$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/12d222f2-c365-3a4f-9713-748e11edcd1a.roa File: 12d222f2-c365-3a4f-9713-748e11edcd1a.roa (raw, json) Hash identifier: VXr1gE+IeVx841QduHtQ6o/4cNL24kVyPFCW+0jLDSM= Subject key identifier: 2F:05:74:52:F6:D3:E8:90:FE:A3:AB:F6:9A:64:2F:4F:21:39:EC:EB Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B6D2CC120A211013AC45CD480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/12d222f2-c365-3a4f-9713-748e11edcd1a.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 6939 IP address blocks: 172.120.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:c1:20:a2:11:01:3a:c4:5c:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=3f3ff1dd-fb9d-494d-a286-7d4a12a13f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:77:b5:ba:a8:91:88:dd:27:79:08:f1:94:b5: b9:e9:bf:09:b7:4c:96:af:03:ce:39:bc:00:8b:1c: 3c:13:e4:32:0d:f6:f4:80:da:55:2f:d0:d5:52:87: f3:21:60:7e:22:67:c3:a0:0d:bb:af:b5:b9:7c:46: b2:15:2b:c0:ba:5b:39:36:ed:0b:10:1f:72:05:47: 5d:ef:6f:af:8f:ed:a1:dc:2f:11:07:d2:eb:a1:9c: 85:6f:81:dd:2e:e2:3f:af:31:7d:d8:a6:08:70:1d: e9:7c:74:ae:84:2d:9a:47:93:85:02:ec:5d:e4:a9: f9:d3:95:26:02:c6:22:a0:7f:4c:c3:b1:53:60:1f: 3f:44:da:60:f0:db:81:2f:3f:65:71:b8:30:03:56: 3d:6e:8a:ad:44:7a:c0:a3:e7:89:82:a8:e7:91:0d: f9:da:7d:c1:b0:6e:2c:6e:27:c4:35:d0:f1:7f:77: 3f:62:df:f3:64:d3:41:30:45:bb:25:33:96:68:ed: c5:71:6b:33:0b:f0:d7:91:df:c3:e9:a7:f4:3b:97: af:69:34:7a:72:6e:fb:7f:f9:e9:4a:ed:25:ca:d6: bd:b0:74:7c:b5:91:6b:25:ff:a4:95:63:9c:df:9b: 1f:12:ac:bf:18:46:36:08:08:5a:b2:2a:e3:eb:f6: 35:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:05:74:52:F6:D3:E8:90:FE:A3:AB:F6:9A:64:2F:4F:21:39:EC:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/12d222f2-c365-3a4f-9713-748e11edcd1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9a:65:13:f7:4c:46:9c:4f:96:7c:99:25:70:d7:24:ee:e2: ba:58:62:74:f8:67:cf:77:04:d9:13:a4:9f:20:8c:ed:e4:6f: c5:d4:e0:5e:9e:4f:7b:40:ea:b4:01:b4:07:67:f8:c1:89:e5: 3a:b7:fc:3c:cf:58:68:c2:9a:55:a9:90:88:ad:ce:49:c4:5c: 8b:eb:67:e5:11:19:92:24:d4:f9:c9:38:6a:59:cf:ce:89:ef: aa:8b:45:21:b2:a3:b9:a7:c2:47:76:9d:0f:e8:9e:14:53:4a: c5:81:f4:47:7d:9c:af:d5:f4:21:bc:9e:3f:dd:6c:6c:3c:a1: 02:85:1e:71:20:18:2f:23:57:52:b2:b3:ec:4d:1f:c8:6d:03: 41:ff:d8:31:b8:49:8f:32:e7:f4:9a:ad:29:40:19:20:cb:e1: 6c:ad:3f:e1:0c:42:6b:6f:f5:d4:9e:ac:69:53:76:e5:ed:ef: 6f:84:ab:39:0b:ca:47:cd:d2:be:fd:7b:66:9a:fd:90:85:9a: 3a:d8:6c:ab:68:61:2a:e2:c9:24:b4:b1:76:f8:26:2a:e3:64: 7a:e8:6d:8e:af:c7:24:4b:0f:51:43:97:79:d6:90:2e:05:92: f0:40:be:fd:71:da:41:10:18:80:eb:cd:f1:d1:46:6b:3d:e8: 5f:b8:1c:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLMEgohEBOsRc1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk M2YzZmYxZGQtZmI5ZC00OTRkLWEyODYtN2Q0YTEyYTEzZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3e1uqiRiN0neQjxlLW56b8Jt0yWrwPOObwA ixw8E+QyDfb0gNpVL9DVUofzIWB+ImfDoA27r7W5fEayFSvAuls5Nu0LEB9yBUdd 72+vj+2h3C8RB9LroZyFb4HdLuI/rzF92KYIcB3pfHSuhC2aR5OFAuxd5Kn505Um AsYioH9Mw7FTYB8/RNpg8NuBLz9lcbgwA1Y9boqtRHrAo+eJgqjnkQ352n3BsG4s bifENdDxf3c/Yt/zZNNBMEW7JTOWaO3FcWszC/DXkd/D6af0O5evaTR6cm77f/np Su0lyta9sHR8tZFrJf+klWOc35sfEqy/GEY2CAhasirj6/Y1vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8FdFL20+iQ/qOr9ppkL08hOezrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTJkMjIyZjItYzM2NS0z YTRmLTk3MTMtNzQ4ZTExZWRjZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeaZRP3TEacT5Z8mSVw1yTu4rpYYnT4Z893BNkTpJ8gjO3kb8XU4F6e T3tA6rQBtAdn+MGJ5Tq3/DzPWGjCmlWpkIitzknEXIvrZ+URGZIk1PnJOGpZz86J 76qLRSGyo7mnwkd2nQ/onhRTSsWB9Ed9nK/V9CG8nj/dbGw8oQKFHnEgGC8jV1Ky s+xNH8htA0H/2DG4SY8y5/SarSlAGSDL4WytP+EMQmtv9dSerGlTduXt72+EqzkL ykfN0r79e2aa/ZCFmjrYbKtoYSriySS0sXb4JirjZHrobY6vxyRLD1FDl3nWkC4F kvBAvv1x2kEQGIDrzfHRRms96F+4HEw= -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:30 2025 by rpki-client