$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/654d27da-ae1e-30ee-9179-970db9dc069a.roa File: 654d27da-ae1e-30ee-9179-970db9dc069a.roa (raw, json) Hash identifier: MYJQo/S4WVKuY/St3gr8EZCiBjnjy9BPfvJHLZrcKHs= Subject key identifier: DC:0C:3D:B5:8C:14:E8:A3:54:5C:8E:31:BC:9C:FA:44:FB:78:AB:C8 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B1AD1B0757A5D04B6734CBD00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/654d27da-ae1e-30ee-9179-970db9dc069a.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 151373 IP address blocks: 172.121.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b0:75:7a:5d:04:b6:73:4c:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=5a7abe4b-309b-4d82-97a5-97fc0e4a3431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:b6:b9:2a:67:90:70:e0:60:4e:c9:89:7d: 26:f5:2e:e8:8e:69:24:0a:c9:4a:7c:b7:f3:05:1a: 67:43:f9:2f:b2:f4:bd:db:7d:af:10:b1:91:bb:96: 84:98:cc:72:94:93:36:85:a0:73:b0:85:b2:c7:08: 7e:e3:4b:a8:b2:a6:e7:79:50:69:1e:91:3a:c1:bb: dc:77:a7:4f:da:63:4c:f5:6b:4e:13:1b:84:b4:14: a7:ed:c1:f7:5b:ed:ab:cc:6e:75:45:18:a8:5c:af: 7f:c5:e1:dd:e8:db:48:17:60:df:ae:dd:e7:23:35: e6:3e:97:78:57:d0:65:58:79:b3:0a:61:cd:b0:d7: 13:7e:79:8e:bf:fc:35:91:5c:14:0c:b8:26:63:9a: fa:a5:34:e3:e1:9a:00:6a:97:84:0a:c2:e0:3b:7f: d2:45:ad:32:65:86:59:60:22:40:5f:5a:a7:33:f3: a0:1c:e3:f2:6f:c9:54:05:d3:67:d9:10:6e:45:6d: 83:84:11:a6:6f:ce:80:78:22:6b:52:16:30:d0:11: 81:5e:16:ca:d6:89:6e:43:39:ef:60:00:11:eb:e7: 88:57:4d:a8:25:1c:e8:e1:5a:4a:07:d7:93:a4:7c: bf:6d:f3:21:e9:73:d7:41:14:2a:a0:55:28:89:f8: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0C:3D:B5:8C:14:E8:A3:54:5C:8E:31:BC:9C:FA:44:FB:78:AB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/654d27da-ae1e-30ee-9179-970db9dc069a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:85:71:90:5c:f6:9a:10:1a:62:54:3c:dd:17:6c:87:b4:e8: 37:ea:2b:4e:98:19:0a:d4:73:a4:8f:44:20:73:4c:29:93:3d: 76:f4:be:e5:6c:98:7c:41:33:b2:a3:fe:fb:3a:fb:4e:41:f0: 09:a9:5e:08:53:91:38:37:c2:0c:3b:80:db:36:f6:ab:40:0e: 77:ff:83:25:9d:71:09:b5:65:c2:fc:21:e8:74:2a:c8:bc:61: e7:d0:05:ed:1f:e7:f4:3b:c6:d1:15:31:b6:b0:56:28:b3:26: 1c:18:2a:3f:28:02:92:86:6f:f5:59:fb:06:03:ce:bb:29:d9: bb:c7:9e:d3:21:11:2d:a6:45:ac:ca:76:88:9b:2a:e8:4c:5b: bc:c9:57:06:df:dd:8b:3c:9a:bd:1c:b1:a4:94:35:c8:08:42: e5:fc:63:59:7d:87:5d:e9:10:11:fd:08:fa:12:ce:d1:aa:f6: 65:f2:0c:5e:96:a7:15:df:a3:a2:b5:c4:96:de:16:19:94:db: 2a:a5:83:7c:81:41:68:73:b9:ec:1b:05:95:35:a0:05:79:97: 84:09:ed:b9:50:67:71:56:a1:b8:44:f7:58:e9:68:ae:cc:b4: 19:23:b4:a1:04:f5:96:ab:4e:04:11:6d:db:a1:e0:4f:8b:12: 62:af:93:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0bB1el0EtnNMvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NWE3YWJlNGItMzA5Yi00ZDgyLTk3YTUtOTdmYzBlNGEzNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0C2uSpnkHDgYE7JiX0m9S7ojmkkCslKfLfz BRpnQ/kvsvS9232vELGRu5aEmMxylJM2haBzsIWyxwh+40uosqbneVBpHpE6wbvc d6dP2mNM9WtOExuEtBSn7cH3W+2rzG51RRioXK9/xeHd6NtIF2Dfrt3nIzXmPpd4 V9BlWHmzCmHNsNcTfnmOv/w1kVwUDLgmY5r6pTTj4ZoAapeECsLgO3/SRa0yZYZZ YCJAX1qnM/OgHOPyb8lUBdNn2RBuRW2DhBGmb86AeCJrUhYw0BGBXhbK1oluQznv YAAR6+eIV02oJRzo4VpKB9eTpHy/bfMh6XPXQRQqoFUoifjXmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwMPbWMFOijVFyOMbyc+kT7eKvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjU0ZDI3ZGEtYWUxZS0z MGVlLTkxNzktOTcwZGI5ZGMwNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiFcZBc9poQGmJUPN0XbIe06DfqK06YGQrUc6SPRCBzTCmTPXb0vuVs mHxBM7Kj/vs6+05B8AmpXghTkTg3wgw7gNs29qtADnf/gyWdcQm1ZcL8Ieh0Ksi8 YefQBe0f5/Q7xtEVMbawViizJhwYKj8oApKGb/VZ+wYDzrsp2bvHntMhES2mRazK doibKuhMW7zJVwbf3Ys8mr0csaSUNcgIQuX8Y1l9h13pEBH9CPoSztGq9mXyDF6W pxXfo6K1xJbeFhmU2yqlg3yBQWhzuewbBZU1oAV5l4QJ7blQZ3FWobhE91jpaK7M tBkjtKEE9ZarTgQRbduh4E+LEmKvkxU= -----END CERTIFICATE-----Generated at Sat Oct 11 11:16:03 2025 by rpki-client