$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/477c19f3-4bc1-3941-a8c6-0bf5f9c10a0e.roa File: 477c19f3-4bc1-3941-a8c6-0bf5f9c10a0e.roa (raw, json) Hash identifier: igrqzaTJHjvPP+UQlEvA5kiNhG6bHhvJzincGyGIxjQ= Subject key identifier: 55:50:BD:05:2A:16:B0:05:2B:CB:D0:F4:BF:74:D5:CB:82:13:DC:E7 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BAEE7F18FC446B10D3D21C900 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/477c19f3-4bc1-3941-a8c6-0bf5f9c10a0e.roa Signing time: Wed 29 Oct 2025 14:05:41 +0000 ROA not before: Wed 29 Oct 2025 14:05:41 +0000 ROA not after: Tue 27 Jan 2026 15:05:41 +0000 asID: 205886 IP address blocks: 172.120.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:e7:f1:8f:c4:46:b1:0d:3d:21:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 29 14:05:41 2025 GMT Not After : Jan 27 15:05:41 2026 GMT Subject: CN=aa67dc70-10f5-47f6-b693-46ecad4cdde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:3c:43:31:e0:f0:98:12:d0:bc:ce:9e:72: 51:20:40:f8:7b:73:01:50:26:19:a9:ac:5e:39:a0: 45:5a:f2:bc:7b:b1:d9:33:02:5a:9d:99:c2:53:3b: 3b:1b:02:50:a4:8e:e2:4c:1d:45:3d:74:02:37:f5: e7:01:d9:52:cd:99:85:22:5f:68:5c:60:c7:23:5b: 84:db:30:fa:c1:b7:d0:04:13:58:33:d4:68:51:6f: c6:7b:04:d7:19:a0:ff:6f:cd:54:5a:9e:a8:d0:2d: 55:5f:46:9f:20:ba:74:9f:65:40:70:7f:83:c7:42: 58:b2:7b:69:03:39:f8:a3:12:0d:62:0e:f2:1b:b0: 8c:cb:60:69:a7:16:ec:e9:31:82:da:56:ae:b1:ac: c7:4a:86:68:b0:78:ea:57:98:0e:64:6b:a3:2c:62: a7:ef:4b:4e:85:73:20:62:1a:a9:65:35:a5:54:d8: 1b:6c:e5:ab:c9:14:0f:62:9f:c8:d6:8b:46:56:73: 0d:f5:d0:71:be:fd:fc:41:92:97:97:4f:b4:a4:4b: f7:c6:f9:7e:73:5f:d1:8f:8a:e8:2d:e4:ef:77:48: 2a:1a:fc:f2:63:75:79:9f:3b:bc:c3:56:1b:fa:dc: 26:6d:75:3c:dc:30:ad:c8:c1:36:a1:aa:57:50:a6: f6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:50:BD:05:2A:16:B0:05:2B:CB:D0:F4:BF:74:D5:CB:82:13:DC:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/477c19f3-4bc1-3941-a8c6-0bf5f9c10a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:29:60:23:63:d6:7d:1e:a1:35:e1:81:48:d1:4c:9c:d9:d9: ac:39:5f:69:73:3b:c3:23:dc:8a:be:86:29:79:6e:cb:cc:bb: cc:53:aa:5a:60:4f:9f:df:02:51:d6:8b:c3:a2:c9:75:d3:b1: 4f:ec:2c:b5:5a:f8:57:98:55:96:7c:22:33:70:30:d8:d1:44: d6:b7:40:28:af:06:97:46:3c:43:ae:0f:10:72:e6:fc:b9:c2: 35:4c:0f:5d:a2:5d:cd:17:9f:9e:02:e0:c3:47:8c:3a:f1:4e: 2f:3f:3c:d9:dd:93:15:f9:75:fe:d1:57:bc:2e:15:bf:06:5f: a6:b3:6a:5b:3e:2e:10:b7:64:d9:7c:09:4a:18:0b:71:01:90: 40:53:98:a8:d7:b2:87:93:46:27:b9:c3:4c:e5:37:7a:a4:ca: b4:71:95:22:85:f9:e6:25:3f:57:e8:0e:75:6d:3e:75:a7:4a: 4d:23:68:88:d4:38:cb:07:67:04:0f:7c:de:3c:20:d0:c0:4b: c8:cf:3c:a8:84:0d:45:93:1a:1c:4b:02:67:d1:d0:c5:9a:f0: cb:92:2f:14:02:7a:ba:11:1c:21:25:91:ed:6c:7a:c7:be:ed: 88:4d:58:a6:f9:d3:b8:c1:0e:9c:21:06:fb:a3:6a:63:25:b9: 05:94:23:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuu5/GPxEaxDT0hyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAyOTE0MDU0MVoXDTI2MDEyNzE1MDU0MVowLzEtMCsGA1UEAxMk YWE2N2RjNzAtMTBmNS00N2Y2LWI2OTMtNDZlY2FkNGNkZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/g8QzHg8JgS0LzOnnJRIED4e3MBUCYZqaxe OaBFWvK8e7HZMwJanZnCUzs7GwJQpI7iTB1FPXQCN/XnAdlSzZmFIl9oXGDHI1uE 2zD6wbfQBBNYM9RoUW/GewTXGaD/b81UWp6o0C1VX0afILp0n2VAcH+Dx0JYsntp Azn4oxINYg7yG7CMy2Bppxbs6TGC2lausazHSoZosHjqV5gOZGujLGKn70tOhXMg YhqpZTWlVNgbbOWryRQPYp/I1otGVnMN9dBxvv38QZKXl0+0pEv3xvl+c1/Rj4ro LeTvd0gqGvzyY3V5nzu8w1Yb+twmbXU83DCtyME2oapXUKb2YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVQvQUqFrAFK8vQ9L901cuCE9znMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDc3YzE5ZjMtNGJjMS0z OTQxLWE4YzYtMGJmNWY5YzEwYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHj6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkpYCNj1n0eoTXhgUjRTJzZ2aw5X2lzO8Mj3Iq+hil5bsvMu8xTqlpg T5/fAlHWi8OiyXXTsU/sLLVa+FeYVZZ8IjNwMNjRRNa3QCivBpdGPEOuDxBy5vy5 wjVMD12iXc0Xn54C4MNHjDrxTi8/PNndkxX5df7RV7wuFb8GX6azals+LhC3ZNl8 CUoYC3EBkEBTmKjXsoeTRie5w0zlN3qkyrRxlSKF+eYlP1foDnVtPnWnSk0jaIjU OMsHZwQPfN48INDAS8jPPKiEDUWTGhxLAmfR0MWa8MuSLxQCeroRHCElke1sese+ 7YhNWKb507jBDpwhBvujamMluQWUIz0= -----END CERTIFICATE-----Generated at Sat Nov 1 08:29:44 2025 by rpki-client