$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/356384cb-74b4-37df-b7a3-c086246cf03a.roa File: 356384cb-74b4-37df-b7a3-c086246cf03a.roa (raw, json) Hash identifier: 80UQmG8cxDxM2rCmRpqp53cXtbGOrK7+PzM2Eo0xUYQ= Subject key identifier: DE:F7:8A:52:A5:AF:D8:E6:B1:5F:96:96:74:08:75:B7:07:E4:70:20 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB2253761AA06383E33D37C00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/356384cb-74b4-37df-b7a3-c086246cf03a.roa Signing time: Thu 30 Oct 2025 17:56:34 +0000 ROA not before: Thu 30 Oct 2025 17:56:34 +0000 ROA not after: Wed 28 Jan 2026 18:56:34 +0000 asID: 834 IP address blocks: 172.120.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:25:37:61:aa:06:38:3e:33:d3:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 30 17:56:34 2025 GMT Not After : Jan 28 18:56:34 2026 GMT Subject: CN=2aef2ea7-b447-4cd2-9255-d50c13fb4145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:2f:8a:a6:41:70:3e:ae:08:04:63:f8:e8: 3e:7b:12:04:80:f0:4c:58:76:61:ba:a3:29:ae:a9: a1:04:e6:ea:32:1f:ab:6d:5c:52:b3:40:1c:07:a9: 7e:ac:7b:2f:dc:f5:3b:7c:73:c3:5a:d1:a1:52:d0: 79:6c:26:5b:74:75:69:81:01:c6:8b:e3:17:f4:2d: 89:c3:cc:6f:60:56:61:72:e6:ad:a1:d7:45:a6:7e: 29:74:39:cb:fc:4b:88:3a:15:41:7d:a6:da:c9:1d: d3:77:c0:7a:96:95:19:d9:9e:f5:41:25:5b:e4:65: 46:f3:ec:91:09:a5:49:3a:5c:6a:a3:e0:5a:b4:99: c1:c6:b4:24:f4:b5:f5:25:2d:47:64:82:9d:02:f8: ae:3c:75:ba:d1:7a:92:ee:a0:0e:f5:70:eb:41:2b: 7b:99:a0:8d:49:3f:ea:38:ca:54:ae:06:66:16:12: 47:b3:35:65:46:80:72:bf:77:ad:27:0d:73:5e:da: 56:d4:15:19:71:04:a8:82:8d:bc:c9:2a:2d:25:0a: ad:29:46:eb:84:8f:4a:89:14:b6:c0:db:07:0c:2e: 39:32:35:6b:dc:44:a3:8d:77:d6:e4:c0:69:a7:54: 1c:e0:8c:67:65:82:a2:03:99:cb:18:e3:1b:ad:37: e0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F7:8A:52:A5:AF:D8:E6:B1:5F:96:96:74:08:75:B7:07:E4:70:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/356384cb-74b4-37df-b7a3-c086246cf03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ab:24:96:26:f9:94:bf:6a:47:dc:ca:a3:b0:63:5c:8e:54: 04:bb:e8:ea:c1:12:4a:53:16:8a:18:f1:46:4b:cd:c0:f9:d8: a0:b6:6a:ad:0f:43:d3:c7:1a:ec:57:19:32:ba:e6:6c:5e:2d: 50:f9:15:56:12:4e:a1:b2:e3:dc:22:fc:fe:17:17:44:b3:07: 39:27:33:ab:9b:29:9e:9c:65:a3:d2:53:a2:de:c1:fa:67:a9: 7e:ac:f9:18:19:73:82:2e:12:f1:d8:31:d7:2f:c5:74:a1:1b: 33:76:dd:ab:44:25:00:8b:b9:d7:b6:40:51:b4:ce:36:36:73: 3f:7e:33:51:31:a2:1c:a7:e7:e7:e0:bb:0c:79:5b:64:ff:f0: d7:55:75:38:47:f7:1f:02:c5:e6:e8:d5:9a:b2:33:3f:a6:97: 76:30:1b:30:f9:8d:64:d5:44:fd:01:6c:e1:75:93:87:d2:9a: 49:84:eb:5a:fe:9f:82:8e:5d:69:a7:bb:ab:17:30:22:66:72: 30:35:16:98:81:eb:12:ee:5d:cd:c5:d7:07:7b:cf:6e:1b:5d: 97:48:02:33:14:4b:cc:83:54:d5:2c:e1:b2:c3:61:9f:e7:74: d7:b7:8f:02:4c:d8:59:f5:79:c1:87:ba:cc:91:59:16:57:fd: 6d:1a:39:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuyJTdhqgY4PjPTfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAzMDE3NTYzNFoXDTI2MDEyODE4NTYzNFowLzEtMCsGA1UEAxMk MmFlZjJlYTctYjQ0Ny00Y2QyLTkyNTUtZDUwYzEzZmI0MTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EkviqZBcD6uCARj+Og+exIEgPBMWHZhuqMp rqmhBObqMh+rbVxSs0AcB6l+rHsv3PU7fHPDWtGhUtB5bCZbdHVpgQHGi+MX9C2J w8xvYFZhcuatoddFpn4pdDnL/EuIOhVBfabayR3Td8B6lpUZ2Z71QSVb5GVG8+yR CaVJOlxqo+BatJnBxrQk9LX1JS1HZIKdAviuPHW60XqS7qAO9XDrQSt7maCNST/q OMpUrgZmFhJHszVlRoByv3etJw1zXtpW1BUZcQSogo28ySotJQqtKUbrhI9KiRS2 wNsHDC45MjVr3ESjjXfW5MBpp1Qc4IxnZYKiA5nLGOMbrTfg8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN73ilKlr9jmsV+WlnQIdbcH5HAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzU2Mzg0Y2ItNzRiNC0z N2RmLWI3YTMtYzA4NjI0NmNmMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+rJJYm+ZS/akfcyqOwY1yOVAS76OrBEkpTFooY8UZLzcD52KC2aq0P Q9PHGuxXGTK65mxeLVD5FVYSTqGy49wi/P4XF0SzBzknM6ubKZ6cZaPSU6Lewfpn qX6s+RgZc4IuEvHYMdcvxXShGzN23atEJQCLude2QFG0zjY2cz9+M1Exohyn5+fg uwx5W2T/8NdVdThH9x8Cxebo1ZqyMz+ml3YwGzD5jWTVRP0BbOF1k4fSmkmE61r+ n4KOXWmnu6sXMCJmcjA1FpiB6xLuXc3F1wd7z24bXZdIAjMUS8yDVNUs4bLDYZ/n dNe3jwJM2Fn1ecGHusyRWRZX/W0aOZE= -----END CERTIFICATE-----Generated at Fri Oct 31 05:32:53 2025 by rpki-client