$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bcb7337-7afa-30ba-8d0b-4fe283441c5b.roa File: 3bcb7337-7afa-30ba-8d0b-4fe283441c5b.roa (raw, json) Hash identifier: +nzfllidYG16e1HozKPEnvlJ9n6ccc/TsIyGMtWon90= Subject key identifier: AD:47:86:4D:35:67:72:B2:01:22:C5:C5:F9:73:AA:0F:6C:61:3B:52 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AD7D1567C088D0106355438C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bcb7337-7afa-30ba-8d0b-4fe283441c5b.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 214238 IP address blocks: 172.120.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:56:7c:08:8d:01:06:35:54:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=1d43b259-2823-4802-ba24-8993641650ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:37:f8:dd:42:5e:3b:06:bb:82:c3:e1:48:1e: 51:f6:d7:2b:1c:12:0f:b3:7a:58:6e:a4:e0:ee:db: 95:a8:d4:99:96:0c:ea:02:9f:28:67:ec:e5:1a:76: 95:8e:07:95:71:83:56:39:ab:68:19:8a:d7:77:3e: 0c:04:34:5a:cd:09:56:48:2c:dd:9f:28:33:1e:42: 7d:4b:f1:dc:3b:84:e0:1a:0d:07:89:19:ea:91:d4: d0:0b:21:a7:43:b3:83:00:07:62:24:a7:4b:39:c0: 8e:b4:97:0a:e9:ee:ba:44:60:93:f3:c9:c4:b7:72: 80:29:ca:61:27:ca:63:5f:19:cd:2c:10:7a:2b:6a: 34:78:14:ff:cb:70:20:f4:7e:2b:da:57:25:0e:6a: 98:42:37:6b:43:86:f9:80:fd:90:c1:eb:85:70:d5: e0:7a:2c:f6:1d:48:b2:9b:c3:fc:e0:ae:d0:0b:9e: 8c:14:5a:6e:ea:ee:2a:3d:9a:5a:f5:db:2d:56:13: 90:35:fa:8e:63:80:5f:91:6b:29:60:fb:58:ee:7f: 3e:4c:1b:74:0c:75:8f:54:a5:24:eb:95:46:57:ab: 8f:e1:83:5f:40:9d:32:03:be:57:c2:3b:7e:bf:34: aa:c2:fa:7e:f1:28:ea:f6:37:11:b6:c8:a4:af:be: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:47:86:4D:35:67:72:B2:01:22:C5:C5:F9:73:AA:0F:6C:61:3B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bcb7337-7afa-30ba-8d0b-4fe283441c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:84:9f:99:f0:f6:b7:98:f3:c0:b2:52:5a:9b:c2:47:d6:08: 7d:ca:86:0e:a9:3f:8a:6e:3b:a3:40:c3:7e:ad:a5:c0:da:00: 11:fa:b3:82:ca:1b:a9:c7:a6:99:39:90:46:b3:aa:45:d7:33: 73:96:6d:6d:cb:c8:dd:1e:42:80:ec:ba:28:99:54:22:88:03: 41:69:f8:04:b6:cc:4f:c0:4e:bc:f6:53:1d:42:6a:cd:8a:1d: fa:41:7c:21:2c:30:b1:9f:18:23:85:8c:5e:7d:c2:1f:4a:8c: 58:42:76:38:ec:1c:32:71:41:2e:a6:26:3c:e8:2c:44:e0:42: cf:0c:82:9c:f1:ce:1c:00:1b:81:15:bc:ea:a5:96:ea:79:61: 8d:07:c9:d7:6e:c4:7f:56:8b:93:a9:15:6a:f2:a0:4c:52:65: 73:08:9f:cd:60:28:de:e0:55:3f:c7:56:7a:8d:bb:f2:e8:c4: 96:64:3e:a7:0a:65:f8:aa:02:e6:15:cf:6c:eb:84:4f:d3:cb: 17:e9:2a:cb:47:c7:fa:9d:a0:94:f9:fd:c3:8f:d8:11:a5:06: 4b:01:f6:47:c3:92:0e:af:7b:59:b9:ae:c1:02:37:5b:50:82: 4e:c1:a6:22:c7:7e:87:0c:f8:b5:80:39:37:bb:4a:09:55:9a: a1:1b:f7:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0VZ8CI0BBjVUOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MWQ0M2IyNTktMjgyMy00ODAyLWJhMjQtODk5MzY0MTY1MGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDf43UJeOwa7gsPhSB5R9tcrHBIPs3pYbqTg 7tuVqNSZlgzqAp8oZ+zlGnaVjgeVcYNWOatoGYrXdz4MBDRazQlWSCzdnygzHkJ9 S/HcO4TgGg0HiRnqkdTQCyGnQ7ODAAdiJKdLOcCOtJcK6e66RGCT88nEt3KAKcph J8pjXxnNLBB6K2o0eBT/y3Ag9H4r2lclDmqYQjdrQ4b5gP2QweuFcNXgeiz2HUiy m8P84K7QC56MFFpu6u4qPZpa9dstVhOQNfqOY4BfkWspYPtY7n8+TBt0DHWPVKUk 65VGV6uP4YNfQJ0yA75Xwjt+vzSqwvp+8Sjq9jcRtsikr766ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1Hhk01Z3KyASLFxflzqg9sYTtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2JjYjczMzctN2FmYS0z MGJhLThkMGItNGZlMjgzNDQxYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2En5nw9reY88CyUlqbwkfWCH3Khg6pP4puO6NAw36tpcDaABH6s4LK G6nHppk5kEazqkXXM3OWbW3LyN0eQoDsuiiZVCKIA0Fp+AS2zE/ATrz2Ux1Cas2K HfpBfCEsMLGfGCOFjF59wh9KjFhCdjjsHDJxQS6mJjzoLETgQs8MgpzxzhwAG4EV vOqllup5YY0HydduxH9Wi5OpFWryoExSZXMIn81gKN7gVT/HVnqNu/LoxJZkPqcK ZfiqAuYVz2zrhE/TyxfpKstHx/qdoJT5/cOP2BGlBksB9kfDkg6ve1m5rsECN1tQ gk7BpiLHfocM+LWAOTe7SglVmqEb9xM= -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:49 2025 by rpki-client