$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d4a625b-c8eb-345b-bc68-e2af4e2a29fb.roa File: 4d4a625b-c8eb-345b-bc68-e2af4e2a29fb.roa (raw, json) Hash identifier: /O3hh0sldzqoUQykxPIWnd9RxDh3ssS9QpySDQA3quI= Subject key identifier: CC:8F:52:04:3A:73:39:75:5D:37:D9:A0:8A:92:08:D5:22:9F:A2:14 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AD7D1564A27EEBDC15558A400 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d4a625b-c8eb-345b-bc68-e2af4e2a29fb.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 214238 IP address blocks: 172.120.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:56:4a:27:ee:bd:c1:55:58:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=7188f281-2066-4938-92e9-f4d9f50d04cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6b:e3:9d:65:d0:4b:6f:12:64:a7:77:68:af: 86:5a:53:73:83:36:96:8d:de:de:8e:01:40:77:f3: 33:8b:b2:ab:48:2f:11:43:58:00:c6:94:3a:20:89: 60:8b:e5:9f:7f:cd:a3:b2:a5:35:25:43:27:cd:74: cd:81:3f:9b:bd:65:11:33:80:38:22:e9:4a:3b:dc: f6:3a:e0:6e:16:de:7b:e6:87:08:96:a6:ea:a6:42: 45:6b:b4:df:26:03:6a:b5:55:cf:83:34:9f:55:e8: 85:29:3b:e3:1c:87:43:1d:7d:a3:3a:bf:de:16:18: 74:52:fb:e6:90:1f:b0:17:3d:0e:a3:db:32:ec:13: 8e:34:da:fe:cd:22:57:49:74:54:a6:d8:01:5a:4f: 1f:1a:c7:17:bf:f1:99:66:54:a3:ee:0a:19:0b:5d: e5:01:81:92:ec:ff:a6:e1:0f:fe:fb:03:03:cf:b3: 1a:33:67:a1:79:a4:ef:6b:52:44:b2:fa:b3:b9:bb: 21:48:9d:4b:80:33:f1:b1:ed:e4:d4:4f:aa:9f:f3: 26:cf:90:6a:71:77:09:09:35:d2:9c:b7:3d:de:27: 19:fc:ed:2e:6c:8a:ca:3b:f7:54:02:ab:ee:98:a2: 24:c6:66:9e:7f:49:41:b1:13:41:96:44:11:ad:aa: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8F:52:04:3A:73:39:75:5D:37:D9:A0:8A:92:08:D5:22:9F:A2:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d4a625b-c8eb-345b-bc68-e2af4e2a29fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:56:00:73:b7:ca:e1:31:a8:8a:56:56:28:48:16:22:d8:86: 1d:1b:93:2f:7f:7c:25:e0:48:59:58:d3:5e:f5:ac:f1:97:b5: 1d:10:07:9d:4c:cd:f2:14:06:6b:6d:16:e1:6c:19:3c:c6:91: f4:61:1e:ba:87:a2:7b:7b:e4:f9:d4:70:45:6e:43:c4:3b:b1: cb:3e:47:bb:3a:a7:4c:5e:38:3e:2b:d5:97:f0:fc:35:22:fe: 85:2e:98:56:07:55:28:1d:aa:53:07:d4:85:22:cd:8e:fa:0c: 3f:14:ee:35:b6:cd:e1:4b:91:c5:d9:7e:1d:5a:df:fa:29:63: 8b:94:e7:5b:67:38:b7:12:b7:41:f2:d7:0d:4d:d1:64:a0:6c: a4:71:a2:8f:b1:ef:71:f7:a7:fd:bc:81:f9:15:07:e3:90:0d: e6:dc:6f:4a:28:c0:8c:f1:95:c3:5e:1d:3f:ee:e4:64:dc:f3: 1d:1b:c1:6f:7a:f1:fd:5e:4f:b2:de:cc:e6:a2:b9:48:00:15: d7:82:c4:95:c2:e2:eb:fb:14:c9:95:c5:04:cf:08:18:c5:5d: 6b:f1:a4:17:7d:fe:ec:a8:d9:8b:a1:23:05:25:6f:8e:2b:35: 52:0d:65:ee:fc:87:f0:c0:4c:49:50:8b:ee:a4:6c:ed:88:42: fe:5c:b8:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0VZKJ+69wVVYpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NzE4OGYyODEtMjA2Ni00OTM4LTkyZTktZjRkOWY1MGQwNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGvjnWXQS28SZKd3aK+GWlNzgzaWjd7ejgFA d/Mzi7KrSC8RQ1gAxpQ6IIlgi+Wff82jsqU1JUMnzXTNgT+bvWURM4A4IulKO9z2 OuBuFt575ocIlqbqpkJFa7TfJgNqtVXPgzSfVeiFKTvjHIdDHX2jOr/eFhh0Uvvm kB+wFz0Oo9sy7BOONNr+zSJXSXRUptgBWk8fGscXv/GZZlSj7goZC13lAYGS7P+m 4Q/++wMDz7MaM2eheaTva1JEsvqzubshSJ1LgDPxse3k1E+qn/Mmz5BqcXcJCTXS nLc93icZ/O0ubIrKO/dUAqvumKIkxmaef0lBsRNBlkQRrarOawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyPUgQ6czl1XTfZoIqSCNUin6IUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGQ0YTYyNWItYzhlYi0z NDViLWJjNjgtZTJhZjRlMmEyOWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFWAHO3yuExqIpWVihIFiLYhh0bky9/fCXgSFlY0171rPGXtR0QB51M zfIUBmttFuFsGTzGkfRhHrqHont75PnUcEVuQ8Q7scs+R7s6p0xeOD4r1Zfw/DUi /oUumFYHVSgdqlMH1IUizY76DD8U7jW2zeFLkcXZfh1a3/opY4uU51tnOLcSt0Hy 1w1N0WSgbKRxoo+x73H3p/28gfkVB+OQDebcb0oowIzxlcNeHT/u5GTc8x0bwW96 8f1eT7LezOaiuUgAFdeCxJXC4uv7FMmVxQTPCBjFXWvxpBd9/uyo2YuhIwUlb44r NVINZe78h/DATElQi+6kbO2IQv5cuLI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:51:03 2025 by rpki-client