$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25e75c48-903f-35e8-ae3a-7b2201875aea.roa File: 25e75c48-903f-35e8-ae3a-7b2201875aea.roa (raw, json) Hash identifier: Jy/nRUty2PRmIK3c+3/PUOHPgD7lbBo4oudnFCz8AW0= Subject key identifier: CB:A6:C0:C0:E9:29:C6:B5:B6:05:B2:0B:BE:E5:04:6C:97:E5:3E:8F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A10353835342BBE661DB88800 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25e75c48-903f-35e8-ae3a-7b2201875aea.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 7018 IP address blocks: 172.121.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:38:35:34:2b:be:66:1d:b8:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=f8acb4e1-f2cb-4de4-a01c-79afe502107d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:63:b5:e7:ce:b8:82:3f:11:ae:d4:c1:7d:f2: d9:a2:dd:0a:da:c1:f1:ef:c6:46:36:75:ed:d3:50: 93:8a:b9:e8:e1:b4:6c:30:69:50:02:be:0e:12:35: fe:f3:c7:b6:87:13:b4:e3:a3:12:f7:2c:0c:89:d5: 4a:82:c0:5c:6e:16:fb:bb:86:44:88:da:3a:96:8b: 64:7c:de:b1:cd:51:d5:11:49:db:63:84:b8:f2:28: a9:89:ae:28:bf:e7:07:32:6c:4d:2a:5b:41:c7:64: f3:c2:6d:b0:bb:4b:93:52:28:d2:75:da:08:a8:d3: 46:87:83:14:a3:c3:52:b0:9c:8c:c3:88:2c:f8:54: 13:0e:f2:40:33:5a:d4:a8:4b:ea:10:3c:15:c4:ce: 2d:9d:a6:6c:9d:4e:0f:e5:79:16:2d:b4:09:01:f6: ef:4e:ec:06:43:d7:7f:60:59:35:bd:ef:7e:3d:97: e7:8e:9f:95:b9:f5:2a:8e:91:ff:11:bd:61:53:3d: d1:80:b8:1a:3b:0a:f9:13:e3:44:a1:91:96:23:24: f8:45:32:83:8d:5c:87:a0:2d:26:b2:38:dc:47:aa: 06:0c:eb:10:71:95:14:e2:c4:48:f3:cd:73:d3:93: 2d:bb:f4:3a:31:4d:28:b7:68:f9:5d:e4:36:4c:7f: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A6:C0:C0:E9:29:C6:B5:B6:05:B2:0B:BE:E5:04:6C:97:E5:3E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25e75c48-903f-35e8-ae3a-7b2201875aea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d1:fa:82:9f:46:55:7a:bb:c0:dc:05:57:94:69:7d:bf:39: 69:39:b8:c1:2a:52:cb:75:4f:52:83:d9:cd:99:c0:dd:88:c5: fa:74:0b:15:61:90:0a:f2:14:56:9d:63:b1:f9:24:4e:a2:fc: 2e:4e:aa:0c:94:70:4c:05:54:f9:cd:67:27:0c:66:bd:21:c0: fe:03:22:42:b6:3d:56:d5:6b:c2:48:4a:89:bf:2f:83:df:49: aa:2d:fe:8a:4c:d2:dc:5b:ff:cf:91:0d:bd:e8:7b:53:96:61: fa:f5:09:d4:77:9b:14:3c:86:6e:c8:f5:e4:77:f9:12:5f:d1: bf:c7:bf:e4:30:f4:02:a0:bf:9d:9c:44:07:6a:36:d6:ee:c0: 99:6c:42:6a:a7:6c:95:59:39:68:1a:0d:c7:82:48:4f:73:cd: 5a:cd:64:4f:08:83:c1:42:f5:6a:28:fe:a5:9e:34:d1:b7:87: 63:d0:22:4b:af:04:b6:a1:68:79:fd:67:39:1a:31:33:56:c9: fb:ff:75:44:12:6b:10:82:62:82:95:c3:6d:4f:78:f0:ef:4e: ca:09:e2:b9:23:91:17:70:c0:6c:8c:c6:7b:89:54:cb:2b:da: 3f:12:4d:d4:4f:2a:c0:89:a8:4e:71:03:b9:8a:83:11:64:19: f0:4e:b1:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTg1NCu+Zh24iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ZjhhY2I0ZTEtZjJjYi00ZGU0LWEwMWMtNzlhZmU1MDIxMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmO15864gj8RrtTBffLZot0K2sHx78ZGNnXt 01CTirno4bRsMGlQAr4OEjX+88e2hxO046MS9ywMidVKgsBcbhb7u4ZEiNo6lotk fN6xzVHVEUnbY4S48iipia4ov+cHMmxNKltBx2Tzwm2wu0uTUijSddoIqNNGh4MU o8NSsJyMw4gs+FQTDvJAM1rUqEvqEDwVxM4tnaZsnU4P5XkWLbQJAfbvTuwGQ9d/ YFk1ve9+PZfnjp+VufUqjpH/Eb1hUz3RgLgaOwr5E+NEoZGWIyT4RTKDjVyHoC0m sjjcR6oGDOsQcZUU4sRI881z05Mtu/Q6MU0ot2j5XeQ2TH/f5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMumwMDpKca1tgWyC77lBGyX5T6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjVlNzVjNDgtOTAzZi0z NWU4LWFlM2EtN2IyMjAxODc1YWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArR+oKfRlV6u8DcBVeUaX2/OWk5uMEqUst1T1KD2c2ZwN2Ixfp0CxVh kAryFFadY7H5JE6i/C5OqgyUcEwFVPnNZycMZr0hwP4DIkK2PVbVa8JISom/L4Pf Saot/opM0txb/8+RDb3oe1OWYfr1CdR3mxQ8hm7I9eR3+RJf0b/Hv+Qw9AKgv52c RAdqNtbuwJlsQmqnbJVZOWgaDceCSE9zzVrNZE8Ig8FC9Woo/qWeNNG3h2PQIkuv BLahaHn9ZzkaMTNWyfv/dUQSaxCCYoKVw21PePDvTsoJ4rkjkRdwwGyMxnuJVMsr 2j8STdRPKsCJqE5xA7mKgxFkGfBOsRM= -----END CERTIFICATE-----Generated at Tue Jul 1 13:56:53 2025 by rpki-client