$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f264c685-bb4f-38ce-b143-8f1607751ca0.roa File: f264c685-bb4f-38ce-b143-8f1607751ca0.roa (raw, json) Hash identifier: CIFiNF05Dy1JScQ5EE/z3XrVmsqrZS0gAz2N1oynBeU= Subject key identifier: 2B:AB:BB:89:2A:E0:64:B1:73:81:78:66:5D:DF:4E:6A:1A:DD:17:54 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B620211538A51C12D137E2100 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f264c685-bb4f-38ce-b143-8f1607751ca0.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 6939 IP address blocks: 172.121.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:11:53:8a:51:c1:2d:13:7e:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=3eea1937-ccd5-43ae-ac7b-0433c20d8dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:89:5c:bf:a1:91:ee:0d:8d:dc:26:70:84:2b: 37:94:06:d4:76:56:c1:e6:27:6d:ed:c4:48:51:9f: b1:6a:9f:da:79:84:b4:bc:ff:e8:a0:e8:3b:3d:03: 73:3e:21:4a:c6:7c:72:64:14:7c:ba:41:c0:ea:0c: 74:0d:34:3c:61:0d:19:6c:4a:9a:06:9e:fc:04:fe: 4f:84:b0:58:42:05:d0:7c:d8:f8:5d:1e:cc:b6:5e: 33:3d:45:f5:82:2e:2b:6c:54:07:9a:e4:53:95:fc: 6e:65:5c:6c:c0:12:58:89:18:73:5a:ac:62:6f:5c: 6e:f8:82:da:76:56:c1:4b:ee:e9:50:5f:fe:5d:69: a6:a6:67:9a:ef:ca:9d:12:2e:6e:3e:7b:f3:18:16: 8f:36:01:ea:f3:47:99:46:af:19:3b:d8:8b:97:11: 03:e5:6c:9c:f4:f6:f2:1c:e5:df:3e:80:b0:6c:83: 29:31:57:15:66:4c:c9:09:b3:0b:ca:aa:c8:27:d4: 9c:d5:f9:36:5b:73:04:4a:cf:ac:88:17:6e:9c:f7: a5:36:0d:cb:98:e5:b6:d5:35:73:d6:49:79:84:44: 01:c8:fe:49:1b:57:cb:7e:db:10:5f:91:e9:7c:d9: b6:8e:97:ee:c3:b9:7a:af:fb:12:1f:7d:12:9e:db: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AB:BB:89:2A:E0:64:B1:73:81:78:66:5D:DF:4E:6A:1A:DD:17:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f264c685-bb4f-38ce-b143-8f1607751ca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fc:85:05:1a:32:4a:d9:fb:df:ef:e9:71:15:4c:0e:da:e2: 1d:6c:69:87:77:f6:97:ec:52:1a:9d:a2:f1:12:d8:b1:f4:b8: c6:ce:24:cf:8e:d8:b7:4e:11:fe:ae:08:11:be:33:31:88:ce: 2e:d7:9e:85:06:25:e7:a2:d7:b0:d0:4c:6c:81:d2:26:2a:2f: 84:e4:e5:11:d2:36:c4:b0:f6:b1:ee:de:57:6b:be:55:e9:d9: 21:e8:ad:2e:3d:a1:2d:ae:39:fe:98:9a:de:c0:43:97:43:d8: ff:a4:25:29:58:97:b3:03:58:ef:4c:a4:f3:20:2b:20:ec:b0: ba:65:a5:fa:f6:a4:98:79:24:a6:fa:5d:9e:5b:ce:a0:4a:ae: b1:c5:60:be:04:e3:c0:2f:a3:32:36:b5:42:fa:e5:4f:f2:78: 26:f2:06:e8:2a:e5:73:87:01:fa:4e:0c:ea:19:29:a6:9b:1e: 52:17:a3:e0:79:5d:34:44:df:d6:33:74:16:3c:30:bd:7f:79: 83:50:76:4c:da:16:96:20:29:6f:8a:23:0a:c6:54:86:a4:27: 45:42:25:7a:66:38:50:90:aa:e6:af:26:69:a6:d9:b9:61:22: 9b:cf:ad:ba:08:f6:2f:e4:c4:5a:c6:5c:d0:1f:8a:b7:f5:5c: 9f:db:fe:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhFTilHBLRN+IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk M2VlYTE5MzctY2NkNS00M2FlLWFjN2ItMDQzM2MyMGQ4ZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3olcv6GR7g2N3CZwhCs3lAbUdlbB5idt7cRI UZ+xap/aeYS0vP/ooOg7PQNzPiFKxnxyZBR8ukHA6gx0DTQ8YQ0ZbEqaBp78BP5P hLBYQgXQfNj4XR7Mtl4zPUX1gi4rbFQHmuRTlfxuZVxswBJYiRhzWqxib1xu+ILa dlbBS+7pUF/+XWmmpmea78qdEi5uPnvzGBaPNgHq80eZRq8ZO9iLlxED5Wyc9Pby HOXfPoCwbIMpMVcVZkzJCbMLyqrIJ9Sc1fk2W3MESs+siBdunPelNg3LmOW21TVz 1kl5hEQByP5JG1fLftsQX5HpfNm2jpfuw7l6r/sSH30Snts5uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuru4kq4GSxc4F4Zl3fTmoa3RdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjI2NGM2ODUtYmI0Zi0z OGNlLWIxNDMtOGYxNjA3NzUxY2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHn/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj8hQUaMkrZ+9/v6XEVTA7a4h1saYd39pfsUhqdovES2LH0uMbOJM+O 2LdOEf6uCBG+MzGIzi7XnoUGJeei17DQTGyB0iYqL4Tk5RHSNsSw9rHu3ldrvlXp 2SHorS49oS2uOf6Ymt7AQ5dD2P+kJSlYl7MDWO9MpPMgKyDssLplpfr2pJh5JKb6 XZ5bzqBKrrHFYL4E48AvozI2tUL65U/yeCbyBugq5XOHAfpODOoZKaabHlIXo+B5 XTRE39YzdBY8ML1/eYNQdkzaFpYgKW+KIwrGVIakJ0VCJXpmOFCQquavJmmm2blh IpvPrboI9i/kxFrGXNAfirf1XJ/b/gQ= -----END CERTIFICATE-----Generated at Sat Oct 11 11:14:45 2025 by rpki-client