$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f7d88d4-f7dd-361a-890d-a4f4590b7e6f.roa File: 5f7d88d4-f7dd-361a-890d-a4f4590b7e6f.roa (raw, json) Hash identifier: AiTCtWmZwYzY01lzoTE8y5TzI/NqXjR13fpJxcWQn2o= Subject key identifier: 9A:05:71:61:DE:D5:CF:C6:05:10:A1:9B:47:89:E9:FD:9A:53:03:E7 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A698B36CACF746741CDC936A0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f7d88d4-f7dd-361a-890d-a4f4590b7e6f.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 18779 IP address blocks: 172.120.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:36:ca:cf:74:67:41:cd:c9:36:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=bfb9c4f1-8f28-41a5-98c8-029544432ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:97:01:fe:5e:46:7a:60:29:8e:7a:ac:ae:bf: 92:a0:e3:01:d9:8a:6f:7d:f8:cb:7c:1a:0b:22:e5: 86:be:00:f1:b8:a6:00:16:30:2b:cf:46:30:72:5e: 68:85:1b:f6:ff:5f:71:d0:2e:c9:6e:81:11:1c:f8: 52:60:b6:bf:98:33:ee:a1:b5:fd:cf:d8:c2:04:a3: f0:ee:d1:bb:e5:26:b5:94:d0:02:2d:22:98:29:52: 3a:e5:81:7a:60:70:8a:4f:1e:a1:60:06:a6:4e:96: 8b:53:de:9b:9f:d6:6a:1e:2e:ae:73:c4:44:8c:92: 2b:3f:c9:38:39:d9:a9:eb:0d:43:6d:f3:29:1e:a0: c4:b9:47:64:8d:d1:31:bc:97:a2:5a:08:7d:21:8a: 64:ca:da:9e:2d:c6:f6:e4:a0:29:3a:ef:da:2a:d2: 23:d8:0d:15:0a:68:3c:c6:58:d0:53:9d:03:65:42: da:39:20:ec:84:e3:f4:b8:d6:d1:dc:78:c9:e3:15: 53:45:bc:b9:00:4d:66:66:6d:1a:14:be:36:2a:ea: c2:37:70:6d:28:3c:e6:ea:13:28:6b:a7:3f:6f:f3: d6:29:5f:62:75:f0:f9:cc:07:5b:8c:93:64:08:10: c4:82:f9:58:be:3e:8c:e2:52:88:66:30:e7:70:45: 87:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:05:71:61:DE:D5:CF:C6:05:10:A1:9B:47:89:E9:FD:9A:53:03:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f7d88d4-f7dd-361a-890d-a4f4590b7e6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:58:55:f2:70:e1:67:e8:95:8d:68:85:d7:3a:23:28:01:50: 58:37:1f:cb:eb:c9:1e:3c:94:e0:f8:3e:f7:83:bd:80:18:6c: 91:a8:96:97:29:7c:b4:e6:94:9e:0b:a1:4f:ad:ff:2f:94:16: c8:5c:74:3f:1b:59:6d:3e:47:ee:13:b4:41:8c:74:1d:48:5f: 70:0f:43:82:55:e5:b3:19:07:f4:c7:59:4e:80:ee:35:f5:6c: 67:2f:38:dc:e4:fb:dd:2c:9f:b2:aa:bf:5a:7b:ea:88:e9:82: ae:05:af:9d:eb:dc:00:df:63:ba:9f:02:86:ae:b9:46:c9:fe: 82:d9:a4:66:49:8f:32:8f:73:86:cd:89:4b:45:7e:a0:d6:9e: 47:97:c8:7c:d6:c1:b1:57:76:14:bc:dc:38:e4:d5:6b:64:ee: fc:41:cf:9d:0d:86:bc:04:29:e5:34:f7:de:c1:3d:33:06:ce: 35:a2:ed:53:38:33:4a:2c:67:21:7b:7b:8e:a4:63:ad:9a:01: 6d:01:00:78:80:dc:ec:3f:84:fd:df:23:87:68:ca:68:d9:8d: 49:96:dd:2e:70:47:4a:a4:93:3c:ec:46:fe:67:87:7a:4f:96: 08:f1:78:93:5f:d9:02:55:a2:9f:e0:7f:44:19:25:cb:48:18: f5:74:a5:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppizbKz3RnQc3JNqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk YmZiOWM0ZjEtOGYyOC00MWE1LTk4YzgtMDI5NTQ0NDMyY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpcB/l5GemApjnqsrr+SoOMB2YpvffjLfBoL IuWGvgDxuKYAFjArz0Ywcl5ohRv2/19x0C7JboERHPhSYLa/mDPuobX9z9jCBKPw 7tG75Sa1lNACLSKYKVI65YF6YHCKTx6hYAamTpaLU96bn9ZqHi6uc8REjJIrP8k4 Odmp6w1DbfMpHqDEuUdkjdExvJeiWgh9IYpkytqeLcb25KApOu/aKtIj2A0VCmg8 xljQU50DZULaOSDshOP0uNbR3HjJ4xVTRby5AE1mZm0aFL42KurCN3BtKDzm6hMo a6c/b/PWKV9idfD5zAdbjJNkCBDEgvlYvj6M4lKIZjDncEWHmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoFcWHe1c/GBRChm0eJ6f2aUwPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWY3ZDg4ZDQtZjdkZC0z NjFhLTg5MGQtYTRmNDU5MGI3ZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrHhqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhYVfJw4WfolY1ohdc6IygBUFg3H8vryR48lOD4PveDvYAYbJGolpcp fLTmlJ4LoU+t/y+UFshcdD8bWW0+R+4TtEGMdB1IX3APQ4JV5bMZB/THWU6A7jX1 bGcvONzk+90sn7Kqv1p76ojpgq4Fr53r3ADfY7qfAoauuUbJ/oLZpGZJjzKPc4bN iUtFfqDWnkeXyHzWwbFXdhS83Djk1Wtk7vxBz50NhrwEKeU0997BPTMGzjWi7VM4 M0osZyF7e46kY62aAW0BAHiA3Ow/hP3fI4doymjZjUmW3S5wR0qkkzzsRv5nh3pP lgjxeJNf2QJVop/gf0QZJctIGPV0pag= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:43 2025 by rpki-client