$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/543093bb-0c16-3380-aa46-f5fa0a6aed8a.roa File: 543093bb-0c16-3380-aa46-f5fa0a6aed8a.roa (raw, json) Hash identifier: lN39kHRNgA4J3xJYlwlv7gYPCLFSInxDTLOlHA+xi1c= Subject key identifier: F3:48:70:E1:91:A0:68:CC:89:EE:B4:AF:FA:03:62:7D:A9:8B:C2:07 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AD7D153064180D18F2E423E00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/543093bb-0c16-3380-aa46-f5fa0a6aed8a.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 214238 IP address blocks: 172.120.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:53:06:41:80:d1:8f:2e:42:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=1ea75e1a-8e03-4e6c-8331-771abdaf684f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d3:cb:ca:e7:0f:88:a9:a9:6a:50:72:d7:f8: dc:b7:06:b4:37:a9:35:f7:d0:fe:06:eb:22:ac:08: 15:14:d5:78:a0:7e:20:4a:8e:43:ee:e4:58:95:c3: 55:b5:1d:10:2c:eb:85:fb:88:fc:8c:c9:cd:c6:dc: 37:52:d8:67:6e:09:99:cc:a5:76:e1:c5:c1:6e:bf: 46:5d:f4:ed:77:1d:96:8b:71:4e:5d:4a:42:d5:db: 62:de:59:10:5f:0f:dd:31:a5:01:df:b7:b9:a5:b4: f9:51:6e:f0:4d:71:8a:9b:42:10:30:a3:b2:02:c4: bc:b2:fe:d0:c1:ca:8c:e0:52:46:35:21:a1:7b:c0: 60:fd:8b:22:80:c2:0d:0b:9c:59:31:e0:32:c3:35: b4:f4:87:9e:75:b7:61:33:31:b8:6c:14:d6:92:fa: 00:52:dc:8d:31:78:58:81:d0:b1:cf:49:64:6e:c3: 97:f5:a7:56:8f:cb:5f:b9:6a:8a:cc:3f:5e:b8:89: 2c:3d:7b:a7:b1:4e:0e:05:4b:77:7f:1b:0b:a1:3f: b0:1a:ff:9e:01:34:3a:7a:9e:61:d6:f8:82:28:0f: 0a:27:48:8d:de:d9:a8:c5:dc:b1:5a:8b:51:94:50: f1:ac:e7:b7:91:4e:c0:fa:5c:a9:17:95:0d:b2:e9: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:48:70:E1:91:A0:68:CC:89:EE:B4:AF:FA:03:62:7D:A9:8B:C2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/543093bb-0c16-3380-aa46-f5fa0a6aed8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:10:fe:38:32:e4:3f:f8:ab:e1:f1:01:24:d6:dd:27:9a:13: f2:e5:cc:b6:97:6c:1c:8a:ef:2d:3d:48:5a:ca:87:60:e6:e9: 96:68:ef:73:98:6d:38:c1:ca:ac:c0:39:dd:48:56:02:11:3f: b6:a5:40:d2:7c:63:63:0b:59:8d:1e:30:95:28:a5:1e:58:a6: 51:63:b7:f9:bc:a1:db:97:6b:86:11:d6:ab:70:dc:a1:a5:56: dd:84:6e:4b:08:99:d9:0a:d1:94:a1:5a:ad:58:19:20:36:71: ce:df:a3:b3:fa:cc:b8:d8:7c:82:80:98:7a:8d:4f:af:f8:92: 65:92:fe:7c:6e:0a:f0:1d:e0:23:06:80:1c:a4:7b:e9:79:96: 15:00:37:48:75:75:df:31:41:80:14:1d:e4:e1:11:ff:d5:4a: 44:d0:05:f2:5a:2c:2e:5d:23:87:c0:49:9a:7f:99:eb:55:b7: 94:6a:b8:da:16:e5:1f:8e:c0:94:97:9e:27:67:db:13:57:da: da:03:d8:89:e9:de:f5:3f:e9:d5:23:d4:99:9e:9f:8e:95:38: 80:ef:f7:b1:18:b8:92:b5:e5:79:de:1b:83:1f:e4:2c:42:a6: 0a:76:5a:e1:3d:82:48:0b:a6:74:a1:da:e0:c6:ce:a8:02:b1: ec:e7:ed:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0VMGQYDRjy5CPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MWVhNzVlMWEtOGUwMy00ZTZjLTgzMzEtNzcxYWJkYWY2ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9PLyucPiKmpalBy1/jctwa0N6k199D+Busi rAgVFNV4oH4gSo5D7uRYlcNVtR0QLOuF+4j8jMnNxtw3UthnbgmZzKV24cXBbr9G XfTtdx2Wi3FOXUpC1dti3lkQXw/dMaUB37e5pbT5UW7wTXGKm0IQMKOyAsS8sv7Q wcqM4FJGNSGhe8Bg/YsigMINC5xZMeAywzW09IeedbdhMzG4bBTWkvoAUtyNMXhY gdCxz0lkbsOX9adWj8tfuWqKzD9euIksPXunsU4OBUt3fxsLoT+wGv+eATQ6ep5h 1viCKA8KJ0iN3tmoxdyxWotRlFDxrOe3kU7A+lypF5UNsukCcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNIcOGRoGjMie60r/oDYn2pi8IHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTQzMDkzYmItMGMxNi0z MzgwLWFhNDYtZjVmYTBhNmFlZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAQ/jgy5D/4q+HxASTW3SeaE/LlzLaXbByK7y09SFrKh2Dm6ZZo73OY bTjByqzAOd1IVgIRP7alQNJ8Y2MLWY0eMJUopR5YplFjt/m8oduXa4YR1qtw3KGl Vt2EbksImdkK0ZShWq1YGSA2cc7fo7P6zLjYfIKAmHqNT6/4kmWS/nxuCvAd4CMG gByke+l5lhUAN0h1dd8xQYAUHeThEf/VSkTQBfJaLC5dI4fASZp/metVt5RquNoW 5R+OwJSXnidn2xNX2toD2Inp3vU/6dUj1Jmen46VOIDv97EYuJK15XneG4Mf5CxC pgp2WuE9gkgLpnSh2uDGzqgCsezn7X0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:06:05 2025 by rpki-client