$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6557cfa6-5f46-383d-8f20-9f76d0f9ffab.roa File: 6557cfa6-5f46-383d-8f20-9f76d0f9ffab.roa (raw, json) Hash identifier: BisD4Ns3FFm8bXAp+BzN0pJbBQNoOys3wZs2mv9m5N0= Subject key identifier: 24:B4:D1:9C:70:EE:E9:D2:E5:99:98:BB:6D:E8:D8:11:87:14:85:41 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B41E7246CCBC9A77C61C0BCD0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6557cfa6-5f46-383d-8f20-9f76d0f9ffab.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 400536 IP address blocks: 172.120.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:24:6c:cb:c9:a7:7c:61:c0:bc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=67679f86-f955-401a-9d93-5ef6774bcb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:3e:df:bd:2a:1b:24:b7:12:a7:48:1a:83: 4f:99:dd:90:17:0c:16:04:e0:3d:fb:dd:52:a5:22: 5a:7e:68:b9:c3:75:b4:e5:20:74:f8:60:97:c5:9c: 14:e1:a6:51:44:48:91:46:9c:50:a1:cb:22:f5:5b: d8:1a:44:cb:46:dd:3e:37:e4:e1:e0:ef:7f:9a:0a: 4f:40:ff:dc:d1:cc:6f:62:21:be:bb:fe:b7:99:b7: 9e:e1:25:93:0a:97:e6:6c:da:cb:69:8b:dc:5a:38: 8d:eb:01:e4:af:6c:46:ea:7f:e1:8e:d9:53:5d:35: 19:22:1f:bc:8f:1b:e8:6b:45:aa:81:e1:b2:77:17: 8f:5e:e1:89:2c:5b:4f:d9:ff:1a:24:ce:51:86:52: 13:69:67:d1:34:06:d3:38:dd:b9:30:6e:cd:d0:68: 0d:29:b7:e3:ef:94:03:19:d9:de:3c:c3:ca:10:fa: 55:50:e8:bc:ff:80:f5:9b:27:cd:db:99:5c:63:cf: a5:b2:20:e6:a4:b4:a2:73:0a:32:54:8d:d2:1c:80: 17:60:50:60:06:0b:cc:3d:2f:61:53:cc:66:64:32: 17:14:0d:d6:7b:33:e4:ca:10:72:99:28:8c:0a:1d: 45:71:90:78:74:d4:56:99:71:e0:84:b1:26:6a:59: ed:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B4:D1:9C:70:EE:E9:D2:E5:99:98:BB:6D:E8:D8:11:87:14:85:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6557cfa6-5f46-383d-8f20-9f76d0f9ffab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ce:af:f3:6b:5d:3d:2c:bf:40:4f:3f:d8:5a:34:6a:10:0e: d1:c6:17:02:1c:7d:fe:ed:dd:22:0c:0b:19:89:17:a2:e0:82: 7f:e9:de:c6:0d:62:e2:07:f7:45:36:75:38:5b:81:8f:f7:d1: ee:ed:87:89:1f:56:71:e7:f0:7b:64:7f:64:e6:1c:0e:d6:17: a7:56:9a:85:52:0a:10:6e:27:50:0e:84:02:b6:16:1e:05:37: e8:49:fe:4c:cf:81:c3:60:02:b8:3c:c2:68:f2:d6:d4:70:9a: a6:d5:a4:bc:88:8b:61:04:83:ec:8d:49:10:bd:fe:81:8a:1d: a4:00:e2:c8:28:8b:f2:38:e5:33:85:ed:1f:eb:1e:76:d0:a3: e3:66:8c:ea:e5:60:e2:f7:82:c7:08:dd:9a:8e:8b:98:4e:84: 12:61:90:c9:62:48:14:07:3d:ec:48:19:2a:ea:b9:e6:06:66: df:1a:8f:3b:90:a9:b0:54:e9:4f:52:3f:84:06:82:ee:2d:58: 8d:81:eb:2e:67:be:43:08:b9:b4:40:0f:f7:e3:16:59:fb:e5: 78:29:f4:0f:7b:07:ca:b3:78:7f:87:d9:37:24:68:43:ec:a2: 5b:e1:37:bd:2e:2f:7f:91:da:93:e3:63:8d:26:56:31:a2:c2: 23:c3:0f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yRsy8mnfGHAvNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk Njc2NzlmODYtZjk1NS00MDFhLTlkOTMtNWVmNjc3NGJjYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx4+370qGyS3EqdIGoNPmd2QFwwWBOA9+91S pSJafmi5w3W05SB0+GCXxZwU4aZRREiRRpxQocsi9VvYGkTLRt0+N+Th4O9/mgpP QP/c0cxvYiG+u/63mbee4SWTCpfmbNrLaYvcWjiN6wHkr2xG6n/hjtlTXTUZIh+8 jxvoa0WqgeGydxePXuGJLFtP2f8aJM5RhlITaWfRNAbTON25MG7N0GgNKbfj75QD GdnePMPKEPpVUOi8/4D1myfN25lcY8+lsiDmpLSicwoyVI3SHIAXYFBgBgvMPS9h U8xmZDIXFA3WezPkyhBymSiMCh1FcZB4dNRWmXHghLEmalntcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS00Zxw7unS5ZmYu23o2BGHFIVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjU1N2NmYTYtNWY0Ni0z ODNkLThmMjAtOWY3NmQwZjlmZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLOr/NrXT0sv0BPP9haNGoQDtHGFwIcff7t3SIMCxmJF6Lggn/p3sYN YuIH90U2dThbgY/30e7th4kfVnHn8Htkf2TmHA7WF6dWmoVSChBuJ1AOhAK2Fh4F N+hJ/kzPgcNgArg8wmjy1tRwmqbVpLyIi2EEg+yNSRC9/oGKHaQA4sgoi/I45TOF 7R/rHnbQo+NmjOrlYOL3gscI3ZqOi5hOhBJhkMliSBQHPexIGSrqueYGZt8ajzuQ qbBU6U9SP4QGgu4tWI2B6y5nvkMIubRAD/fjFln75Xgp9A97B8qzeH+H2TckaEPs olvhN70uL3+R2pPjY40mVjGiwiPDD8Q= -----END CERTIFICATE-----Generated at Sat Oct 11 13:04:52 2025 by rpki-client