$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deccbecf-eccc-359e-a275-dd1a5ef0148e.roa File: deccbecf-eccc-359e-a275-dd1a5ef0148e.roa (raw, json) Hash identifier: 3PfN6crItTytww6EDLrMikYG8qCIcqruQM2RPgar1Bo= Subject key identifier: 09:A5:77:06:BE:C2:35:73:FC:09:7B:2A:72:E6:23:AF:BF:E4:5F:01 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B5F3777D59A6438B3F7A1ADE0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deccbecf-eccc-359e-a275-dd1a5ef0148e.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 3257 IP address blocks: 172.121.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:77:d5:9a:64:38:b3:f7:a1:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=395396df-a3b8-4a72-bbec-02586da1d4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d3:58:aa:53:53:59:1e:9d:08:d4:e2:a0:53: 10:34:b3:f4:fc:13:10:7c:3c:44:3b:79:a7:0d:66: c9:eb:1b:78:5a:ba:c6:6f:de:6e:8b:83:7d:dd:17: dd:38:8b:f2:7d:f1:a3:13:c9:e7:e0:9c:bd:18:88: 33:35:82:b4:e4:f6:6a:50:25:6e:17:80:34:83:d1: 62:61:27:4e:96:58:26:65:4b:2b:3a:96:84:03:cd: b0:cc:04:6e:d9:8e:77:e0:a5:77:4a:7b:c6:3d:b3: 17:2a:62:92:82:ee:da:03:a3:52:03:bc:10:35:e8: 54:b4:94:c4:0e:71:7e:4d:25:62:0e:41:1b:2d:c2: 19:c4:48:a6:a9:9e:95:4c:dc:63:cb:14:0c:04:15: 5f:2e:0a:21:de:3b:ff:9f:02:0f:fe:b7:dd:91:18: fe:90:d7:73:b3:4b:a2:00:3a:85:bd:99:ab:5c:03: 25:76:c9:52:bf:3c:c6:f4:20:a7:a3:24:86:53:28: 8d:ae:1d:93:a9:b7:8d:39:76:f3:69:de:22:aa:00: 56:23:5e:9a:56:60:4c:7e:18:3b:61:f5:79:17:93: c3:e7:09:64:a9:15:d5:1f:f0:b4:c5:eb:3a:cd:6e: bc:e3:d8:9c:f4:6e:e0:19:dc:56:df:40:9c:7d:6e: 16:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A5:77:06:BE:C2:35:73:FC:09:7B:2A:72:E6:23:AF:BF:E4:5F:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deccbecf-eccc-359e-a275-dd1a5ef0148e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4c:bf:bc:fc:58:37:f0:28:58:b6:52:1e:86:51:32:36:7c: 5a:01:18:11:68:eb:66:95:98:5a:5c:af:c7:7e:de:7c:22:ec: bc:db:36:ac:27:3c:28:eb:93:a7:ae:5b:be:63:72:4d:92:c5: f6:85:2e:22:6a:f2:f2:b3:74:30:9b:d7:88:bd:96:30:1e:cd: 67:61:ac:f1:5a:45:80:df:90:be:d7:71:92:a4:8e:21:47:a8: 7a:89:bf:a5:35:51:72:b0:88:66:c0:86:e5:e2:96:5d:58:95: 09:64:e5:cf:8f:2e:7f:6b:7b:c3:14:14:b2:2f:46:80:88:54: c8:02:bc:cd:d0:ef:f2:f1:eb:ad:95:b4:42:71:c9:7c:01:82: 4d:1e:f1:c8:c7:16:df:f3:75:fb:0d:d2:b5:ea:8f:05:4e:ef: 75:2b:cb:97:42:0f:a4:b1:59:6e:0b:9b:49:2c:f3:b2:f7:56: 75:b2:43:2d:f0:34:b3:75:c2:08:d4:48:de:d8:03:9f:bd:6b: 5d:d4:3b:36:fd:25:b8:d5:e4:a1:c6:8e:80:21:2b:e9:6e:7b: 6e:86:aa:a1:2c:8c:39:8e:4e:5e:44:a9:ea:cf:b8:cc:fb:06: 5d:00:b1:0d:2c:8a:e2:eb:a8:ff:cf:c0:44:ab:d2:3b:ae:e5: 48:4f:20:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3fVmmQ4s/ehreAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk Mzk1Mzk2ZGYtYTNiOC00YTcyLWJiZWMtMDI1ODZkYTFkNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtNYqlNTWR6dCNTioFMQNLP0/BMQfDxEO3mn DWbJ6xt4WrrGb95ui4N93RfdOIvyffGjE8nn4Jy9GIgzNYK05PZqUCVuF4A0g9Fi YSdOllgmZUsrOpaEA82wzARu2Y534KV3SnvGPbMXKmKSgu7aA6NSA7wQNehUtJTE DnF+TSViDkEbLcIZxEimqZ6VTNxjyxQMBBVfLgoh3jv/nwIP/rfdkRj+kNdzs0ui ADqFvZmrXAMldslSvzzG9CCnoySGUyiNrh2TqbeNOXbzad4iqgBWI16aVmBMfhg7 YfV5F5PD5wlkqRXVH/C0xes6zW6849ic9G7gGdxW30CcfW4W/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmldwa+wjVz/Al7KnLmI6+/5F8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGVjY2JlY2YtZWNjYy0z NTllLWEyNzUtZGQxYTVlZjAxNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZMv7z8WDfwKFi2Uh6GUTI2fFoBGBFo62aVmFpcr8d+3nwi7LzbNqwn PCjrk6euW75jck2SxfaFLiJq8vKzdDCb14i9ljAezWdhrPFaRYDfkL7XcZKkjiFH qHqJv6U1UXKwiGbAhuXill1YlQlk5c+PLn9re8MUFLIvRoCIVMgCvM3Q7/Lx662V tEJxyXwBgk0e8cjHFt/zdfsN0rXqjwVO73Ury5dCD6SxWW4Lm0ks87L3VnWyQy3w NLN1wgjUSN7YA5+9a13UOzb9JbjV5KHGjoAhK+lue26GqqEsjDmOTl5EqerPuMz7 Bl0AsQ0siuLrqP/PwESr0juu5UhPIDg= -----END CERTIFICATE-----Generated at Sat Oct 11 11:12:47 2025 by rpki-client