$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa File: 40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa (raw, json) Hash identifier: HrQpocfwOHyJ8X+xivqQ9c6MH49SIxrFympqSKDxoc8= Subject key identifier: 16:C9:D9:03:FB:1E:E4:0A:8A:A6:65:A5:E6:2B:95:9E:F8:09:C1:44 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A698B34838C67BB71EC32B780 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 18779 IP address blocks: 172.121.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:34:83:8c:67:bb:71:ec:32:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=6e18fc6c-b4a6-42a5-8265-c435bce5dc51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:33:97:80:73:8c:ba:92:0f:f1:9e:4c:55:4d: ea:05:07:f7:62:cf:60:1a:71:c0:c7:50:e1:cf:b7: 00:ed:51:f5:15:ff:71:c5:f9:92:20:12:95:6b:44: 71:de:78:5d:f8:65:64:47:29:d9:55:ce:1b:27:54: 3a:56:a0:8e:4d:e9:fa:3f:66:95:6d:2d:53:c0:70: 03:3a:35:47:27:25:fb:36:28:d1:1b:1c:6a:36:25: 60:e4:97:04:a8:3e:43:08:3b:3c:f1:80:6b:d3:22: c9:8c:ed:f8:1d:45:3c:76:0b:f6:b8:b7:f7:e8:c2: 50:ef:30:06:35:f7:8f:18:02:9c:49:7a:4d:8b:da: fa:eb:0c:59:e6:5f:00:45:4c:4c:4f:ce:e6:4b:77: d0:0d:e9:41:c0:be:21:ff:4d:6b:80:99:91:f1:8c: 56:04:ad:c5:04:74:9f:50:9b:ea:f8:82:ae:da:09: 1f:7f:31:c2:68:b1:2d:55:14:3e:f8:5f:35:4d:16: 6b:87:6d:23:cb:eb:83:b5:8e:cf:f6:94:aa:e9:ff: 07:2b:50:91:ab:51:11:4a:86:23:4e:0f:ba:3c:7e: 58:2c:8c:c0:27:fd:a1:7a:0f:96:57:32:ce:0e:eb: 02:d6:b1:ac:7d:fb:84:cf:d5:9c:29:86:51:5a:c9: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C9:D9:03:FB:1E:E4:0A:8A:A6:65:A5:E6:2B:95:9E:F8:09:C1:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40d644d4-c98d-3ce9-8c1b-986a0e83b9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:10:a3:31:1e:73:b5:a4:da:2e:8a:d2:03:4b:e9:84:4e:6a: 45:bb:ad:bb:5b:ed:5b:27:2b:5e:9b:b1:56:3d:20:16:8f:a8: 1b:f5:03:1d:d8:e4:44:9e:31:89:89:fd:87:15:99:86:b2:ad: 2e:bc:81:10:6c:f0:e7:57:ce:ba:a1:42:ff:52:27:d6:96:98: da:c4:e6:a4:00:b5:15:8b:98:13:75:54:1e:c5:ce:a7:d1:09: 1c:70:13:03:36:4a:a1:0a:e5:e8:af:60:82:59:eb:71:48:60: 63:ac:a3:01:ad:34:4d:f1:ff:4a:68:d9:5c:e6:b4:7a:b6:40: e8:d2:06:69:a0:46:c5:e3:b6:f9:5e:82:d9:53:50:61:d4:9c: 06:6e:8a:81:ff:d3:c8:07:bb:e6:6a:cc:90:8d:29:11:03:c6: 6f:3a:50:20:80:c0:1f:75:04:21:7c:36:6b:ff:3b:73:b7:9c: d9:d4:39:ad:6c:e1:2c:66:74:f3:9e:85:4c:d9:3e:69:58:be: b8:fb:be:36:14:e8:b5:89:1b:e9:b5:b8:d9:de:7d:0e:a2:22: a5:03:8d:ff:ce:7b:82:17:62:8e:fb:f9:ca:9d:d6:c8:47:22: 9b:54:e2:65:05:1e:93:f1:26:73:dd:2c:82:84:ae:54:f4:d6: e8:dc:94:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppizSDjGe7cewyt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk NmUxOGZjNmMtYjRhNi00MmE1LTgyNjUtYzQzNWJjZTVkYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjOXgHOMupIP8Z5MVU3qBQf3Ys9gGnHAx1Dh z7cA7VH1Ff9xxfmSIBKVa0Rx3nhd+GVkRynZVc4bJ1Q6VqCOTen6P2aVbS1TwHAD OjVHJyX7NijRGxxqNiVg5JcEqD5DCDs88YBr0yLJjO34HUU8dgv2uLf36MJQ7zAG NfePGAKcSXpNi9r66wxZ5l8ARUxMT87mS3fQDelBwL4h/01rgJmR8YxWBK3FBHSf UJvq+IKu2gkffzHCaLEtVRQ++F81TRZrh20jy+uDtY7P9pSq6f8HK1CRq1ERSoYj Tg+6PH5YLIzAJ/2heg+WVzLODusC1rGsffuEz9WcKYZRWsmbrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbJ2QP7HuQKiqZlpeYrlZ74CcFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDBkNjQ0ZDQtYzk4ZC0z Y2U5LThjMWItOTg2YTBlODNiOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrHn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4QozEec7Wk2i6K0gNL6YROakW7rbtb7VsnK16bsVY9IBaPqBv1Ax3Y 5ESeMYmJ/YcVmYayrS68gRBs8OdXzrqhQv9SJ9aWmNrE5qQAtRWLmBN1VB7FzqfR CRxwEwM2SqEK5eivYIJZ63FIYGOsowGtNE3x/0po2VzmtHq2QOjSBmmgRsXjtvle gtlTUGHUnAZuioH/08gHu+ZqzJCNKREDxm86UCCAwB91BCF8Nmv/O3O3nNnUOa1s 4SxmdPOehUzZPmlYvrj7vjYU6LWJG+m1uNnefQ6iIqUDjf/Oe4IXYo77+cqd1shH IptU4mUFHpPxJnPdLIKErlT01ujclEI= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:19 2025 by rpki-client