$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38ed23c1-8365-31ba-886b-69401ac5c984.roa File: 38ed23c1-8365-31ba-886b-69401ac5c984.roa (raw, json) Hash identifier: Y/gY26l+Z8YJ9IDKswU33Q/JGU0fHLpo7/iZYlPfetQ= Subject key identifier: 50:2D:0B:20:52:B7:13:4C:5F:C8:18:A1:3C:05:B2:41:F1:FD:CE:92 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4A47346C04E32B5008EDB080 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38ed23c1-8365-31ba-886b-69401ac5c984.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 18779 IP address blocks: 172.121.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:34:6c:04:e3:2b:50:08:ed:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=c32e96d4-2c31-4396-886e-04b9d285acf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8c:5b:fb:1d:88:d4:9a:8a:a3:f0:46:9e:ac: 8b:8a:8f:02:ac:fb:56:e9:b6:e0:18:50:0e:18:28: 4e:37:a6:4e:02:a7:a5:d0:c0:c0:b1:07:d9:87:6c: 78:e0:8f:5e:13:fb:df:11:7f:ab:f9:72:df:cd:ad: 33:b8:a5:48:f7:4b:41:5a:51:76:eb:34:29:87:2b: 76:b8:6f:0a:8b:28:27:d8:87:17:eb:5b:a1:f3:e7: a5:93:1f:af:58:28:c2:e4:a5:a6:74:0f:3f:ff:85: c5:93:9b:19:3b:3a:bc:a5:26:0b:f0:83:7a:3e:eb: 02:5a:e9:76:b4:49:dd:c2:21:4c:13:90:a9:12:fe: 39:4e:ae:62:40:03:2b:c6:1c:52:b1:4a:b5:27:72: 00:73:4a:d6:96:59:e4:45:49:f7:91:38:f6:39:45: 8d:b4:0e:06:8a:b3:44:2d:25:42:37:53:a0:2f:44: 7e:5a:36:75:9a:44:2c:67:a4:56:84:fb:02:05:b9: 22:06:22:41:cf:10:3c:42:b8:e4:e2:e7:19:42:ad: 36:50:36:f5:10:65:57:96:59:18:05:92:6b:e8:d6: 6d:0b:b4:86:0c:73:68:8b:2f:5b:d5:cb:1a:b0:15: 04:20:f3:be:03:85:c9:2e:5d:8f:57:74:9f:5d:0f: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2D:0B:20:52:B7:13:4C:5F:C8:18:A1:3C:05:B2:41:F1:FD:CE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38ed23c1-8365-31ba-886b-69401ac5c984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:15:d2:ba:be:f7:01:ee:23:27:39:18:a9:fa:c0:08:51:16: 67:02:20:8a:9b:55:b4:27:9d:4b:09:95:fc:ca:10:bd:c2:ea: cd:59:01:75:ec:e9:f0:69:0e:b4:39:d8:b9:6d:a0:12:c8:a0: a0:83:ad:bf:01:01:4f:38:26:fe:99:10:ae:6d:4a:61:fe:ac: 0a:88:f9:7f:2d:c3:24:cd:96:08:2c:e2:1d:d9:b0:74:22:30: a0:49:ba:12:dc:9d:bd:df:2e:ee:eb:15:63:8b:7a:f5:92:54: f6:a5:c4:84:d9:ae:9f:74:19:bf:59:1e:e7:24:4d:93:d1:db: 78:1e:4f:ad:b2:b8:43:5a:7e:b9:d3:5f:a7:1a:7a:b4:bc:1a: f4:2b:9c:f0:cf:7c:43:72:9b:83:c5:f1:72:7a:0e:e8:ed:be: 9d:80:cd:7d:77:9f:3d:83:df:c6:ad:50:cc:d9:4d:6e:c2:05: fd:44:f3:e7:74:c3:7a:63:46:95:48:ce:51:6e:23:d3:33:22: 3f:e5:28:43:29:ea:3c:99:c7:98:93:e5:f1:35:bd:e4:16:c7: 0e:2b:82:d1:89:0b:3c:fd:55:f9:2e:d3:e3:97:52:13:1c:d8: 83:b0:26:44:48:67:f6:be:6d:af:10:9b:99:55:84:b9:31:67: 7b:c8:65:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzRsBOMrUAjtsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YzMyZTk2ZDQtMmMzMS00Mzk2LTg4NmUtMDRiOWQyODVhY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4xb+x2I1JqKo/BGnqyLio8CrPtW6bbgGFAO GChON6ZOAqel0MDAsQfZh2x44I9eE/vfEX+r+XLfza0zuKVI90tBWlF26zQphyt2 uG8Kiygn2IcX61uh8+elkx+vWCjC5KWmdA8//4XFk5sZOzq8pSYL8IN6PusCWul2 tEndwiFME5CpEv45Tq5iQAMrxhxSsUq1J3IAc0rWllnkRUn3kTj2OUWNtA4GirNE LSVCN1OgL0R+WjZ1mkQsZ6RWhPsCBbkiBiJBzxA8Qrjk4ucZQq02UDb1EGVXllkY BZJr6NZtC7SGDHNoiy9b1csasBUEIPO+A4XJLl2PV3SfXQ9IkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAtCyBStxNMX8gYoTwFskHx/c6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzhlZDIzYzEtODM2NS0z MWJhLTg4NmItNjk0MDFhYzVjOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHl+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4V0rq+9wHuIyc5GKn6wAhRFmcCIIqbVbQnnUsJlfzKEL3C6s1ZAXXs 6fBpDrQ52LltoBLIoKCDrb8BAU84Jv6ZEK5tSmH+rAqI+X8twyTNlggs4h3ZsHQi MKBJuhLcnb3fLu7rFWOLevWSVPalxITZrp90Gb9ZHuckTZPR23geT62yuENafrnT X6caerS8GvQrnPDPfENym4PF8XJ6Dujtvp2AzX13nz2D38atUMzZTW7CBf1E8+d0 w3pjRpVIzlFuI9MzIj/lKEMp6jyZx5iT5fE1veQWxw4rgtGJCzz9Vfku0+OXUhMc 2IOwJkRIZ/a+ba8Qm5lVhLkxZ3vIZTw= -----END CERTIFICATE-----Generated at Sat Oct 11 11:15:54 2025 by rpki-client