$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ca73998-711f-3d33-9a8d-d42cf65180b4.roa File: 8ca73998-711f-3d33-9a8d-d42cf65180b4.roa (raw, json) Hash identifier: oN76G3nsaegj1eM1CvaGGQCkMxuls1sNloN0T6pw248= Subject key identifier: AD:F4:23:1E:27:87:6A:C8:CF:21:71:D9:0D:D7:2F:5A:B1:0F:FD:23 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4A4732FD01F3011B212C1E00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ca73998-711f-3d33-9a8d-d42cf65180b4.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 18779 IP address blocks: 172.121.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:32:fd:01:f3:01:1b:21:2c:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=7006b29a-cb01-448f-a11f-fcb3d5fce3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ff:f2:1c:52:4b:f0:50:17:8b:45:29:08:74: 64:75:12:36:39:81:3b:a6:83:67:51:36:99:f5:46: c8:40:93:f3:0c:45:92:94:c5:50:56:08:48:7e:5f: ac:fd:03:f2:84:e7:fc:3f:50:e0:85:ae:20:05:6d: a2:30:48:f3:78:36:cc:45:a0:1b:44:98:4c:c9:6f: a9:65:1c:a9:2f:70:a2:35:39:88:04:01:66:5b:12: 3d:d6:8b:06:20:41:4e:88:50:45:fc:31:7c:2e:dc: d9:dc:33:f2:1c:3b:ef:9a:e5:69:08:83:52:83:98: db:77:cf:ff:c1:0b:a5:c7:0c:6d:e8:a3:f6:9d:ea: a8:1e:07:9d:4f:d5:80:12:7a:22:b1:a3:78:43:a5: fb:61:12:3c:8c:fe:49:7e:ed:bb:1a:84:1c:af:d5: 85:13:3c:18:be:72:ff:39:6a:a0:38:10:ba:f4:d2: 95:c1:a4:fd:80:d4:82:24:9f:f6:98:bd:5f:74:79: 27:e3:99:0c:4e:d3:2c:ef:0a:c0:8c:bd:19:29:a9: 22:06:7b:a9:66:42:ce:e6:77:66:7a:d6:8a:5c:f3: 36:e3:ef:8e:b0:07:c1:f5:f9:0c:3c:c9:4b:60:7d: 16:00:0b:c5:86:4d:77:10:a0:e6:58:0d:58:9e:55: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F4:23:1E:27:87:6A:C8:CF:21:71:D9:0D:D7:2F:5A:B1:0F:FD:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ca73998-711f-3d33-9a8d-d42cf65180b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d9:36:46:82:80:d9:e1:82:18:bb:dc:42:67:2c:4b:de:cb: f5:17:85:53:3c:af:63:82:29:f8:97:9c:fa:40:98:a3:d3:da: 65:f7:68:a9:d5:92:fa:30:7b:32:c9:b4:83:d8:fa:02:bf:c8: ec:d2:02:ca:9d:81:f9:ed:2e:16:93:51:46:c4:36:b7:c2:d2: 4b:f0:d5:4e:0b:57:17:4d:b0:04:ff:49:fd:90:30:fa:04:ac: e6:03:96:66:6f:e2:2f:61:05:e7:b9:aa:69:ae:e1:78:89:21: db:fa:56:da:f1:da:39:91:50:c1:9c:da:50:46:2b:43:3e:76: fe:df:8b:82:7f:a6:94:11:c2:52:fe:0a:68:31:cb:e0:a6:31: c8:03:e9:c3:44:b6:59:d5:d8:b4:8e:bb:9b:f8:4c:03:6c:d4: 0f:70:fe:75:cc:08:4f:26:9c:33:ee:fc:b3:73:22:6a:f6:f9: fc:25:52:a4:ee:c3:60:4c:a3:01:9b:e2:2c:20:4c:c9:a2:4b: 82:c1:93:21:70:78:27:e0:eb:68:8e:38:3b:85:3b:fd:68:6b: 6c:f9:c2:9e:87:85:9b:a2:cb:ea:1a:95:cd:7b:28:09:23:27: e8:ad:61:81:41:d1:bf:bd:2a:dd:ca:40:43:21:3c:8c:68:a6: 5a:a5:33:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzL9AfMBGyEsHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NzAwNmIyOWEtY2IwMS00NDhmLWExMWYtZmNiM2Q1ZmNlM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf/yHFJL8FAXi0UpCHRkdRI2OYE7poNnUTaZ 9UbIQJPzDEWSlMVQVghIfl+s/QPyhOf8P1Dgha4gBW2iMEjzeDbMRaAbRJhMyW+p ZRypL3CiNTmIBAFmWxI91osGIEFOiFBF/DF8LtzZ3DPyHDvvmuVpCINSg5jbd8// wQulxwxt6KP2neqoHgedT9WAEnoisaN4Q6X7YRI8jP5Jfu27GoQcr9WFEzwYvnL/ OWqgOBC69NKVwaT9gNSCJJ/2mL1fdHkn45kMTtMs7wrAjL0ZKakiBnupZkLO5ndm etaKXPM24++OsAfB9fkMPMlLYH0WAAvFhk13EKDmWA1YnlVH1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK30Ix4nh2rIzyFx2Q3XL1qxD/0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGNhNzM5OTgtNzExZi0z ZDMzLTlhOGQtZDQyY2Y2NTE4MGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzZNkaCgNnhghi73EJnLEvey/UXhVM8r2OCKfiXnPpAmKPT2mX3aKnV kvowezLJtIPY+gK/yOzSAsqdgfntLhaTUUbENrfC0kvw1U4LVxdNsAT/Sf2QMPoE rOYDlmZv4i9hBee5qmmu4XiJIdv6Vtrx2jmRUMGc2lBGK0M+dv7fi4J/ppQRwlL+ Cmgxy+CmMcgD6cNEtlnV2LSOu5v4TANs1A9w/nXMCE8mnDPu/LNzImr2+fwlUqTu w2BMowGb4iwgTMmiS4LBkyFweCfg62iOODuFO/1oa2z5wp6HhZuiy+oalc17KAkj J+itYYFB0b+9Kt3KQEMhPIxoplqlM9o= -----END CERTIFICATE-----Generated at Sat Oct 11 11:08:46 2025 by rpki-client