$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c04953f0-0597-378a-a8a8-f3ba7fd2a30b.roa File: c04953f0-0597-378a-a8a8-f3ba7fd2a30b.roa (raw, json) Hash identifier: eUI/y26/p/C9Lxvf2tAiZ6KiWgCWAs1JiQAoxP4CyIY= Subject key identifier: 9E:12:47:BA:10:A8:E4:A6:BF:66:A5:5B:CE:34:91:56:7D:24:58:79 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B1AD1B30A4E53F56ED7CF7280 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c04953f0-0597-378a-a8a8-f3ba7fd2a30b.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 35554 IP address blocks: 172.121.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b3:0a:4e:53:f5:6e:d7:cf:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=b8945bea-957d-41ea-9560-39ec2c3b1bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:77:5c:2a:67:b2:a0:b4:4c:23:10:e1:b3:39: 2c:9a:88:74:f6:d3:0a:df:08:22:8d:83:73:f5:e9: dc:67:e5:2a:f9:06:bc:c1:44:ee:80:83:25:bd:f7: 82:35:9f:f8:45:9f:05:c4:78:8e:cf:1f:fa:de:35: f2:65:e4:cc:cd:e7:38:5e:b8:60:1e:57:27:94:80: 07:87:10:d3:b7:b2:42:d5:de:59:6c:88:1c:5b:83: 7f:36:9a:93:5e:1f:7c:cf:43:89:ae:fa:ca:23:3d: f7:6d:58:b9:8c:e5:7c:0a:03:28:9e:84:e9:50:50: 70:ff:71:7f:bf:e3:36:94:10:d8:f2:6d:ea:4d:af: 61:78:81:57:19:88:3c:be:eb:81:fa:2f:a6:42:b3: e5:e3:17:32:df:8e:f0:cf:64:7f:fd:7a:ae:df:ca: cf:22:77:69:80:00:35:ae:5d:a7:41:84:48:e0:54: 83:f9:0b:31:ca:b7:17:6e:39:54:78:d3:ef:e5:20: 1f:77:71:67:62:36:3f:d2:b5:ff:52:85:59:0d:c1: 80:3b:28:22:65:3a:03:fe:0a:d7:f3:6a:fb:33:a1: cf:51:4e:9d:35:3b:e2:c9:41:94:87:53:ad:f3:29: 6e:f8:d9:90:66:47:68:76:3a:e5:0b:19:b2:aa:ad: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:12:47:BA:10:A8:E4:A6:BF:66:A5:5B:CE:34:91:56:7D:24:58:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c04953f0-0597-378a-a8a8-f3ba7fd2a30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:8d:9c:26:b3:4d:27:d6:ab:db:3a:5a:4b:92:0f:b2:11:26: 7e:af:8a:d3:6f:3f:71:4d:9c:ac:d4:92:e2:d8:b8:48:52:71: 37:af:dd:d8:43:e8:a8:8f:7d:ca:56:eb:36:2c:80:61:6e:55: ca:89:f3:88:c5:0f:db:98:f9:d0:3a:23:21:9e:35:5a:80:42: c7:cb:80:e3:16:58:92:cd:66:ba:a5:6a:1b:a9:f8:2d:ca:c6: 89:55:70:ad:1e:4f:3a:f4:1b:bc:a1:b3:8e:91:ba:ed:82:65: 7c:85:dd:76:d6:b2:06:5f:69:ce:be:78:ed:db:d4:90:ea:2c: 84:80:39:35:23:c3:e4:dc:2f:1f:45:5d:d1:ab:f2:d7:ec:cd: 26:f8:42:31:5d:28:71:05:70:e4:ea:16:33:2e:b8:31:3c:36: f3:53:36:3b:f6:2a:42:28:ed:54:df:77:ae:cf:3a:6e:9b:4b: a5:5a:8d:b4:7a:8c:83:10:12:ef:b1:57:b2:46:80:45:ee:e9: 0a:c0:c9:d2:29:2d:06:57:04:be:e6:27:d6:d9:a9:53:a7:3a: 13:37:3d:fc:aa:7d:66:89:26:68:61:dc:e8:33:ac:bf:0c:22: 10:fb:e0:c7:ec:2d:03:4f:35:53:be:63:f7:f5:6f:2d:cd:23: 3d:6b:11:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0bMKTlP1btfPcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Yjg5NDViZWEtOTU3ZC00MWVhLTk1NjAtMzllYzJjM2IxYmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgndcKmeyoLRMIxDhszksmoh09tMK3wgijYNz 9encZ+Uq+Qa8wUTugIMlvfeCNZ/4RZ8FxHiOzx/63jXyZeTMzec4XrhgHlcnlIAH hxDTt7JC1d5ZbIgcW4N/NpqTXh98z0OJrvrKIz33bVi5jOV8CgMonoTpUFBw/3F/ v+M2lBDY8m3qTa9heIFXGYg8vuuB+i+mQrPl4xcy347wz2R//Xqu38rPIndpgAA1 rl2nQYRI4FSD+QsxyrcXbjlUeNPv5SAfd3FnYjY/0rX/UoVZDcGAOygiZToD/grX 82r7M6HPUU6dNTviyUGUh1Ot8ylu+NmQZkdodjrlCxmyqq0lrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4SR7oQqOSmv2alW840kVZ9JFh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzA0OTUzZjAtMDU5Ny0z NzhhLWE4YTgtZjNiYTdmZDJhMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeNnCazTSfWq9s6WkuSD7IRJn6vitNvP3FNnKzUkuLYuEhScTev3dhD 6KiPfcpW6zYsgGFuVcqJ84jFD9uY+dA6IyGeNVqAQsfLgOMWWJLNZrqlahup+C3K xolVcK0eTzr0G7yhs46Ruu2CZXyF3XbWsgZfac6+eO3b1JDqLISAOTUjw+TcLx9F XdGr8tfszSb4QjFdKHEFcOTqFjMuuDE8NvNTNjv2KkIo7VTfd67POm6bS6VajbR6 jIMQEu+xV7JGgEXu6QrAydIpLQZXBL7mJ9bZqVOnOhM3PfyqfWaJJmhh3OgzrL8M IhD74MfsLQNPNVO+Y/f1by3NIz1rEb4= -----END CERTIFICATE-----Generated at Sat Oct 11 13:27:16 2025 by rpki-client