$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77ad6c5f-3acf-31c7-9933-1eb27da61d82.roa File: 77ad6c5f-3acf-31c7-9933-1eb27da61d82.roa (raw, json) Hash identifier: QjL24lzEME+Zb3hZwOpGCyHX4p723e79osdeGvi2u3U= Subject key identifier: 1A:9A:C2:D0:6C:5C:EF:E7:78:57:66:0C:71:28:CE:94:42:9E:05:4C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AD7D152F689E6E760D8BDD580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77ad6c5f-3acf-31c7-9933-1eb27da61d82.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 214238 IP address blocks: 172.120.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:52:f6:89:e6:e7:60:d8:bd:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=719f40a5-ab14-4e12-804d-fac6d979511f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:ac:61:ae:c6:a8:82:32:66:82:f1:32:0d: a0:58:1e:9a:32:90:cc:73:ef:d1:be:dd:9a:04:a6: 87:28:05:e9:21:7f:27:3b:3d:c9:58:c1:45:b9:2e: a0:b0:e1:ba:05:6d:13:7b:3d:7c:7e:32:7e:f5:86: 41:20:b1:cf:90:20:66:99:34:c2:39:a4:64:51:a7: ef:42:94:ae:ad:65:63:9a:a7:6a:51:c4:0b:a3:79: bf:6b:1f:28:38:c9:54:df:8e:4a:d2:40:f1:2a:99: e5:ff:03:33:75:64:6e:a1:12:88:b9:bb:61:73:26: 23:d3:27:de:d0:3c:80:4d:3d:c8:b5:4a:b7:2e:48: 9e:be:02:8c:78:fb:27:32:a5:52:5d:ef:ca:32:1a: 92:22:d5:03:db:30:98:d7:65:2c:cb:74:7e:0f:5c: f2:31:08:d2:b6:93:48:2e:f7:17:b3:fc:3c:a8:0c: 5a:ae:1a:01:54:a1:1e:28:04:a7:56:63:6a:ec:7c: a1:8e:0a:df:e7:9d:41:54:67:aa:fe:21:c3:7e:11: a6:af:52:a6:b0:5d:03:b1:07:2a:b2:ab:f6:07:2b: 7a:45:8d:8e:f1:12:a6:6a:b4:6c:90:d8:67:c5:2f: 7b:90:c7:6a:22:1f:6d:5e:73:62:03:46:05:cc:25: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9A:C2:D0:6C:5C:EF:E7:78:57:66:0C:71:28:CE:94:42:9E:05:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77ad6c5f-3acf-31c7-9933-1eb27da61d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:86:db:86:a7:09:cc:55:65:92:25:f8:cb:b4:d2:a0:89:c3: cc:eb:5e:81:4c:a3:9a:46:95:01:8c:d9:aa:a6:65:d2:58:7b: be:ee:8d:c3:f5:f3:3d:6e:41:40:76:3f:5c:3e:b0:03:de:29: 96:35:13:2e:a0:7d:63:7f:3a:77:bb:49:d0:55:0f:45:b4:c3: 66:e0:d7:b8:41:c6:bb:75:9e:00:c5:8c:e4:7b:85:08:d2:69: e4:a3:6b:4c:58:9d:25:68:c8:ab:a4:2c:8b:df:f6:83:b7:6e: d3:39:58:94:2e:0e:23:89:cf:de:f4:92:43:cc:bc:15:dd:dc: c2:b8:3d:47:5e:3e:c4:4a:4f:45:64:1b:29:38:1b:25:58:be: 79:bb:0f:07:e0:bf:24:8d:77:22:78:9f:02:47:89:33:1c:00: 4b:b2:94:af:6c:0d:46:06:f8:4d:80:93:d5:6d:6b:d1:81:77: e3:fd:0b:89:e6:21:37:95:1a:15:3b:2a:19:61:2e:b3:76:97: d2:13:38:16:e6:aa:d0:ed:da:be:f2:d0:47:57:78:cb:78:7a: 8d:6c:c5:52:a0:48:8a:e4:09:b8:21:8a:02:23:87:a4:ed:0b: 47:0c:84:7e:5a:5e:c3:4d:0a:4c:61:6f:57:0c:3c:59:71:32: a0:62:e4:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0VL2iebnYNi91YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NzE5ZjQwYTUtYWIxNC00ZTEyLTgwNGQtZmFjNmQ5Nzk1MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmisYa7GqIIyZoLxMg2gWB6aMpDMc+/Rvt2a BKaHKAXpIX8nOz3JWMFFuS6gsOG6BW0Tez18fjJ+9YZBILHPkCBmmTTCOaRkUafv QpSurWVjmqdqUcQLo3m/ax8oOMlU345K0kDxKpnl/wMzdWRuoRKIubthcyYj0yfe 0DyATT3ItUq3LkievgKMePsnMqVSXe/KMhqSItUD2zCY12Usy3R+D1zyMQjStpNI LvcXs/w8qAxarhoBVKEeKASnVmNq7Hyhjgrf551BVGeq/iHDfhGmr1KmsF0DsQcq sqv2Byt6RY2O8RKmarRskNhnxS97kMdqIh9tXnNiA0YFzCVvUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqawtBsXO/neFdmDHEozpRCngVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzdhZDZjNWYtM2FjZi0z MWM3LTk5MzMtMWViMjdkYTYxZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHj+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6G24anCcxVZZIl+Mu00qCJw8zrXoFMo5pGlQGM2aqmZdJYe77ujcP1 8z1uQUB2P1w+sAPeKZY1Ey6gfWN/One7SdBVD0W0w2bg17hBxrt1ngDFjOR7hQjS aeSja0xYnSVoyKukLIvf9oO3btM5WJQuDiOJz970kkPMvBXd3MK4PUdePsRKT0Vk Gyk4GyVYvnm7DwfgvySNdyJ4nwJHiTMcAEuylK9sDUYG+E2Ak9Vta9GBd+P9C4nm ITeVGhU7KhlhLrN2l9ITOBbmqtDt2r7y0EdXeMt4eo1sxVKgSIrkCbghigIjh6Tt C0cMhH5aXsNNCkxhb1cMPFlxMqBi5Go= -----END CERTIFICATE-----Generated at Sat Aug 23 15:53:22 2025 by rpki-client