$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f6cb5ba-6230-3354-a8e4-53aad479cd02.roa File: 2f6cb5ba-6230-3354-a8e4-53aad479cd02.roa (raw, json) Hash identifier: zXY0/D8DzxnoyhbBxA+dzABTxUDHfZjwq6I+HaMPNR0= Subject key identifier: 1E:D6:B8:CC:62:DA:28:8C:BB:E7:8A:06:3B:12:6B:FA:EA:D8:E1:21 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4E77462091B5ED28CC601C60 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f6cb5ba-6230-3354-a8e4-53aad479cd02.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 62610 IP address blocks: 172.120.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:46:20:91:b5:ed:28:cc:60:1c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=438a67db-1ace-4529-9a72-be6748633d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:82:c1:0c:57:56:14:52:e8:6d:74:0f:b3:ed: 5f:30:73:f3:a8:d2:ee:8f:79:33:c8:9a:da:d5:6f: 88:96:3d:a1:d5:e4:1b:fc:c3:af:c6:9b:0e:d8:e8: 51:98:82:76:d7:63:09:d1:f3:5a:22:29:b4:5a:8b: d7:8c:36:3a:49:bf:63:37:37:f9:01:5d:d2:11:c8: f3:f6:41:99:c4:26:d7:50:45:f1:8f:cf:f5:60:57: f4:b8:50:01:c8:d0:fa:12:ae:96:31:b1:b9:9d:ad: 31:0a:84:69:a2:fa:01:d9:6a:39:59:71:34:a2:3b: 45:ff:29:7d:b6:74:36:9c:e0:57:e1:6e:dd:e4:99: 69:54:9b:38:1b:f8:4a:20:e2:bb:ff:10:0e:47:d4: 0d:6e:66:d5:67:cd:3f:d4:ec:4e:66:32:60:07:e6: cf:5b:e2:09:c9:0f:4a:49:ac:c9:4a:fa:be:9f:55: 1a:df:f5:ab:ea:b8:f6:10:ca:b8:97:8b:65:5d:be: 22:70:bc:6c:98:28:f0:a9:fb:f6:4a:ec:ef:73:c6: 0a:98:9e:fe:00:cd:4c:3d:9a:f6:e5:5e:86:6e:8a: f9:1e:eb:10:ae:a2:fc:d3:2d:d8:e7:19:fb:28:c5: aa:ca:ba:a9:dc:7b:bc:96:73:ce:38:f9:56:bf:d4: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D6:B8:CC:62:DA:28:8C:BB:E7:8A:06:3B:12:6B:FA:EA:D8:E1:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f6cb5ba-6230-3354-a8e4-53aad479cd02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e0:a7:51:c6:00:f8:8f:0f:c4:5c:62:54:8c:a8:2f:8f:51: 2b:dc:43:97:8e:f2:d8:d0:4e:b4:12:25:e1:fc:38:e9:f2:88: 6a:b3:9f:4f:b2:ef:7a:f6:7e:91:54:18:64:01:e1:7d:1d:55: af:42:19:5f:06:ea:2a:61:93:1c:da:41:1c:d8:07:5c:21:3a: e0:d3:64:7b:56:c4:3a:d2:01:6a:31:a0:0e:ff:76:d3:d9:cb: db:00:47:c7:44:36:65:21:38:f2:dd:e8:ee:8e:d6:1e:2a:15: fc:9d:92:1c:9e:1f:43:62:d0:56:21:14:fb:cb:88:cd:c1:3b: da:0e:ad:26:5c:5f:3a:dd:3b:c4:1f:ca:8b:3c:5a:25:17:60: 6d:c4:cf:e2:f8:b6:c1:a2:74:ab:5c:c5:bb:57:60:cb:7f:e8: 83:9d:f4:d6:66:f9:26:0f:3c:55:67:a6:7d:2a:0d:72:e1:64: e5:13:07:b7:91:e8:b2:40:97:77:3e:02:27:c5:d2:b8:23:e4: e8:20:2a:7f:fc:22:8f:f4:08:47:53:ef:cf:c1:bf:8b:86:d0: c5:b0:0f:72:d8:7e:93:38:b9:04:7b:ac:74:c1:11:42:21:66: 65:5a:29:c6:e0:fe:42:a9:e7:81:f8:9f:ca:ba:38:a2:b4:7c: 04:aa:39:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOd0YgkbXtKMxgHGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NDM4YTY3ZGItMWFjZS00NTI5LTlhNzItYmU2NzQ4NjMzZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oLBDFdWFFLobXQPs+1fMHPzqNLuj3kzyJra 1W+Ilj2h1eQb/MOvxpsO2OhRmIJ212MJ0fNaIim0WovXjDY6Sb9jNzf5AV3SEcjz 9kGZxCbXUEXxj8/1YFf0uFAByND6Eq6WMbG5na0xCoRpovoB2Wo5WXE0ojtF/yl9 tnQ2nOBX4W7d5JlpVJs4G/hKIOK7/xAOR9QNbmbVZ80/1OxOZjJgB+bPW+IJyQ9K SazJSvq+n1Ua3/Wr6rj2EMq4l4tlXb4icLxsmCjwqfv2Suzvc8YKmJ7+AM1MPZr2 5V6Gbor5HusQrqL80y3Y5xn7KMWqyrqp3Hu8lnPOOPlWv9TGLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7WuMxi2iiMu+eKBjsSa/rq2OEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmY2Y2I1YmEtNjIzMC0z MzU0LWE4ZTQtNTNhYWQ0NzljZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHglMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzgp1HGAPiPD8RcYlSMqC+PUSvcQ5eO8tjQTrQSJeH8OOnyiGqzn0+y 73r2fpFUGGQB4X0dVa9CGV8G6iphkxzaQRzYB1whOuDTZHtWxDrSAWoxoA7/dtPZ y9sAR8dENmUhOPLd6O6O1h4qFfydkhyeH0Ni0FYhFPvLiM3BO9oOrSZcXzrdO8Qf yos8WiUXYG3Ez+L4tsGidKtcxbtXYMt/6IOd9NZm+SYPPFVnpn0qDXLhZOUTB7eR 6LJAl3c+AifF0rgj5OggKn/8Io/0CEdT78/Bv4uG0MWwD3LYfpM4uQR7rHTBEUIh ZmVaKcbg/kKp54H4n8q6OKK0fASqOY8= -----END CERTIFICATE-----Generated at Sat Oct 11 11:13:21 2025 by rpki-client