$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c27ab05b-c1c6-3a48-9e14-f7436d6b7c26.roa File: c27ab05b-c1c6-3a48-9e14-f7436d6b7c26.roa (raw, json) Hash identifier: ge+4zBz++y36WYl5KHCUCrd3w/IBWucInGQneIv7xn0= Subject key identifier: E0:91:F2:6F:52:D7:2F:25:5A:7E:AB:DD:E4:55:87:AE:E6:FF:E5:94 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A84A0C8A99ED0919C34929080 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c27ab05b-c1c6-3a48-9e14-f7436d6b7c26.roa Signing time: Mon 14 Jul 2025 17:51:25 +0000 ROA not before: Mon 14 Jul 2025 17:51:25 +0000 ROA not after: Sun 12 Oct 2025 17:51:25 +0000 asID: 44559 IP address blocks: 172.121.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:a0:c8:a9:9e:d0:91:9c:34:92:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 14 17:51:25 2025 GMT Not After : Oct 12 17:51:25 2025 GMT Subject: CN=e9e7b60e-2fec-4225-be8e-c5375c5e8c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:16:7a:dd:fe:13:06:57:60:c2:09:7c:24: a7:50:fc:b2:0a:3e:66:f1:fc:40:f1:32:22:b1:ae: 11:36:6e:b8:08:f6:ee:a1:51:cf:db:d6:ac:37:ab: 03:cb:44:26:e9:b0:af:ec:fd:eb:32:03:6e:fe:a7: 9e:1a:7f:b1:b9:cb:dd:a4:c3:fc:79:61:62:f9:ed: 6c:4d:25:8a:b2:2d:28:59:7b:c3:82:0c:11:ae:65: 60:29:70:89:76:de:b0:77:ee:12:f0:e0:0a:9e:72: bb:64:2b:e7:35:37:bd:6c:c0:08:9c:06:3e:cd:7b: 5b:a3:ca:a3:91:92:e8:fd:37:c8:e1:69:62:18:34: 1f:25:25:b2:a1:92:39:dd:95:24:73:93:f0:b4:14: 2e:15:f4:a1:85:ba:75:91:c8:1b:2b:3a:1a:ac:d5: 0f:4f:01:46:ed:38:85:02:05:ff:f2:7b:76:84:0f: e9:fa:e5:e4:55:20:19:b2:4a:54:d7:1c:c9:c8:78: 37:9f:8e:3e:23:65:f2:ec:e3:a8:0e:2f:88:93:72: 04:f1:f8:57:5b:2e:2e:84:d5:53:cf:38:7a:b6:e1: 14:98:4b:57:cb:9a:63:86:b5:03:5c:4d:83:42:d2: d2:11:82:e7:21:cb:77:e9:eb:48:b8:8c:4e:13:b5: 79:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:91:F2:6F:52:D7:2F:25:5A:7E:AB:DD:E4:55:87:AE:E6:FF:E5:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c27ab05b-c1c6-3a48-9e14-f7436d6b7c26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:90:dd:64:17:2b:f6:6a:b7:a9:b3:73:cb:b0:92:a3:f2:5d: 23:1e:77:55:95:cf:7f:b0:35:bc:15:a2:80:1e:b9:8b:8d:e6: 0b:2d:5a:af:31:a6:be:a9:e2:68:38:88:27:30:d6:c8:94:20: 04:bd:30:f5:bf:ac:f3:0d:0d:58:e8:62:ca:f7:ee:29:e5:5c: 59:8c:f9:44:0f:d6:99:8a:ad:bb:f1:f6:4b:99:1e:3c:67:3f: ab:39:47:63:56:b1:18:a1:f1:90:fd:35:fd:1c:f6:76:84:58: 84:67:00:8e:89:07:2a:40:38:16:71:33:e4:1e:13:73:18:34: 0d:7b:8d:b1:d3:2e:17:2c:45:5a:8e:df:ab:30:4b:38:5f:03: 54:98:db:88:29:f6:c5:1d:01:1a:da:a1:d9:a8:f3:24:b5:f3: 0a:47:e7:1f:88:ed:e2:ef:ff:1b:22:fe:af:7f:36:34:87:db: b1:90:10:79:f2:0c:d9:30:f7:13:8a:35:8b:cc:97:7f:0f:28: e7:19:bc:8e:99:82:0e:88:7f:c2:73:7a:96:38:97:78:63:55: 03:6c:a2:46:1f:ed:ed:8b:cf:a3:1d:34:7b:01:75:82:25:0f: 89:35:4c:5a:6e:32:00:19:01:0e:89:0b:94:a5:dd:40:5a:07: 57:9d:a8:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEoMipntCRnDSSkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxNDE3NTEyNVoXDTI1MTAxMjE3NTEyNVowLzEtMCsGA1UEAxMk ZTllN2I2MGUtMmZlYy00MjI1LWJlOGUtYzUzNzVjNWU4YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM8Wet3+EwZXYMIJfCSnUPyyCj5m8fxA8TIi sa4RNm64CPbuoVHP29asN6sDy0Qm6bCv7P3rMgNu/qeeGn+xucvdpMP8eWFi+e1s TSWKsi0oWXvDggwRrmVgKXCJdt6wd+4S8OAKnnK7ZCvnNTe9bMAInAY+zXtbo8qj kZLo/TfI4WliGDQfJSWyoZI53ZUkc5PwtBQuFfShhbp1kcgbKzoarNUPTwFG7TiF AgX/8nt2hA/p+uXkVSAZskpU1xzJyHg3n44+I2Xy7OOoDi+Ik3IE8fhXWy4uhNVT zzh6tuEUmEtXy5pjhrUDXE2DQtLSEYLnIct36etIuIxOE7V5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCR8m9S1y8lWn6r3eRVh67m/+WUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzI3YWIwNWItYzFjNi0z YTQ4LTllMTQtZjc0MzZkNmI3YzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCQ3WQXK/Zqt6mzc8uwkqPyXSMed1WVz3+wNbwVooAeuYuN5gstWq8x pr6p4mg4iCcw1siUIAS9MPW/rPMNDVjoYsr37inlXFmM+UQP1pmKrbvx9kuZHjxn P6s5R2NWsRih8ZD9Nf0c9naEWIRnAI6JBypAOBZxM+QeE3MYNA17jbHTLhcsRVqO 36swSzhfA1SY24gp9sUdARraodmo8yS18wpH5x+I7eLv/xsi/q9/NjSH27GQEHny DNkw9xOKNYvMl38PKOcZvI6Zgg6If8JzepY4l3hjVQNsokYf7e2Lz6MdNHsBdYIl D4k1TFpuMgAZAQ6JC5Sl3UBaB1edqCs= -----END CERTIFICATE-----Generated at Mon Jul 21 08:55:05 2025 by rpki-client