$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89a0c1b0-44ff-3184-9265-1815a0a495b2.roa File: 89a0c1b0-44ff-3184-9265-1815a0a495b2.roa (raw, json) Hash identifier: EbA0Br1lu8IOsKiGQKbZW52Y+D9TBpDs6JgQOPLhQoY= Subject key identifier: 22:CE:41:AF:5A:AE:7B:5E:5E:B6:EA:59:18:13:62:BE:F8:D3:FC:CC Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B6D2CC0E7285CC007AD2F9220 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89a0c1b0-44ff-3184-9265-1815a0a495b2.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 6939 IP address blocks: 172.120.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:c0:e7:28:5c:c0:07:ad:2f:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=cb5cd3c5-a31f-463a-b4b7-a31de54b2b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:58:e4:b8:9f:25:97:7a:b1:86:71:92:dc: 30:e7:8b:ea:7f:22:d8:63:06:7d:fa:b6:76:db:7d: 01:2f:80:8c:4e:7f:4b:69:3c:bd:5e:d6:69:3c:94: 35:22:a2:96:f9:3a:46:24:b3:d2:ab:72:f4:23:4e: 96:d6:76:0c:34:78:e2:d5:e4:f3:86:2b:0d:44:ed: 5a:82:49:53:38:2d:6c:bf:f9:7c:7b:1d:ee:a1:54: ef:be:fc:f0:1d:ac:e7:68:c1:2d:a5:38:90:82:b2: 20:3a:fc:59:62:5e:38:7d:fc:b8:5b:f1:ae:fc:ef: 7f:31:73:d6:47:74:37:96:b4:cf:6e:02:08:83:84: da:f2:3b:96:59:8c:c0:90:0d:05:7b:f6:b0:61:2a: 8e:67:71:18:d9:a9:cb:4a:54:fc:d0:50:7a:79:81: 09:40:15:1c:11:7e:4a:21:20:e3:0c:50:0a:1e:35: d3:26:db:59:99:cc:f6:21:82:48:bc:ef:1c:38:f9: 4c:35:13:53:bd:c7:18:4f:3c:b9:82:69:92:9c:59: f3:98:73:cb:f0:90:51:e4:dc:7a:52:2f:99:69:f7: 0a:dd:fc:9f:0d:eb:b0:7e:62:d5:74:f7:83:13:d7: f3:a9:a2:67:2b:bb:9a:db:f0:2f:d1:c1:46:65:8d: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CE:41:AF:5A:AE:7B:5E:5E:B6:EA:59:18:13:62:BE:F8:D3:FC:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/89a0c1b0-44ff-3184-9265-1815a0a495b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e4:d9:f0:9a:1d:1a:d5:e8:2d:f5:36:22:0f:02:79:7e:07: 1f:22:25:ee:5f:61:10:18:a9:3d:19:8d:2f:32:20:86:e4:1f: 95:52:b9:35:31:ca:d6:09:47:fe:39:dd:4c:61:fd:fa:cc:72: a4:d6:91:3b:79:dd:75:0e:5e:9d:2e:0b:8c:f4:7d:d2:11:1e: 3b:ec:2f:1a:a2:79:4e:b3:da:f9:fa:fd:86:59:62:0c:09:45: 5a:fa:5f:49:6f:c5:3c:70:4f:1c:5b:58:53:4e:8b:ba:b3:64: 8a:8f:b3:a3:3d:33:50:0f:db:62:92:39:c3:29:f2:dd:a2:0f: 85:e2:42:e8:d4:40:b4:32:b7:b9:bb:27:32:2b:2f:b7:b2:84: ec:94:58:20:72:7c:b1:af:3e:cc:65:83:a6:b1:75:c6:d8:f7: 05:91:88:2b:c2:e8:11:30:0c:6b:8f:f4:36:cf:29:5e:43:7b: 61:21:c7:75:2c:c8:8c:b3:7a:0a:90:ec:39:20:c2:09:11:55: d3:84:6c:cf:10:cb:e0:97:bc:65:8c:fe:45:bd:a1:f4:66:52: 3d:81:cf:e4:7a:95:e9:86:22:04:5a:fd:26:af:9e:bc:be:01: 23:2e:71:f7:91:94:44:6f:ad:07:31:1c:2b:c4:62:3a:83:cd: ac:0b:c2:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLMDnKFzAB60vkiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Y2I1Y2QzYzUtYTMxZi00NjNhLWI0YjctYTMxZGU1NGIyYjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4NY5LifJZd6sYZxktww54vqfyLYYwZ9+rZ2 230BL4CMTn9LaTy9XtZpPJQ1IqKW+TpGJLPSq3L0I06W1nYMNHji1eTzhisNRO1a gklTOC1sv/l8ex3uoVTvvvzwHaznaMEtpTiQgrIgOvxZYl44ffy4W/Gu/O9/MXPW R3Q3lrTPbgIIg4Ta8juWWYzAkA0Fe/awYSqOZ3EY2anLSlT80FB6eYEJQBUcEX5K ISDjDFAKHjXTJttZmcz2IYJIvO8cOPlMNRNTvccYTzy5gmmSnFnzmHPL8JBR5Nx6 Ui+ZafcK3fyfDeuwfmLVdPeDE9fzqaJnK7ua2/Av0cFGZY3PfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLOQa9arnteXrbqWRgTYr740/zMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODlhMGMxYjAtNDRmZi0z MTg0LTkyNjUtMTgxNWEwYTQ5NWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHh7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILk2fCaHRrV6C31NiIPAnl+Bx8iJe5fYRAYqT0ZjS8yIIbkH5VSuTUx ytYJR/453Uxh/frMcqTWkTt53XUOXp0uC4z0fdIRHjvsLxqieU6z2vn6/YZZYgwJ RVr6X0lvxTxwTxxbWFNOi7qzZIqPs6M9M1AP22KSOcMp8t2iD4XiQujUQLQyt7m7 JzIrL7eyhOyUWCByfLGvPsxlg6axdcbY9wWRiCvC6BEwDGuP9DbPKV5De2Ehx3Us yIyzegqQ7DkgwgkRVdOEbM8Qy+CXvGWM/kW9ofRmUj2Bz+R6lemGIgRa/Savnry+ ASMucfeRlERvrQcxHCvEYjqDzawLwiQ= -----END CERTIFICATE-----Generated at Sat Oct 11 11:14:53 2025 by rpki-client