$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32cdec3d-3e5a-3a86-a48b-267a5446cfb7.roa File: 32cdec3d-3e5a-3a86-a48b-267a5446cfb7.roa (raw, json) Hash identifier: yvYMOnvDlQgTp+z15pkTtLOiSky83Hz4lI5lzuD+QvA= Subject key identifier: E4:24:AA:16:09:BF:FB:3F:D6:74:C7:2D:CB:AB:BD:85:BB:F1:12:AB Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B70CD321CF66D16757480E400 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32cdec3d-3e5a-3a86-a48b-267a5446cfb7.roa Signing time: Tue 07 Oct 2025 08:11:41 +0000 ROA not before: Tue 07 Oct 2025 08:11:41 +0000 ROA not after: Mon 05 Jan 2026 09:11:41 +0000 asID: 18779 IP address blocks: 172.120.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:70:cd:32:1c:f6:6d:16:75:74:80:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 7 08:11:41 2025 GMT Not After : Jan 5 09:11:41 2026 GMT Subject: CN=5b5b231a-c7a5-4e8d-a5e7-c8a05fa4104a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:5a:a5:ab:93:d5:75:ea:68:f2:41:2e:c7: d2:fc:4e:76:e2:eb:31:6f:48:be:74:29:8c:17:b8: cc:77:f9:17:d7:b3:d1:11:b5:6f:af:06:b4:6b:12: 7a:91:e1:55:ea:43:1b:a6:43:3e:e0:d6:4d:a7:f4: fe:b3:08:ed:85:34:6a:e1:2c:ea:a0:6e:66:8f:9a: 52:fa:45:d6:af:65:ee:e7:76:2f:ad:e1:8a:32:a5: 1f:d2:54:e5:fd:63:08:13:bb:48:90:e1:5e:f4:71: 76:92:8a:5f:e7:2a:77:0b:c2:30:d2:da:19:b9:f2: fb:f2:ec:b2:c5:97:60:f9:9e:93:c6:a1:4b:a1:41: 4f:27:3a:3c:c0:3d:2f:c4:19:ca:2a:c4:a9:f7:cf: ac:2b:8c:83:e1:d0:6f:8d:55:e5:44:6c:43:06:65: 06:a0:81:bd:a0:97:cc:8e:63:66:dd:a8:78:0c:f6: 00:58:70:05:1e:87:8e:de:0f:97:1e:5c:ea:3b:30: e9:a3:5b:dc:b2:c6:de:a9:c4:3e:5c:a9:8a:95:64: b1:3a:41:cf:ad:58:a8:a7:02:94:27:af:33:77:a4: 4d:cf:ac:1c:34:50:5c:85:62:d8:93:66:ba:cf:c8: 12:29:8d:a4:ed:ef:69:c1:22:66:10:ff:6c:13:d9: 50:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:24:AA:16:09:BF:FB:3F:D6:74:C7:2D:CB:AB:BD:85:BB:F1:12:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32cdec3d-3e5a-3a86-a48b-267a5446cfb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:45:de:59:3c:a5:3c:78:18:ee:14:f1:6b:c2:63:a2:63:96: 22:a0:63:2f:69:1c:a4:24:fd:23:43:83:e3:ff:cb:00:c3:43: 10:6a:2d:f1:3e:e0:ba:d5:74:f6:ba:f1:d4:af:a8:4c:ff:5b: b4:5f:74:9b:7a:c3:f2:89:6e:7f:a9:b9:0e:94:90:03:19:63: ed:73:cb:b5:96:2d:96:43:ae:67:c8:61:27:a5:c1:33:51:63: 24:68:46:3d:e1:11:e5:89:25:4d:9c:d7:8f:94:d0:e3:8a:be: 9b:98:87:05:36:ab:ca:12:a2:f2:2e:b5:f0:cd:11:6a:51:22: 13:b3:a7:3a:2e:e3:b5:1e:d6:25:17:9c:e1:2b:10:ba:8d:f2: 21:14:db:b7:11:b8:d5:50:b7:5f:32:57:4a:c2:86:3c:9c:41: bf:99:33:24:4d:f4:0d:3d:0b:12:70:e6:79:3a:47:66:e3:52: 20:e9:be:a4:34:59:9e:db:a0:0c:67:31:25:d4:87:53:e8:0e: 9a:14:87:e8:75:ca:14:94:72:b2:c0:02:e6:cb:bd:7f:09:05: bf:8a:56:8e:09:16:a3:5f:80:22:ca:a1:03:24:9f:40:70:5e: a1:9a:2a:71:df:b5:9a:ea:7f:5b:1a:30:e2:d6:49:87:c5:36: 20:5e:2a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtwzTIc9m0WdXSA5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNzA4MTE0MVoXDTI2MDEwNTA5MTE0MVowLzEtMCsGA1UEAxMk NWI1YjIzMWEtYzdhNS00ZThkLWE1ZTctYzhhMDVmYTQxMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvtapauT1XXqaPJBLsfS/E524usxb0i+dCmM F7jMd/kX17PREbVvrwa0axJ6keFV6kMbpkM+4NZNp/T+swjthTRq4SzqoG5mj5pS +kXWr2Xu53YvreGKMqUf0lTl/WMIE7tIkOFe9HF2kopf5yp3C8Iw0toZufL78uyy xZdg+Z6TxqFLoUFPJzo8wD0vxBnKKsSp98+sK4yD4dBvjVXlRGxDBmUGoIG9oJfM jmNm3ah4DPYAWHAFHoeO3g+XHlzqOzDpo1vcssbeqcQ+XKmKlWSxOkHPrViopwKU J68zd6RNz6wcNFBchWLYk2a6z8gSKY2k7e9pwSJmEP9sE9lQLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQkqhYJv/s/1nTHLcurvYW78RKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzJjZGVjM2QtM2U1YS0z YTg2LWE0OGItMjY3YTU0NDZjZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHj5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBF3lk8pTx4GO4U8WvCY6JjliKgYy9pHKQk/SNDg+P/ywDDQxBqLfE+ 4LrVdPa68dSvqEz/W7RfdJt6w/KJbn+puQ6UkAMZY+1zy7WWLZZDrmfIYSelwTNR YyRoRj3hEeWJJU2c14+U0OOKvpuYhwU2q8oSovIutfDNEWpRIhOzpzou47Ue1iUX nOErELqN8iEU27cRuNVQt18yV0rChjycQb+ZMyRN9A09CxJw5nk6R2bjUiDpvqQ0 WZ7boAxnMSXUh1PoDpoUh+h1yhSUcrLAAubLvX8JBb+KVo4JFqNfgCLKoQMkn0Bw XqGaKnHftZrqf1saMOLWSYfFNiBeKjA= -----END CERTIFICATE-----Generated at Sat Oct 11 11:07:53 2025 by rpki-client