$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f11dc78c-a962-321b-9608-103c94a1c937.roa File: f11dc78c-a962-321b-9608-103c94a1c937.roa (raw, json) Hash identifier: rmfWQzn59hHWmS0zcvUxEjzNEW3sCKpM+e2F25XzyNc= Subject key identifier: 0A:55:9E:28:37:CE:A6:CD:3B:E0:A8:02:89:22:89:AE:46:19:A1:FB Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A8496A2957218475462BF4E80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f11dc78c-a962-321b-9608-103c94a1c937.roa Signing time: Mon 14 Jul 2025 17:30:59 +0000 ROA not before: Mon 14 Jul 2025 17:30:59 +0000 ROA not after: Sun 12 Oct 2025 17:30:59 +0000 asID: 44559 IP address blocks: 172.120.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:96:a2:95:72:18:47:54:62:bf:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 14 17:30:59 2025 GMT Not After : Oct 12 17:30:59 2025 GMT Subject: CN=fef9dac5-ccdc-420e-9028-60b89efce90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:be:cc:77:48:23:9e:77:89:fd:66:7a:f4:82: 3d:86:4e:7b:18:57:c8:dd:fc:f2:34:6b:a3:82:74: 0e:43:25:12:38:0b:3f:f4:79:3a:ea:1f:2b:f4:c2: 99:32:89:00:b1:05:19:e7:25:c5:b6:72:7e:22:ae: 4a:44:7c:26:52:c1:ec:55:13:55:ce:d6:d1:d6:25: 0a:d2:23:82:4f:ca:19:ef:fd:6f:d9:59:34:33:33: 8d:fe:8c:ef:53:55:2d:63:e6:5d:d3:e2:a4:16:7c: 74:b6:be:ed:16:c2:e1:b9:c7:b1:5a:1d:d6:10:9b: 3e:ce:96:86:a8:f8:4e:92:2a:33:39:cc:25:c1:7d: 49:df:c6:6b:b5:4f:73:25:c5:67:86:5e:fb:34:41: f1:ce:f5:0c:f6:92:f8:24:2e:c8:59:10:09:89:a7: 68:78:54:15:5a:a4:63:4c:b8:f7:72:fa:e6:d9:e1: 2b:b6:d7:79:6b:9b:e2:75:b4:c3:d4:71:ab:e5:cb: b2:f4:2b:34:24:82:90:bd:52:b9:07:ce:bc:11:a6: a8:5a:76:64:21:e0:e7:08:11:ea:d1:26:f7:d0:06: af:13:ae:0a:f9:f0:de:52:d5:46:ed:ab:98:99:de: 5e:15:82:78:86:9e:84:57:0a:d7:17:e7:cc:f7:5b: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:55:9E:28:37:CE:A6:CD:3B:E0:A8:02:89:22:89:AE:46:19:A1:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f11dc78c-a962-321b-9608-103c94a1c937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:07:1a:2f:d4:b2:6a:1a:eb:cb:19:67:b3:e2:1c:93:00:dc: b1:8b:c5:48:8d:90:6e:08:2d:61:a1:c2:b1:88:11:7e:2d:70: df:f8:67:2a:12:a4:a1:49:53:99:e0:4a:f4:06:01:fd:eb:2e: 68:0d:0c:1a:a1:81:3c:d1:39:6f:46:b8:53:29:e6:4d:3d:71: 34:98:00:e8:b0:72:c0:39:e9:94:73:97:10:99:46:08:cd:78: 45:7b:ba:11:d5:61:56:fd:f7:08:2f:09:44:2b:10:8c:9d:31: 2d:71:a9:f1:56:cd:19:1c:ec:5b:cc:c4:92:e5:a0:b6:0c:0c: f2:7f:c6:33:c7:3e:64:8f:a5:90:05:dc:35:a1:0f:12:e4:b6: d7:c7:07:a2:a1:9d:9f:01:db:ec:7f:38:26:3c:da:c0:4f:2d: fa:2a:fe:0f:db:e7:e4:37:9c:b7:6d:b8:72:70:9f:eb:c3:9c: cf:7d:40:11:55:27:4d:8c:31:c8:10:43:43:de:57:5d:c3:18: c5:de:b8:72:7b:4e:8d:d3:84:97:00:90:dd:7a:c4:df:37:81: 08:2f:cc:7d:22:cf:ed:2e:ca:32:bb:76:93:da:40:0b:37:ca: 64:67:11:ee:4d:91:56:3a:00:87:95:95:92:8f:b9:ee:77:ae: ad:50:1d:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqElqKVchhHVGK/ToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxNDE3MzA1OVoXDTI1MTAxMjE3MzA1OVowLzEtMCsGA1UEAxMk ZmVmOWRhYzUtY2NkYy00MjBlLTkwMjgtNjBiODllZmNlOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL7Md0gjnneJ/WZ69II9hk57GFfI3fzyNGuj gnQOQyUSOAs/9Hk66h8r9MKZMokAsQUZ5yXFtnJ+Iq5KRHwmUsHsVRNVztbR1iUK 0iOCT8oZ7/1v2Vk0MzON/ozvU1UtY+Zd0+KkFnx0tr7tFsLhucexWh3WEJs+zpaG qPhOkiozOcwlwX1J38ZrtU9zJcVnhl77NEHxzvUM9pL4JC7IWRAJiadoeFQVWqRj TLj3cvrm2eErttd5a5vidbTD1HGr5cuy9Cs0JIKQvVK5B868EaaoWnZkIeDnCBHq 0Sb30AavE64K+fDeUtVG7auYmd5eFYJ4hp6EVwrXF+fM91sUlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApVnig3zqbNO+CoAokiia5GGaH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjExZGM3OGMtYTk2Mi0z MjFiLTk2MDgtMTAzYzk0YTFjOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHg9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsHGi/Usmoa68sZZ7PiHJMA3LGLxUiNkG4ILWGhwrGIEX4tcN/4ZyoS pKFJU5ngSvQGAf3rLmgNDBqhgTzROW9GuFMp5k09cTSYAOiwcsA56ZRzlxCZRgjN eEV7uhHVYVb99wgvCUQrEIydMS1xqfFWzRkc7FvMxJLloLYMDPJ/xjPHPmSPpZAF 3DWhDxLkttfHB6KhnZ8B2+x/OCY82sBPLfoq/g/b5+Q3nLdtuHJwn+vDnM99QBFV J02MMcgQQ0PeV13DGMXeuHJ7To3ThJcAkN16xN83gQgvzH0iz+0uyjK7dpPaQAs3 ymRnEe5NkVY6AIeVlZKPue53rq1QHVM= -----END CERTIFICATE-----Generated at Mon Jul 21 08:36:27 2025 by rpki-client