$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa File: bf31a503-22e3-31bb-9673-5e2012cffa6c.roa (raw, json) Hash identifier: Zy0jaTjRjL02rAyQfFFdt/KidgC7O3N3GvRMkLAbkfg= Subject key identifier: E6:87:80:FF:C6:1F:DD:05:3E:49:A8:B6:0C:51:80:98:E8:AF:F6:63 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4A471226A2E982530F57ED40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 18779 IP address blocks: 172.121.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:12:26:a2:e9:82:53:0f:57:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=bf560485-0f3c-4621-ae18-539e6636acfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:bd:2a:47:11:8a:e4:01:12:71:10:f0:b2: 18:d0:f7:ad:23:24:72:3a:ff:bc:0a:56:48:09:ed: c1:f2:63:ab:5c:d0:93:18:d6:6b:02:29:eb:54:be: 5e:bb:bd:93:e8:7c:20:32:fb:89:44:dc:e3:68:4c: 6a:b8:05:0a:1d:dd:65:26:54:0c:e6:9f:36:67:50: 20:a8:b3:35:6d:1a:14:3c:66:2e:6e:c3:4f:d0:f5: 57:0b:14:93:95:ba:fb:93:1e:99:da:2e:80:0b:45: 9b:9f:11:9b:c0:23:8d:e5:d4:53:63:3b:a8:57:f1: c5:8c:48:d6:b3:e1:f5:66:8d:97:ee:f2:cb:76:da: ba:d9:07:22:7a:1f:ec:f2:00:e0:36:eb:7c:fa:b2: 72:eb:fe:3e:9b:6a:d6:26:0d:b5:f1:91:9b:36:b0: 32:61:ec:36:bb:b1:d7:5a:c4:0f:fc:f7:e6:c6:4b: 50:14:22:53:92:c2:e5:62:98:c8:c8:7b:a6:f3:53: 00:d6:f3:2a:b2:d9:1c:0e:79:f5:47:7e:39:02:2a: b5:1b:56:c4:0a:9a:f5:62:dc:07:7d:2c:cb:88:cc: 45:b2:ae:70:70:85:c7:b4:9e:fd:2f:72:cc:4d:f7: 15:d6:09:ef:31:f7:82:af:6e:fa:0a:c1:23:54:ef: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:87:80:FF:C6:1F:DD:05:3E:49:A8:B6:0C:51:80:98:E8:AF:F6:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e9:96:e5:be:0b:4e:46:2b:12:2c:43:d7:26:06:e6:b4:cc: d3:05:83:35:22:03:4f:b8:f0:c5:46:c6:a8:41:fc:53:be:88: 37:56:20:f5:4a:4a:58:9e:f1:97:b2:67:07:22:06:81:a0:a5: 14:12:0a:58:e5:53:43:9f:a9:d8:19:8f:0a:05:e2:e2:23:95: 3e:1e:05:46:03:70:0d:04:6d:19:51:ab:fc:0f:bf:a3:4f:f2: 4f:1c:fc:c1:2e:ac:b1:e4:df:65:06:d1:e1:0f:b6:96:2a:0a: c8:b4:09:cf:44:89:ee:1b:b7:77:42:2c:df:4a:64:5e:98:69: 31:58:3b:83:e3:23:60:6c:4d:7f:17:97:84:46:79:c6:e2:9a: 48:23:b7:50:89:22:54:3c:51:83:9f:22:44:13:87:53:9f:73: 0c:e5:d1:13:a6:25:58:59:78:95:68:03:77:69:41:0e:a1:9e: 7e:67:96:7c:53:1e:ab:53:30:54:bc:9d:89:b5:82:1d:98:19: e5:30:e7:32:bd:d6:47:87:06:20:a6:41:5c:9e:cc:ee:0f:ea: d6:c1:fc:78:af:91:b5:01:be:ad:b6:da:a6:66:59:41:ec:41: f4:b2:25:2b:56:00:2b:6c:53:d7:7a:0f:43:91:7f:94:9d:b3: 95:6a:2f:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxImoumCUw9X7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YmY1NjA0ODUtMGYzYy00NjIxLWFlMTgtNTM5ZTY2MzZhY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4W9KkcRiuQBEnEQ8LIY0PetIyRyOv+8ClZI Ce3B8mOrXNCTGNZrAinrVL5eu72T6HwgMvuJRNzjaExquAUKHd1lJlQM5p82Z1Ag qLM1bRoUPGYubsNP0PVXCxSTlbr7kx6Z2i6AC0WbnxGbwCON5dRTYzuoV/HFjEjW s+H1Zo2X7vLLdtq62Qcieh/s8gDgNut8+rJy6/4+m2rWJg218ZGbNrAyYew2u7HX WsQP/PfmxktQFCJTksLlYpjIyHum81MA1vMqstkcDnn1R345Aiq1G1bECpr1YtwH fSzLiMxFsq5wcIXHtJ79L3LMTfcV1gnvMfeCr276CsEjVO9JNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaHgP/GH90FPkmotgxRgJjor/ZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmYzMWE1MDMtMjJlMy0z MWJiLTk2NzMtNWUyMDEyY2ZmYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrHliMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfpluW+C05GKxIsQ9cmBua0zNMFgzUiA0+48MVGxqhB/FO+iDdWIPVK Slie8ZeyZwciBoGgpRQSCljlU0OfqdgZjwoF4uIjlT4eBUYDcA0EbRlRq/wPv6NP 8k8c/MEurLHk32UG0eEPtpYqCsi0Cc9Eie4bt3dCLN9KZF6YaTFYO4PjI2BsTX8X l4RGecbimkgjt1CJIlQ8UYOfIkQTh1Ofcwzl0ROmJVhZeJVoA3dpQQ6hnn5nlnxT HqtTMFS8nYm1gh2YGeUw5zK91keHBiCmQVyezO4P6tbB/HivkbUBvq222qZmWUHs QfSyJStWACtsU9d6D0ORf5Sds5VqL4w= -----END CERTIFICATE-----Generated at Sat Oct 11 11:16:10 2025 by rpki-client