$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09de452e-3c76-31fb-85a2-5104d5aabd1e.roa File: 09de452e-3c76-31fb-85a2-5104d5aabd1e.roa (raw, json) Hash identifier: nxsjIVKMcnduTMmcYKTBnEvGhgMEP3LOrQXzrp+Hybo= Subject key identifier: 0B:4E:32:DB:56:E0:FD:1F:69:35:D4:6B:AA:3D:59:DD:9F:1C:4D:88 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AD7D155607E949CCE47274E9F Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09de452e-3c76-31fb-85a2-5104d5aabd1e.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 214238 IP address blocks: 172.120.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:55:60:7e:94:9c:ce:47:27:4e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=71f8098c-3190-499e-8a64-84f5739492f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:76:a6:64:a4:bd:b8:b7:ee:2e:a6:02:0e:45: 81:92:68:f0:ba:4c:6d:aa:ab:3d:80:27:f7:26:da: f3:1b:2d:53:59:ae:4c:11:9d:e4:02:74:47:32:d9: 65:d8:0e:29:cd:99:77:a6:e8:da:f0:46:23:af:52: c4:1e:bc:55:36:a8:d7:25:6a:67:2a:83:4c:72:a5: 13:e9:14:d0:dc:c6:d2:92:ea:fa:fa:a8:47:f8:78: 70:50:b2:03:af:d2:0e:c3:8c:d1:11:5d:0a:0b:5a: dc:0d:f8:15:73:cd:a8:df:dd:5a:8c:18:ff:3b:a5: 2c:67:73:7e:ce:53:76:0a:c5:a3:d8:7b:c6:7b:7c: 52:07:59:b2:db:7b:24:4c:6f:29:4d:87:a3:b6:e8: aa:1d:d5:15:49:54:8f:bc:61:2d:8a:e7:80:40:64: ec:6d:1a:da:d7:05:0b:05:ba:53:c6:fd:9f:90:f2: 16:67:13:22:91:07:7f:a3:24:cc:fa:ae:05:99:06: 26:3f:0c:7e:ce:17:84:fd:01:33:9b:93:02:69:2e: 4b:ab:cd:fa:72:07:d7:4d:d4:ef:70:82:89:09:cf: e0:79:77:ca:b5:52:ef:23:ef:f9:b6:b6:a3:de:68: 3b:36:65:1b:67:4a:ae:5b:78:c6:05:38:3a:57:86: 54:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4E:32:DB:56:E0:FD:1F:69:35:D4:6B:AA:3D:59:DD:9F:1C:4D:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09de452e-3c76-31fb-85a2-5104d5aabd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:90:48:4d:ae:df:d0:a3:79:3d:4e:ab:78:5a:a0:68:ed:d8: bc:7b:d7:d5:b4:91:66:11:7c:ee:0e:35:57:6a:31:fe:66:07: d6:98:81:3a:72:e5:41:53:b7:64:ac:b7:f5:6a:48:65:7d:6e: 41:8d:2a:b6:2b:d7:67:5c:6b:9f:65:cd:fc:b9:26:2b:27:bf: 04:86:3c:b0:85:15:cf:99:a6:aa:47:9a:a9:4a:6d:58:79:1a: 6a:0a:15:70:45:10:bd:0f:a1:74:41:75:85:ff:8f:bf:a4:d1: b9:59:4d:19:0e:2d:16:39:7c:a5:3e:3f:e1:02:5b:00:06:2d: ef:5d:3c:d0:72:0b:4e:1c:65:ce:40:9f:15:39:45:1f:22:f0: b2:01:3a:ad:8d:fe:60:b6:d3:8a:9c:ec:f2:7a:00:16:c7:17: bb:27:60:f5:5a:cf:e3:de:21:d5:27:45:c6:6d:fd:d9:2f:b9: 8d:d5:02:c1:c9:e1:d2:7d:dc:58:96:c5:69:a1:8d:27:08:20: 06:55:80:22:3a:22:14:c0:24:50:00:04:6b:ac:2d:0b:b6:8e: d5:b8:09:5f:61:a5:f5:11:cf:d7:7f:c0:ae:c5:27:c4:ad:c1: 9f:a4:a0:8d:a6:2c:e2:1c:0a:f2:01:a3:b5:9f:55:99:e1:7b: 43:5c:1a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0VVgfpSczkcnTp8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NzFmODA5OGMtMzE5MC00OTllLThhNjQtODRmNTczOTQ5MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXamZKS9uLfuLqYCDkWBkmjwukxtqqs9gCf3 JtrzGy1TWa5MEZ3kAnRHMtll2A4pzZl3puja8EYjr1LEHrxVNqjXJWpnKoNMcqUT 6RTQ3MbSkur6+qhH+HhwULIDr9IOw4zREV0KC1rcDfgVc82o391ajBj/O6UsZ3N+ zlN2CsWj2HvGe3xSB1my23skTG8pTYejtuiqHdUVSVSPvGEtiueAQGTsbRra1wUL BbpTxv2fkPIWZxMikQd/oyTM+q4FmQYmPwx+zheE/QEzm5MCaS5Lq836cgfXTdTv cIKJCc/geXfKtVLvI+/5traj3mg7NmUbZ0quW3jGBTg6V4ZUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtOMttW4P0faTXUa6o9Wd2fHE2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDlkZTQ1MmUtM2M3Ni0z MWZiLTg1YTItNTEwNGQ1YWFiZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+QSE2u39CjeT1Oq3haoGjt2Lx719W0kWYRfO4ONVdqMf5mB9aYgTpy 5UFTt2Sst/VqSGV9bkGNKrYr12dca59lzfy5JisnvwSGPLCFFc+ZpqpHmqlKbVh5 GmoKFXBFEL0PoXRBdYX/j7+k0blZTRkOLRY5fKU+P+ECWwAGLe9dPNByC04cZc5A nxU5RR8i8LIBOq2N/mC204qc7PJ6ABbHF7snYPVaz+PeIdUnRcZt/dkvuY3VAsHJ 4dJ93FiWxWmhjScIIAZVgCI6IhTAJFAABGusLQu2jtW4CV9hpfURz9d/wK7FJ8St wZ+koI2mLOIcCvIBo7WfVZnhe0NcGnA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:49 2025 by rpki-client