$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2fc2ee6-1e17-3810-a75f-d370e9889e3e.roa File: d2fc2ee6-1e17-3810-a75f-d370e9889e3e.roa (raw, json) Hash identifier: 4kYGkOvFCdYkHNCiuxKxFDY/UT9k/f4vWBgRLXNXC7s= Subject key identifier: 14:DB:20:93:37:A5:58:2E:FD:51:A0:8C:B3:57:FF:D9:B3:72:57:D4 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B6D2CC6E071BF4904DDA2AA80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2fc2ee6-1e17-3810-a75f-d370e9889e3e.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 6939 IP address blocks: 172.121.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:c6:e0:71:bf:49:04:dd:a2:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=7dcc170a-17b8-4d57-8abf-8d4acf9cc98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:11:8e:3e:08:33:25:85:28:55:d7:0d:8e: 2d:28:79:cb:59:46:3e:57:51:51:2e:7f:52:4c:8f: 5c:9c:8c:e8:8a:99:33:6f:61:73:bc:c5:cc:75:ff: a9:1e:3c:20:b7:9d:5b:ca:54:d4:ad:67:a2:4b:ac: d8:a7:7c:aa:e0:5a:40:54:60:f6:74:ff:fb:10:99: a7:25:8c:aa:52:b9:9f:30:42:14:e8:d8:4c:cf:18: 5a:39:6a:14:21:d0:b9:9b:56:9f:8b:f9:c8:76:1f: b2:dc:98:4e:e5:03:66:f2:41:b9:dd:0d:c0:4a:75: 0c:7d:b1:c4:7d:52:41:0d:15:1d:0d:97:5c:3a:8e: c6:9f:d6:e5:bb:d2:af:12:db:ce:09:8a:67:06:87: 9b:81:36:6b:3e:dc:a1:39:ef:67:b4:ac:85:b9:03: cd:74:c2:2c:9f:5d:c9:58:3f:5d:f1:60:37:1e:46: 81:e9:b6:6b:e9:ff:a8:d1:a4:9d:64:9f:94:0d:65: 79:92:20:03:78:46:1e:0f:08:e0:1b:15:f4:f9:ff: 4c:db:be:68:92:43:ec:74:34:d1:32:94:a3:b3:8c: 5f:2a:bb:24:a1:cf:9c:7f:0f:33:b0:08:1f:2a:7e: af:ec:ad:79:32:7d:0e:b4:43:a4:45:a9:1a:d4:86: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DB:20:93:37:A5:58:2E:FD:51:A0:8C:B3:57:FF:D9:B3:72:57:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2fc2ee6-1e17-3810-a75f-d370e9889e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:48:7c:30:28:98:5d:f4:c0:0e:7b:74:0b:b9:04:6f:f7:e3: b9:ea:6e:74:41:a7:a7:24:11:41:c6:da:22:7e:a7:9b:ee:35: 16:ed:5d:43:cd:d5:14:db:a6:e6:df:3d:53:4c:05:72:53:d3: 8e:42:5d:3f:16:68:c4:6c:34:38:f7:b6:5f:45:1a:00:a9:05: 1f:74:45:86:40:3a:d5:ea:10:15:e7:43:6a:a3:64:9b:36:8f: b7:dc:1d:9c:d4:62:f0:d7:02:ec:64:7d:2d:2b:31:ed:a3:26: 8b:b8:57:d4:ce:47:f5:2a:45:3a:74:a3:bf:8c:a3:37:20:19: 08:f0:c7:11:d3:fc:da:bd:a6:7f:24:16:5d:4f:16:41:52:96: a5:9e:43:25:cf:9f:4e:76:e9:6a:34:fb:25:3a:3d:21:39:3d: 1e:1a:8a:c7:f5:8a:84:8c:c0:f5:57:27:38:eb:04:24:a7:4b: 32:c1:aa:ae:66:e3:ed:7a:ff:85:d9:09:b4:b7:c6:1e:83:d6: 97:45:8c:04:85:35:f7:95:e6:94:28:ff:93:63:a0:ed:9d:4e: 33:03:80:f3:2c:4f:92:6d:34:95:2f:57:0d:fe:41:28:0c:bb: c1:0e:aa:2a:0a:ec:13:03:b3:50:7c:42:59:f6:12:d9:02:ea: dd:bb:de:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLMbgcb9JBN2iqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk N2RjYzE3MGEtMTdiOC00ZDU3LThhYmYtOGQ0YWNmOWNjOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOkRjj4IMyWFKFXXDY4tKHnLWUY+V1FRLn9S TI9cnIzoipkzb2FzvMXMdf+pHjwgt51bylTUrWeiS6zYp3yq4FpAVGD2dP/7EJmn JYyqUrmfMEIU6NhMzxhaOWoUIdC5m1afi/nIdh+y3JhO5QNm8kG53Q3ASnUMfbHE fVJBDRUdDZdcOo7Gn9blu9KvEtvOCYpnBoebgTZrPtyhOe9ntKyFuQPNdMIsn13J WD9d8WA3HkaB6bZr6f+o0aSdZJ+UDWV5kiADeEYeDwjgGxX0+f9M275okkPsdDTR MpSjs4xfKrskoc+cfw8zsAgfKn6v7K15Mn0OtEOkRaka1IYX5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTbIJM3pVgu/VGgjLNX/9mzclfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDJmYzJlZTYtMWUxNy0z ODEwLWE3NWYtZDM3MGU5ODg5ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHm8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBIfDAomF30wA57dAu5BG/347nqbnRBp6ckEUHG2iJ+p5vuNRbtXUPN 1RTbpubfPVNMBXJT045CXT8WaMRsNDj3tl9FGgCpBR90RYZAOtXqEBXnQ2qjZJs2 j7fcHZzUYvDXAuxkfS0rMe2jJou4V9TOR/UqRTp0o7+MozcgGQjwxxHT/Nq9pn8k Fl1PFkFSlqWeQyXPn0526Wo0+yU6PSE5PR4aisf1ioSMwPVXJzjrBCSnSzLBqq5m 4+16/4XZCbS3xh6D1pdFjASFNfeV5pQo/5NjoO2dTjMDgPMsT5JtNJUvVw3+QSgM u8EOqioK7BMDs1B8Qln2EtkC6t273o8= -----END CERTIFICATE-----Generated at Sat Oct 11 11:17:42 2025 by rpki-client