$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1fbf0ec4-dbf0-3c7a-b2ac-3069affc5af8.roa File: 1fbf0ec4-dbf0-3c7a-b2ac-3069affc5af8.roa (raw, json) Hash identifier: b/vvwgErFIEJl9fxMlX4XVdWWIsQ1PoliNDGzoLUE8c= Subject key identifier: C7:3E:AE:AE:6F:3A:72:87:A1:B4:E0:ED:50:7A:27:BE:37:F5:F3:6D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AD7D1566C56110390C2269380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1fbf0ec4-dbf0-3c7a-b2ac-3069affc5af8.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 214238 IP address blocks: 172.120.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:56:6c:56:11:03:90:c2:26:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=f4c4ab09-0228-40ab-aa98-4fdfb06f670c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:28:07:9b:f7:37:ed:cb:31:85:cf:7f:5a: 21:9e:67:0a:01:3e:ed:74:b9:86:73:7c:7e:a2:26: f7:82:c1:f9:b9:bd:f3:f7:f3:9f:b4:d1:a2:60:39: 7c:2f:4a:9b:71:b0:fb:c9:48:04:2f:1a:79:f2:ad: 91:e7:1a:a2:fc:f7:36:ff:4c:df:f4:48:ae:2e:5c: ad:33:99:7f:1d:92:ba:75:fc:28:4d:72:eb:bb:8e: 54:66:95:35:36:df:80:24:10:a5:98:21:c4:24:e6: ac:03:19:35:e0:eb:d9:6b:6f:4e:86:81:0d:eb:4a: b6:d4:07:3c:d1:8d:24:1a:f2:85:7a:a4:df:ce:80: 0a:e4:77:71:14:7d:53:9d:ae:e4:e8:75:8c:bf:c0: a1:71:38:1f:4a:8d:e5:76:ff:cc:2a:fa:25:aa:80: 2f:26:74:37:a8:5e:49:31:e9:e3:e6:0e:30:82:a9: bb:ac:92:70:9e:16:fe:cf:7e:fc:56:f9:c0:1b:c6: d0:62:a5:5b:ac:29:42:36:ca:09:78:db:a5:23:ca: 22:55:94:f2:70:2f:e9:90:45:b4:e9:41:8e:7b:17: 98:46:8e:4d:6d:11:cd:4a:de:08:fc:a8:bb:16:9a: 13:ac:dc:69:be:0d:c3:bb:fc:62:da:8d:d6:90:53: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3E:AE:AE:6F:3A:72:87:A1:B4:E0:ED:50:7A:27:BE:37:F5:F3:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1fbf0ec4-dbf0-3c7a-b2ac-3069affc5af8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:32:76:e9:64:63:ac:80:c7:04:57:dc:b4:e7:6f:33:2d:88: c0:fe:41:58:fd:14:24:74:65:08:eb:a5:03:12:1a:22:e7:c4: 96:77:bf:28:4b:de:49:59:4d:cc:24:c8:70:d4:96:60:e9:85: b9:3a:d9:87:43:c3:6e:5c:66:2a:b1:c1:be:56:59:01:ba:54: 27:54:b0:b4:54:35:d4:a6:3d:0d:6e:e0:b6:ff:6c:b7:dc:ca: 96:89:e2:2e:88:42:ab:0a:ca:7c:d4:1a:ee:aa:16:47:da:de: 9e:4b:47:0c:83:40:12:99:23:2e:43:a5:27:5c:2a:d9:b1:60: 31:f7:c5:bd:3f:80:d0:0d:73:c4:d9:4a:95:4a:ed:56:17:aa: 0a:18:78:65:c2:dd:42:90:3c:29:e8:38:d8:ee:07:98:db:6a: 6b:5c:51:58:63:54:c2:79:40:9d:e2:1f:95:d8:50:5e:03:d5: cc:75:ef:ac:f6:6b:aa:8a:a4:63:c9:3f:46:aa:6d:18:93:50: 3b:cb:af:10:88:28:87:51:f0:25:4f:03:de:df:df:3a:99:f6: 4f:8d:1e:58:df:f9:a4:0a:01:5d:4f:43:55:e6:23:f9:a8:cd: 07:4f:f5:d4:e0:7b:5a:87:2d:cb:93:01:f0:b9:cd:2a:87:f4: 72:31:37:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0VZsVhEDkMImk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZjRjNGFiMDktMDIyOC00MGFiLWFhOTgtNGZkZmIwNmY2NzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdsoB5v3N+3LMYXPf1ohnmcKAT7tdLmGc3x+ oib3gsH5ub3z9/OftNGiYDl8L0qbcbD7yUgELxp58q2R5xqi/Pc2/0zf9EiuLlyt M5l/HZK6dfwoTXLru45UZpU1Nt+AJBClmCHEJOasAxk14OvZa29OhoEN60q21Ac8 0Y0kGvKFeqTfzoAK5HdxFH1Tna7k6HWMv8ChcTgfSo3ldv/MKvolqoAvJnQ3qF5J Menj5g4wgqm7rJJwnhb+z378VvnAG8bQYqVbrClCNsoJeNulI8oiVZTycC/pkEW0 6UGOexeYRo5NbRHNSt4I/Ki7FpoTrNxpvg3Du/xi2o3WkFO51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc+rq5vOnKHobTg7VB6J7439fNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWZiZjBlYzQtZGJmMC0z YzdhLWIyYWMtMzA2OWFmZmM1YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMydulkY6yAxwRX3LTnbzMtiMD+QVj9FCR0ZQjrpQMSGiLnxJZ3vyhL 3klZTcwkyHDUlmDphbk62YdDw25cZiqxwb5WWQG6VCdUsLRUNdSmPQ1u4Lb/bLfc ypaJ4i6IQqsKynzUGu6qFkfa3p5LRwyDQBKZIy5DpSdcKtmxYDH3xb0/gNANc8TZ SpVK7VYXqgoYeGXC3UKQPCnoONjuB5jbamtcUVhjVMJ5QJ3iH5XYUF4D1cx176z2 a6qKpGPJP0aqbRiTUDvLrxCIKIdR8CVPA97f3zqZ9k+NHljf+aQKAV1PQ1XmI/mo zQdP9dTge1qHLcuTAfC5zSqH9HIxN74= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:49 2025 by rpki-client