$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91cf14c5-ccab-3564-a0fa-80413d46e619.roa File: 91cf14c5-ccab-3564-a0fa-80413d46e619.roa (raw, json) Hash identifier: wYRQ2M8jDyz0Bqj0frykPQyqbp5y7+9T6c+JBTvYX7g= Subject key identifier: 14:01:8F:43:1F:4C:32:7A:51:FF:AC:9E:A6:B5:22:16:34:E8:9F:BB Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B64CE6A94B6C3D9DFA3D4DF80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91cf14c5-ccab-3564-a0fa-80413d46e619.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 44559 IP address blocks: 172.120.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:6a:94:b6:c3:d9:df:a3:d4:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4a281910-5707-4181-9d66-110743ab7b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7a:62:a3:bc:68:85:08:9f:52:b1:9b:b7:b8: 42:62:c3:04:3f:e8:e8:d0:36:f4:a1:2b:1a:50:9d: a2:43:67:49:c5:39:75:b1:60:0a:2f:50:d8:e8:e2: 42:91:b6:8b:b6:00:b2:43:5d:3f:ab:a4:2b:55:46: ca:fe:cb:00:81:b7:e2:ad:f6:87:fa:08:12:22:4e: 44:b3:de:2c:75:c8:4a:bb:1a:24:aa:49:a1:28:05: 82:e0:cc:68:38:f2:5d:d3:7c:a2:48:c2:13:80:bb: 42:3b:5b:f1:85:70:9d:38:93:b3:f8:2c:50:2f:7d: c2:a3:d7:86:aa:04:71:41:33:c3:86:be:05:bd:76: 3c:ee:df:1e:e5:27:ff:c2:b1:5c:1a:09:59:b3:8b: 56:50:ca:1d:3e:23:98:b0:bf:29:4a:2c:b8:aa:b9: cb:2d:be:c9:b8:f1:04:ee:20:c0:84:b8:8b:ce:b1: 16:43:04:99:4e:57:b4:4b:7e:b9:24:c1:62:ee:4d: e3:03:e5:7e:e6:c0:97:62:ef:c5:fd:8b:f0:39:ac: 06:8b:da:8d:44:7d:8f:67:cd:4b:6a:e3:6c:19:f2: 60:bc:07:0f:54:c3:95:d7:14:73:b4:71:7f:47:78: 8e:cd:92:78:e4:d9:4c:60:82:3f:14:b8:f4:51:bc: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:01:8F:43:1F:4C:32:7A:51:FF:AC:9E:A6:B5:22:16:34:E8:9F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91cf14c5-ccab-3564-a0fa-80413d46e619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b9:cb:28:c5:25:5d:77:68:11:ef:c0:31:e8:87:fc:65:fb: 16:52:a7:69:7a:b8:66:21:dd:4e:54:e0:0c:56:28:f3:d4:a8: 42:d3:03:24:81:4d:2d:4c:65:d5:31:e4:0c:5f:7e:cc:79:81: 6f:54:b9:09:9d:0e:ce:6d:94:5e:cd:2c:ff:4c:2b:3d:32:08: 4d:cb:97:a6:68:e3:a2:37:63:43:92:52:2f:ef:0b:d5:fc:12: f4:04:79:27:b2:4f:b6:76:86:65:a3:23:ab:61:67:17:70:db: 7a:21:bf:3e:a9:76:6c:df:43:45:4a:0e:53:77:34:c8:8a:1a: 94:cb:9b:c6:33:80:4c:1d:bb:83:1f:a4:a4:c3:23:4e:4e:11: 45:c4:2e:a5:f3:c3:ee:cd:6e:d6:d1:23:1c:f2:86:d4:21:85: 1d:20:72:c8:fe:ee:15:d6:a3:4c:0b:1c:71:2a:8b:7e:40:40: 8a:ef:2c:f2:1b:5c:62:1c:7a:d8:08:84:36:ad:42:50:9d:5f: 56:0c:d9:93:74:bc:f7:f8:15:97:31:f9:3d:22:7e:97:0f:32: c5:c2:76:84:d6:08:a0:4d:27:1c:6f:52:00:a1:c1:99:f4:ea: 69:5c:b2:1b:3d:9d:19:cb:c3:c5:c2:aa:56:c2:22:87:6d:2f: cc:70:01:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzmqUtsPZ36PU34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGEyODE5MTAtNTcwNy00MTgxLTlkNjYtMTEwNzQzYWI3YjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xpio7xohQifUrGbt7hCYsMEP+jo0Db0oSsa UJ2iQ2dJxTl1sWAKL1DY6OJCkbaLtgCyQ10/q6QrVUbK/ssAgbfirfaH+ggSIk5E s94sdchKuxokqkmhKAWC4MxoOPJd03yiSMITgLtCO1vxhXCdOJOz+CxQL33Co9eG qgRxQTPDhr4FvXY87t8e5Sf/wrFcGglZs4tWUModPiOYsL8pSiy4qrnLLb7JuPEE 7iDAhLiLzrEWQwSZTle0S365JMFi7k3jA+V+5sCXYu/F/YvwOawGi9qNRH2PZ81L auNsGfJgvAcPVMOV1xRztHF/R3iOzZJ45NlMYII/FLj0UbwYCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQBj0MfTDJ6Uf+snqa1IhY06J+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTFjZjE0YzUtY2NhYi0z NTY0LWEwZmEtODA0MTNkNDZlNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi5yyjFJV13aBHvwDHoh/xl+xZSp2l6uGYh3U5U4AxWKPPUqELTAySB TS1MZdUx5Axffsx5gW9UuQmdDs5tlF7NLP9MKz0yCE3Ll6Zo46I3Y0OSUi/vC9X8 EvQEeSeyT7Z2hmWjI6thZxdw23ohvz6pdmzfQ0VKDlN3NMiKGpTLm8YzgEwdu4Mf pKTDI05OEUXELqXzw+7NbtbRIxzyhtQhhR0gcsj+7hXWo0wLHHEqi35AQIrvLPIb XGIcetgIhDatQlCdX1YM2ZN0vPf4FZcx+T0ifpcPMsXCdoTWCKBNJxxvUgChwZn0 6mlcshs9nRnLw8XCqlbCIodtL8xwAXA= -----END CERTIFICATE-----Generated at Mon Oct 20 05:35:25 2025 by rpki-client