$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3cc647ec-ef43-3ecb-b134-49f6038c3db4.roa File: 3cc647ec-ef43-3ecb-b134-49f6038c3db4.roa (raw, json) Hash identifier: NKX3+Rh+Toxa2Ym3/oy1GXUZjVqjpv8lKldibUl2DeY= Subject key identifier: C9:67:77:25:DD:EE:23:86:2C:86:B6:FB:C6:14:C3:C6:99:C3:B0:41 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B8A7CC964F950D1E36BBDFA80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3cc647ec-ef43-3ecb-b134-49f6038c3db4.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 55201 IP address blocks: 172.121.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:c9:64:f9:50:d1:e3:6b:bd:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=d2a59bbd-006b-4eb2-a323-add748140d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0b:75:5a:eb:7b:87:fb:b1:e5:cf:4d:6d:d5: f9:f8:f7:b2:67:6e:36:5c:c0:c9:f7:db:a5:34:0b: 1e:0e:4d:8b:b8:80:b7:59:f8:71:38:8d:92:04:3d: 43:f7:fa:31:bb:db:24:0d:30:ad:5d:56:d1:ca:12: 47:82:8e:82:c5:be:b9:a3:9e:17:29:cb:eb:a6:c5: 6d:11:5c:58:83:be:05:83:e0:95:b8:47:e1:fd:f1: 32:9d:5c:e7:27:fc:f3:aa:b5:20:96:ba:a8:b7:a0: 48:78:cb:86:02:e2:50:0d:e7:23:c2:7c:77:59:0c: 10:3f:48:b0:7b:dc:7c:d2:d8:54:0e:61:67:50:fc: dc:cd:a9:20:ef:d8:53:77:56:47:09:61:7e:49:fe: cc:86:77:3d:6e:04:83:07:0c:4e:c7:2c:2e:b2:67: b3:45:f3:91:02:e2:69:2f:7d:ed:d6:b6:34:76:1b: 35:5a:0d:a2:80:af:d4:a1:a1:50:13:06:98:19:c9: 66:c7:26:52:b4:8b:87:94:76:30:71:4d:fe:ce:ae: f9:7b:da:c1:a6:01:f4:c5:47:f8:b7:c0:27:29:d4: 3c:db:e1:be:c5:2c:28:81:0d:f9:0a:23:59:80:d5: b8:b4:c2:49:74:e7:77:96:eb:e5:f9:7d:4f:0c:44: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:67:77:25:DD:EE:23:86:2C:86:B6:FB:C6:14:C3:C6:99:C3:B0:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3cc647ec-ef43-3ecb-b134-49f6038c3db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:22:b3:94:1d:b9:68:78:b9:cb:af:2f:14:ad:93:d1:36:9e: 20:cf:38:0e:91:e4:a9:b3:29:49:c4:67:cd:ff:75:ec:1a:2e: 61:77:38:d3:5a:97:7f:d9:c1:39:cd:ba:be:c1:e6:15:9a:dd: 3d:51:2e:3f:c2:8a:90:83:e4:99:6e:8c:35:2e:40:03:bd:97: 35:d8:ca:fe:7b:14:72:6d:9e:2f:1e:e8:59:79:91:50:60:81: cb:39:41:d6:5f:9e:5e:f1:18:0a:c0:46:67:eb:a8:07:06:61: bd:c0:13:87:c1:f0:fc:64:b4:77:8d:f6:53:41:d4:5f:f0:61: cb:85:9e:aa:f8:66:7a:f7:ac:7a:94:0f:a9:b8:09:88:d6:2a: 00:9f:bf:89:28:58:b2:3d:0a:49:e6:66:19:01:23:6d:51:6d: 4f:cd:1a:7b:38:5c:d3:6a:1f:d6:e4:0e:8b:77:f9:2d:07:74: 46:64:3d:ac:52:c7:4f:59:04:9b:e0:e3:e9:7a:36:76:49:86: f6:6d:96:70:18:63:41:13:b5:aa:68:c2:c2:ef:a9:fe:3e:e5: 2f:28:3e:87:bf:51:b6:0b:38:0e:8d:46:64:9e:1b:53:76:ed: 7d:16:c2:51:cd:1e:ff:ed:3a:82:c3:d7:21:30:05:6f:58:ac: 52:29:f9:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfMlk+VDR42u9+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk ZDJhNTliYmQtMDA2Yi00ZWIyLWEzMjMtYWRkNzQ4MTQwZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwt1Wut7h/ux5c9NbdX5+PeyZ242XMDJ99ul NAseDk2LuIC3WfhxOI2SBD1D9/oxu9skDTCtXVbRyhJHgo6Cxb65o54XKcvrpsVt EVxYg74Fg+CVuEfh/fEynVznJ/zzqrUglrqot6BIeMuGAuJQDecjwnx3WQwQP0iw e9x80thUDmFnUPzczakg79hTd1ZHCWF+Sf7Mhnc9bgSDBwxOxywusmezRfORAuJp L33t1rY0dhs1Wg2igK/UoaFQEwaYGclmxyZStIuHlHYwcU3+zq75e9rBpgH0xUf4 t8AnKdQ82+G+xSwogQ35CiNZgNW4tMJJdOd3luvl+X1PDETgCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlndyXd7iOGLIa2+8YUw8aZw7BBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2NjNjQ3ZWMtZWY0My0z ZWNiLWIxMzQtNDlmNjAzOGMzZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADois5QduWh4ucuvLxStk9E2niDPOA6R5KmzKUnEZ83/dewaLmF3ONNa l3/ZwTnNur7B5hWa3T1RLj/CipCD5JlujDUuQAO9lzXYyv57FHJtni8e6Fl5kVBg gcs5QdZfnl7xGArARmfrqAcGYb3AE4fB8PxktHeN9lNB1F/wYcuFnqr4Znr3rHqU D6m4CYjWKgCfv4koWLI9CknmZhkBI21RbU/NGns4XNNqH9bkDot3+S0HdEZkPaxS x09ZBJvg4+l6NnZJhvZtlnAYY0ETtapowsLvqf4+5S8oPoe/UbYLOA6NRmSeG1N2 7X0WwlHNHv/tOoLD1yEwBW9YrFIp+Wg= -----END CERTIFICATE-----Generated at Mon Oct 20 21:40:58 2025 by rpki-client