$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/997e8878-75de-3251-993f-c0be3a4fb314.roa File: 997e8878-75de-3251-993f-c0be3a4fb314.roa (raw, json) Hash identifier: EkRoE8krNGQ8BeagAJzePAt+pO3xd1HWyGF1ooOc8gE= Subject key identifier: 8D:AD:9C:3D:46:50:CA:26:06:72:A2:57:CE:F5:5A:2F:4A:80:0F:0A Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B758CB0D5514611BF71BD12C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/997e8878-75de-3251-993f-c0be3a4fb314.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 212238 IP address blocks: 172.121.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:b0:d5:51:46:11:bf:71:bd:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=e37682da-26ec-48e4-8a61-0ee0234e8652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:0b:01:8b:ba:8c:f0:bd:a1:08:54:86:6d: bb:0b:e5:c6:90:97:dd:45:e3:b3:b4:cc:ca:7e:04: a1:f4:02:8f:1f:45:74:3d:b2:5d:49:b6:b0:16:92: fa:3b:74:5d:27:91:31:90:df:3b:7b:e7:c9:04:6e: bf:c2:64:95:d8:65:c9:54:15:e7:f2:3c:01:d8:97: 65:e0:f0:f1:ec:62:01:b9:94:50:00:0d:65:2f:e6: dc:78:bc:fd:10:71:fd:f5:bf:88:77:de:8e:24:4b: fd:19:85:1e:0f:78:31:38:5b:b0:5b:c2:70:dd:f2: 9f:69:a9:55:e7:19:be:6e:72:2f:5b:49:15:61:29: 34:b3:e0:18:41:69:ce:af:ba:06:78:e1:45:28:d3: 7e:71:2d:d3:5e:14:d2:af:e7:5f:ee:4f:2f:5e:db: 5a:fa:d8:6c:4f:77:4d:f7:eb:92:29:7b:e0:29:d3: d9:8d:3f:ae:75:44:bb:2c:e9:ed:61:ba:be:62:2a: 54:7b:a3:f5:2b:9f:13:9d:3b:ee:e4:cd:21:77:d5: 0f:ac:08:27:0b:2b:70:95:af:fc:7b:3b:2e:db:e8: 21:1f:89:ec:de:5b:71:2d:c6:c3:d1:52:f9:0b:1f: 1c:a7:1a:59:7e:76:50:52:27:b5:2e:48:28:5a:3b: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AD:9C:3D:46:50:CA:26:06:72:A2:57:CE:F5:5A:2F:4A:80:0F:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/997e8878-75de-3251-993f-c0be3a4fb314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f6:de:99:4d:08:17:07:be:24:a0:4d:74:a8:34:ef:90:87: 84:19:36:35:7d:ad:67:84:5d:63:a3:74:cb:13:5f:ad:c8:66: 64:cd:29:b7:81:97:2f:68:28:08:c6:9f:e2:68:4a:6c:83:ca: ff:90:ae:f1:32:c0:92:46:c7:90:23:13:28:7d:06:ff:ef:ac: 23:a5:39:e0:0f:8c:fc:49:6b:6e:46:45:e3:9a:29:38:df:b0: c1:14:aa:0d:10:f5:b3:f7:d4:82:7c:1f:98:a4:98:e3:e7:dd: b4:9b:bd:4a:9f:65:12:94:a9:79:b1:26:b7:02:d6:ea:86:0b: af:be:60:4c:37:c0:92:2c:88:32:f1:d6:68:2a:92:1d:6c:3a: 6e:16:03:ac:d8:a8:12:ff:9d:54:46:ce:c2:87:94:e1:ea:0e: 49:dc:8f:e7:12:07:8f:5c:0a:81:16:2f:06:02:e7:f7:2b:1e: 5c:7e:ef:5f:a9:6b:a1:92:73:8a:78:fc:fd:51:5a:b6:24:14: c1:07:d3:62:3b:0c:69:fa:6a:f0:a0:bd:82:12:04:b7:f1:c9: 78:08:eb:d5:df:e3:e1:e6:b6:85:f4:ac:d9:bf:62:92:7e:6e: 77:a6:59:ba:eb:61:2a:53:61:b3:28:47:c9:00:27:94:90:aa: 7b:31:08:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jLDVUUYRv3G9EsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk ZTM3NjgyZGEtMjZlYy00OGU0LThhNjEtMGVlMDIzNGU4NjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj4LAYu6jPC9oQhUhm27C+XGkJfdReOztMzK fgSh9AKPH0V0PbJdSbawFpL6O3RdJ5ExkN87e+fJBG6/wmSV2GXJVBXn8jwB2Jdl 4PDx7GIBuZRQAA1lL+bceLz9EHH99b+Id96OJEv9GYUeD3gxOFuwW8Jw3fKfaalV 5xm+bnIvW0kVYSk0s+AYQWnOr7oGeOFFKNN+cS3TXhTSr+df7k8vXtta+thsT3dN 9+uSKXvgKdPZjT+udUS7LOntYbq+YipUe6P1K58TnTvu5M0hd9UPrAgnCytwla/8 ezsu2+ghH4ns3ltxLcbD0VL5Cx8cpxpZfnZQUie1LkgoWjsehwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2tnD1GUMomBnKiV871Wi9KgA8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTk3ZTg4NzgtNzVkZS0z MjUxLTk5M2YtYzBiZTNhNGZiMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI723plNCBcHviSgTXSoNO+Qh4QZNjV9rWeEXWOjdMsTX63IZmTNKbeB ly9oKAjGn+JoSmyDyv+QrvEywJJGx5AjEyh9Bv/vrCOlOeAPjPxJa25GReOaKTjf sMEUqg0Q9bP31IJ8H5ikmOPn3bSbvUqfZRKUqXmxJrcC1uqGC6++YEw3wJIsiDLx 1mgqkh1sOm4WA6zYqBL/nVRGzsKHlOHqDkncj+cSB49cCoEWLwYC5/crHlx+71+p a6GSc4p4/P1RWrYkFMEH02I7DGn6avCgvYISBLfxyXgI69Xf4+HmtoX0rNm/YpJ+ bnemWbrrYSpTYbMoR8kAJ5SQqnsxCJY= -----END CERTIFICATE-----Generated at Sat Oct 11 11:16:12 2025 by rpki-client