$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad25f69e-4ed2-3373-bab8-ca9c1f94c3b1.roa File: ad25f69e-4ed2-3373-bab8-ca9c1f94c3b1.roa (raw, json) Hash identifier: YHuyLBv8NDu0awVdZJJ/EeBloIZpEGSg+L9nWjpqLM8= Subject key identifier: 88:1D:79:08:8E:AF:BD:83:A4:26:22:A6:FF:C9:2B:0F:27:C1:1E:22 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B5F3777E66AD8E8C796C85D40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad25f69e-4ed2-3373-bab8-ca9c1f94c3b1.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 3257 IP address blocks: 172.121.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:77:e6:6a:d8:e8:c7:96:c8:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=3cc24ed6-e042-49a5-bd62-7b8b095c98ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:e2:81:9b:de:9d:5b:e5:5c:6f:cd:f5:25: cd:c1:62:9d:8e:05:8f:0a:8b:c7:f1:48:f0:a8:99: 8c:be:61:3e:f7:3f:cd:cb:d4:85:49:62:ee:82:b7: 4d:cf:75:e1:3d:94:8b:59:6a:61:61:c3:be:a5:86: 76:6d:69:d9:7c:8f:1b:d2:25:83:c2:79:ca:c9:0c: d0:c2:dc:94:f3:37:5f:26:d4:f2:f8:f5:29:59:60: df:f0:42:b4:55:72:1e:e4:b8:4c:7d:47:ea:3b:e2: 4c:c1:5b:ec:5d:7a:c2:fa:d5:59:61:9e:24:2f:e9: 51:34:02:6b:4d:f6:31:95:1f:f3:55:63:bd:23:a4: 64:62:25:3e:f3:b4:c6:7d:1b:e7:bc:23:64:04:73: 25:cc:1c:12:ae:ec:e9:3e:5e:93:0c:73:39:5a:e8: a2:f6:83:e4:67:05:83:58:05:54:8c:11:7d:0c:2a: 9d:9e:c0:88:08:90:cc:b2:f1:2f:c7:5e:24:f8:96: 3c:ec:96:eb:4f:86:6a:65:4d:3f:de:5c:fc:cb:11: df:f8:2c:b1:29:e4:5f:9f:8e:1c:8d:c7:b4:e4:18: 5d:62:14:06:fd:04:c4:2f:36:29:dd:7b:d5:46:5d: 9c:5b:b2:1c:68:5a:9c:50:6b:75:73:89:1c:15:4c: 78:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1D:79:08:8E:AF:BD:83:A4:26:22:A6:FF:C9:2B:0F:27:C1:1E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad25f69e-4ed2-3373-bab8-ca9c1f94c3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:86:98:7c:a5:ab:82:fe:96:26:35:f6:64:f4:04:0a:0a:3a: be:f1:03:7e:23:32:8f:99:fb:4a:2e:cf:1b:12:e6:5e:a9:af: 93:de:60:16:db:20:5c:85:74:0f:42:eb:89:1b:29:16:bf:cd: 2b:73:01:96:75:41:43:20:06:a6:a8:b0:39:a0:87:b3:98:30: 05:7f:1d:18:ed:07:c1:e8:ea:bd:ea:70:31:07:2e:60:72:f9: 59:81:f6:37:37:f6:b0:2e:57:e2:80:8f:5a:8f:a6:3b:8e:5c: c2:25:cf:73:f1:29:81:50:3a:db:83:68:c5:2b:cf:c6:92:a8: 94:11:b9:7b:f7:41:9c:01:42:ee:1b:4d:b5:c6:7e:09:70:82: 88:99:54:c0:48:8a:1a:fe:fa:24:64:c4:36:4e:1b:1c:13:ba: bb:0c:4d:0a:15:c9:ef:50:1c:79:72:c1:c4:5b:69:0a:5c:cc: c3:da:2e:62:3c:6a:d3:1e:4d:f4:a3:7e:6c:5c:23:ab:d2:44: 35:41:d5:f8:2a:3f:1c:30:0f:d0:0a:9b:c6:06:7d:55:7c:c7: 7f:69:90:28:e9:c8:0e:83:9f:da:b0:41:ae:f4:69:ac:8e:42: c0:23:23:51:e3:cf:c8:2e:3e:31:c3:18:82:88:72:86:95:32: 1e:a4:eb:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3fmatjox5bIXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk M2NjMjRlZDYtZTA0Mi00OWE1LWJkNjItN2I4YjA5NWM5OGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhXigZvenVvlXG/N9SXNwWKdjgWPCovH8Ujw qJmMvmE+9z/Ny9SFSWLugrdNz3XhPZSLWWphYcO+pYZ2bWnZfI8b0iWDwnnKyQzQ wtyU8zdfJtTy+PUpWWDf8EK0VXIe5LhMfUfqO+JMwVvsXXrC+tVZYZ4kL+lRNAJr TfYxlR/zVWO9I6RkYiU+87TGfRvnvCNkBHMlzBwSruzpPl6TDHM5Wuii9oPkZwWD WAVUjBF9DCqdnsCICJDMsvEvx14k+JY87JbrT4ZqZU0/3lz8yxHf+CyxKeRfn44c jce05BhdYhQG/QTELzYp3XvVRl2cW7IcaFqcUGt1c4kcFUx4yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgdeQiOr72DpCYipv/JKw8nwR4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWQyNWY2OWUtNGVkMi0z MzczLWJhYjgtY2E5YzFmOTRjM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrHnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiGmHylq4L+liY19mT0BAoKOr7xA34jMo+Z+0ouzxsS5l6pr5PeYBbb IFyFdA9C64kbKRa/zStzAZZ1QUMgBqaosDmgh7OYMAV/HRjtB8Ho6r3qcDEHLmBy +VmB9jc39rAuV+KAj1qPpjuOXMIlz3PxKYFQOtuDaMUrz8aSqJQRuXv3QZwBQu4b TbXGfglwgoiZVMBIihr++iRkxDZOGxwTursMTQoVye9QHHlywcRbaQpczMPaLmI8 atMeTfSjfmxcI6vSRDVB1fgqPxwwD9AKm8YGfVV8x39pkCjpyA6Dn9qwQa70aayO QsAjI1Hjz8guPjHDGIKIcoaVMh6k63g= -----END CERTIFICATE-----Generated at Sat Oct 11 11:08:57 2025 by rpki-client