$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd1cb9b0-eb5c-3eca-8600-331e750557aa.roa File: fd1cb9b0-eb5c-3eca-8600-331e750557aa.roa (raw, json) Hash identifier: 5Y6leImFiERyJYPJT+8KKFiIZZLGYPz8D1CmDuF9FdM= Subject key identifier: C4:37:87:55:4E:FA:A2:BD:D9:E1:42:38:3C:C5:3C:16:49:D3:94:B2 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A849966C9B8D2E5FC450A3740 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd1cb9b0-eb5c-3eca-8600-331e750557aa.roa Signing time: Mon 14 Jul 2025 17:36:33 +0000 ROA not before: Mon 14 Jul 2025 17:36:33 +0000 ROA not after: Sun 12 Oct 2025 17:36:33 +0000 asID: 44559 IP address blocks: 172.120.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:99:66:c9:b8:d2:e5:fc:45:0a:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 14 17:36:33 2025 GMT Not After : Oct 12 17:36:33 2025 GMT Subject: CN=64fd5ec5-03e6-4252-8ca2-b32316caf4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:79:8a:d5:07:fb:98:e7:fa:33:8e:a4:ba: 49:7d:52:62:a2:95:0e:3e:39:71:21:8b:2b:ee:d9: 55:0d:83:19:68:87:08:c9:8b:7e:c5:24:5c:9a:c5: 59:f8:6f:f5:3a:1c:ee:ec:5f:2a:9f:bc:22:f6:3b: 57:3f:f2:03:8a:4b:cd:e6:80:e3:08:e1:de:fb:4f: 52:ad:25:df:55:af:21:66:fd:c4:2f:06:cd:61:65: 36:bd:65:c1:f7:b7:c7:d2:89:d7:72:1c:1d:77:02: 01:ca:13:d7:f2:7b:47:11:a7:a1:af:86:49:e8:17: cc:ce:cd:67:e6:67:66:c5:55:51:ed:42:1d:92:73: e3:d2:5f:47:e7:b7:89:3e:4c:bf:44:5e:8f:88:6d: ad:c6:d1:36:be:e6:df:5d:3d:30:d8:98:c1:96:00: 76:2a:16:0c:65:70:29:de:38:d9:88:84:5b:a5:14: 5b:35:8a:6e:6b:75:d9:e5:a7:31:8c:dc:73:d4:58: 0a:8d:f0:d3:f1:37:82:60:e3:82:89:e9:3b:50:d5: 55:fc:c9:b8:d3:05:e3:7c:e8:cf:1c:24:92:c0:b2: db:9a:85:7c:c7:58:89:ce:b7:2f:5e:e1:1a:ed:e7: 18:fd:7c:4f:20:e6:91:fd:7a:ac:dc:c7:60:18:e6: 16:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:37:87:55:4E:FA:A2:BD:D9:E1:42:38:3C:C5:3C:16:49:D3:94:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd1cb9b0-eb5c-3eca-8600-331e750557aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bf:67:24:0b:9e:54:e0:97:7c:f6:ef:0c:91:60:99:bc:22: 64:a0:ff:42:13:28:1f:55:ee:51:12:8c:46:69:74:70:78:9c: f5:e6:58:73:9a:72:1f:6c:b0:17:d7:c5:cb:b8:8f:20:da:d5: 3b:98:9f:d5:1c:9a:b0:79:d0:c2:3e:ea:58:92:1a:09:72:f0: df:bf:6d:43:f4:0b:46:5b:d0:0a:a4:43:74:68:e7:9e:85:c6: 2b:3a:3b:e0:a3:dc:2c:42:24:0e:9e:d8:a6:13:b8:4b:c6:f0: 5a:17:c5:0f:1d:e4:0d:76:d0:bb:02:1d:a7:c7:45:fa:50:d3: 29:e0:5d:a4:6d:37:90:41:8d:24:0b:70:3c:6e:4a:9d:6f:79: b6:3e:63:29:ed:f4:c5:c0:54:b9:b9:b3:be:05:dd:b2:35:d6: e2:2a:6a:82:30:b6:f0:53:ab:44:03:fd:26:9a:95:c4:e5:e1: 5e:db:64:fe:6c:72:24:4e:d7:6f:34:e6:98:9c:02:0c:ee:b4: 98:e3:45:f4:73:48:a4:07:20:82:d0:d7:b3:3d:19:b4:2e:63: d9:48:c6:11:d0:bf:ff:4e:0f:b2:8b:c3:34:e7:07:f3:a9:6e: fd:7a:bb:7e:7f:fc:12:d0:7a:43:89:55:55:10:63:3d:89:aa: 50:8f:d1:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEmWbJuNLl/EUKN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxNDE3MzYzM1oXDTI1MTAxMjE3MzYzM1owLzEtMCsGA1UEAxMk NjRmZDVlYzUtMDNlNi00MjUyLThjYTItYjMyMzE2Y2FmNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjp5itUH+5jn+jOOpLpJfVJiopUOPjlxIYsr 7tlVDYMZaIcIyYt+xSRcmsVZ+G/1Ohzu7F8qn7wi9jtXP/IDikvN5oDjCOHe+09S rSXfVa8hZv3ELwbNYWU2vWXB97fH0onXchwddwIByhPX8ntHEaehr4ZJ6BfMzs1n 5mdmxVVR7UIdknPj0l9H57eJPky/RF6PiG2txtE2vubfXT0w2JjBlgB2KhYMZXAp 3jjZiIRbpRRbNYpua3XZ5acxjNxz1FgKjfDT8TeCYOOCiek7UNVV/Mm40wXjfOjP HCSSwLLbmoV8x1iJzrcvXuEa7ecY/XxPIOaR/Xqs3MdgGOYWxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ3h1VO+qK92eFCODzFPBZJ05SyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmQxY2I5YjAtZWI1Yy0z ZWNhLTg2MDAtMzMxZTc1MDU1N2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO/ZyQLnlTgl3z27wyRYJm8ImSg/0ITKB9V7lESjEZpdHB4nPXmWHOa ch9ssBfXxcu4jyDa1TuYn9UcmrB50MI+6liSGgly8N+/bUP0C0Zb0AqkQ3Ro556F xis6O+Cj3CxCJA6e2KYTuEvG8FoXxQ8d5A120LsCHafHRfpQ0yngXaRtN5BBjSQL cDxuSp1vebY+Yynt9MXAVLm5s74F3bI11uIqaoIwtvBTq0QD/SaalcTl4V7bZP5s ciRO12805picAgzutJjjRfRzSKQHIILQ17M9GbQuY9lIxhHQv/9OD7KLwzTnB/Op bv16u35//BLQekOJVVUQYz2JqlCP0Q8= -----END CERTIFICATE-----Generated at Mon Jul 21 08:41:19 2025 by rpki-client