNJ7Wh/nDJYF5mcbXNAnNb4syhGFQhzeBN VZ3wyG/3GQA0HqRmrF9fpZoWCcNIaZq4BxiPWitTlDsEXzf2so1GSyKX0Jsa3M5U G0oHoho/FsxZ7V8OE2Oa33O8G0sIzZMO3ejReOGu0R+BRxB4rgFh+JyNRPbJtoRx 2iCrcSoV6NPgl1Q6mxELSftZoTScJS+lrWgLfLvbIb/2h8cR5W9zQ8UJypMHbjVZ 3eezHpFzvcZFNzqmS5UTR2kFQT600axwn0VEX6kQykL/pgi3jqoiqKtoqU6G01/S 2IA6vHDXuARjWiR0ktcEmxzI2SgbZusA/Aj3d6UkIzYpdqJ4OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6wdYeWCb1MIFhIWyzQAdJwQmI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmMxNTk3MTItYzc3MC0z Y2FhLWFhMWUtOTM1YjIxOWUzNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFJ8YEJahjnl9vkvKa+3MTEBIlyLRWQbOoDUZaYb2z5nFQ4XyC9Ve0x tXpXEF7lXgO22fTH/WmE6rHg0/d+21mTJt3izSZFRpZFQuL8nxLMngaJ/Yfnc7Nd 3l2/sRUbkj8Jm5JpZ8/I+sIZRO8ebDp+/HLN+c5Jiw8r/AUUT79VbiP9hBlEF5oS KZrRb5+ErT9UgVgE5M2kFWxMiIygSq1lnAe+mSiWyloMt6sXK51cMFXEsvrNs7GL 8bnLqH3OBQfa+0yQM5EI91dHZxH7XTZQsriVMMzgZ53+ZedBc8bu470lZ7TTdAfx b9Ct32ffb8m03ZrxQrqo5fG9zjz32yU= -----END CERTIFICATE-----Generated at Sat Oct 11 11:08:44 2025 by rpki-client