$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4190db83-e837-3647-a1e8-a9eec6b30888.roa File: 4190db83-e837-3647-a1e8-a9eec6b30888.roa (raw, json) Hash identifier: ENXu2PHaexdNBzcagEcXvM7IozaH6YfQWpx+rLQrnkU= Subject key identifier: B2:66:88:D3:12:0D:DA:CE:9B:3D:25:96:A7:DE:81:90:CD:33:0F:F1 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A849D58B038EB50CBDEE0AE10 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4190db83-e837-3647-a1e8-a9eec6b30888.roa Signing time: Mon 14 Jul 2025 17:44:30 +0000 ROA not before: Mon 14 Jul 2025 17:44:30 +0000 ROA not after: Sun 12 Oct 2025 17:44:30 +0000 asID: 44559 IP address blocks: 172.120.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:9d:58:b0:38:eb:50:cb:de:e0:ae:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 14 17:44:30 2025 GMT Not After : Oct 12 17:44:30 2025 GMT Subject: CN=962bc1e1-28f0-4446-9c62-82105c6be4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:5e:6e:a6:7c:ff:a3:9c:ef:94:58:7e:07: 07:11:70:4f:6b:fe:66:0b:58:47:fa:6a:55:d3:bc: f6:2f:12:94:3f:f5:3e:26:85:42:38:32:b0:94:63: 1f:2e:66:cb:c8:54:18:03:c5:68:59:67:33:d9:f6: 30:a3:9b:67:9f:32:7e:59:fb:86:eb:9c:d4:d3:ca: e7:b0:40:f2:b0:bf:e5:7e:29:24:22:b9:ab:32:06: 56:73:95:da:e6:98:1f:60:bf:70:ab:39:d0:00:2c: 01:1e:31:e1:55:94:48:ab:65:82:fa:d1:21:6d:74: 70:c7:69:0e:fc:8b:1c:7e:9f:e0:84:61:0d:5a:23: 86:1c:11:da:b4:77:a2:b3:62:aa:56:ac:f5:2d:26: ca:98:38:a5:69:38:fd:c0:a2:27:ac:9d:93:90:ca: 3a:14:3e:ed:e7:ec:93:1a:6e:7b:94:b2:b9:64:66: 07:8d:0e:2b:df:56:b3:d0:45:a6:fb:cd:d1:01:51: 06:93:3c:41:7b:a5:92:55:cf:5a:89:f9:b6:ad:d8: 6e:04:f0:28:90:0c:6c:a3:32:8e:51:c7:33:1e:a9: eb:0f:0c:44:3a:f3:13:64:7d:03:f4:39:05:eb:ae: 97:32:2b:6b:17:30:6f:1d:32:70:68:6f:68:52:89: 9b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:66:88:D3:12:0D:DA:CE:9B:3D:25:96:A7:DE:81:90:CD:33:0F:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4190db83-e837-3647-a1e8-a9eec6b30888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:bc:6a:94:3e:f6:e1:7b:62:c1:56:f8:a2:57:7e:f9:68:dd: 92:78:ff:34:64:77:b6:4b:cc:ef:e6:26:03:93:39:a5:98:05: 96:b5:2b:6b:02:f8:67:c4:cf:12:6f:c6:31:ea:e3:3d:da:e6: 56:e2:10:92:20:48:aa:b7:3e:89:8f:3f:29:bd:86:d6:da:3e: 64:22:bd:ca:d9:74:21:78:d2:f8:b2:2b:4e:58:e4:85:82:83: ab:21:a2:29:9f:2a:61:c1:04:89:f6:48:ed:7f:df:8b:4e:e3: a1:46:88:d7:c8:26:e5:1f:47:ef:b7:96:30:05:22:c5:15:17: 17:7b:d8:cf:1a:c2:79:50:2b:ad:2c:86:07:cd:1d:60:0d:a5: 14:50:b1:6e:8e:62:20:2c:6a:8e:cb:ce:d1:e6:ca:54:4c:53: a6:a0:ca:17:c5:80:be:dc:d4:23:0f:53:6f:62:9d:ac:27:35: 6f:67:87:6c:a1:8d:4e:89:4d:f4:fa:d1:03:23:95:76:61:56: ec:71:1c:95:8c:cc:a1:cb:7d:99:06:28:ec:a2:40:72:94:17: 9f:72:f6:f3:cc:ee:12:9d:84:d8:bc:87:82:97:84:50:31:06: 4d:40:52:f9:bd:bb:c9:03:4e:ec:b3:c9:69:44:94:8b:84:46: 4f:15:3c:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEnViwOOtQy97grhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxNDE3NDQzMFoXDTI1MTAxMjE3NDQzMFowLzEtMCsGA1UEAxMk OTYyYmMxZTEtMjhmMC00NDQ2LTljNjItODIxMDVjNmJlNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOtebqZ8/6Oc75RYfgcHEXBPa/5mC1hH+mpV 07z2LxKUP/U+JoVCODKwlGMfLmbLyFQYA8VoWWcz2fYwo5tnnzJ+WfuG65zU08rn sEDysL/lfikkIrmrMgZWc5Xa5pgfYL9wqznQACwBHjHhVZRIq2WC+tEhbXRwx2kO /Iscfp/ghGENWiOGHBHatHeis2KqVqz1LSbKmDilaTj9wKInrJ2TkMo6FD7t5+yT Gm57lLK5ZGYHjQ4r31az0EWm+83RAVEGkzxBe6WSVc9aifm2rdhuBPAokAxsozKO UcczHqnrDwxEOvMTZH0D9DkF666XMitrFzBvHTJwaG9oUomboQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJmiNMSDdrOmz0llqfegZDNMw/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDE5MGRiODMtZTgzNy0z NjQ3LWExZTgtYTllZWM2YjMwODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI68apQ+9uF7YsFW+KJXfvlo3ZJ4/zRkd7ZLzO/mJgOTOaWYBZa1K2sC +GfEzxJvxjHq4z3a5lbiEJIgSKq3PomPPym9htbaPmQivcrZdCF40viyK05Y5IWC g6shoimfKmHBBIn2SO1/34tO46FGiNfIJuUfR++3ljAFIsUVFxd72M8awnlQK60s hgfNHWANpRRQsW6OYiAsao7LztHmylRMU6agyhfFgL7c1CMPU29inawnNW9nh2yh jU6JTfT60QMjlXZhVuxxHJWMzKHLfZkGKOyiQHKUF59y9vPM7hKdhNi8h4KXhFAx Bk1AUvm9u8kDTuyzyWlElIuERk8VPIQ= -----END CERTIFICATE-----Generated at Mon Jul 21 08:37:36 2025 by rpki-client