$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c04953f0-0597-378a-a8a8-f3ba7fd2a30b.roa File: c04953f0-0597-378a-a8a8-f3ba7fd2a30b.roa (raw, json) Hash identifier: meIHGD95ShZuL8rocj69OlZeRUeGw5e/NaOyeguoPDE= Subject key identifier: 7C:44:34:B5:EB:0A:B5:8D:65:40:00:33:D5:3B:E5:38:C3:77:DC:AA Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A3B41D91FE0883D88B3F0BAA0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c04953f0-0597-378a-a8a8-f3ba7fd2a30b.roa Signing time: Wed 18 Jun 2025 11:06:08 +0000 ROA not before: Wed 18 Jun 2025 11:06:08 +0000 ROA not after: Tue 16 Sep 2025 11:06:08 +0000 asID: 35554 IP address blocks: 172.121.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:41:d9:1f:e0:88:3d:88:b3:f0:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 18 11:06:08 2025 GMT Not After : Sep 16 11:06:08 2025 GMT Subject: CN=028a8274-daa5-4775-aa34-056cbada23f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b5:31:c2:59:c9:c4:86:8e:12:aa:7f:76:a4: e3:c9:b1:d5:0d:d6:e4:17:4a:dd:ea:48:da:b4:8d: 7c:03:81:29:6b:35:db:a3:ae:f7:44:8f:2a:fc:8d: 42:af:1b:06:75:0d:e1:f4:f8:f4:73:17:03:c7:61: 5f:ab:b6:a6:b3:cb:aa:7b:ab:ad:51:75:20:b3:3d: cf:1f:34:07:88:5b:fb:c0:ee:ce:0c:6c:9c:65:e1: 6a:a6:1f:75:da:a1:91:60:40:a8:3f:7d:c5:e2:92: 76:62:77:5a:2c:85:38:f9:a1:37:a1:ce:6f:d1:b1: ff:98:5c:8f:46:a5:54:64:cc:06:fc:3a:3d:1e:66: 85:c8:bc:fa:36:a1:f0:77:c0:fd:fa:b1:38:07:9a: 15:7e:61:69:88:f5:1d:24:66:72:9d:eb:bc:1d:db: 47:01:1f:d0:4a:46:84:f4:9f:a2:2b:b3:73:53:da: 1d:d1:6f:06:3a:51:39:ef:e3:4d:89:f7:c0:b1:64: ce:55:0f:a2:e5:34:cf:9c:a3:97:3f:87:d3:9f:0e: 02:53:4c:e3:eb:85:73:5e:9f:73:f9:28:a9:0b:c9: 6c:91:19:92:e3:fd:e2:3e:d5:bb:e1:f1:1f:27:14: 8c:09:15:7a:dd:ef:3c:95:ee:24:f0:03:91:78:9e: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:44:34:B5:EB:0A:B5:8D:65:40:00:33:D5:3B:E5:38:C3:77:DC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c04953f0-0597-378a-a8a8-f3ba7fd2a30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ae:d1:75:79:d8:b8:46:6e:76:e6:06:b2:b2:e3:86:d3:bc: 57:bb:ab:e1:e2:1a:d8:d0:a8:1b:e1:50:6d:8f:a5:ea:52:c4: e1:39:8f:19:98:8a:1d:bb:e5:51:d0:14:74:c6:96:3c:f7:7a: d2:fe:e0:af:fb:c1:43:de:41:35:79:18:7f:7a:b1:c0:7c:4d: cc:a4:99:d0:17:49:ac:34:b3:a9:a9:f3:a7:f9:38:bf:23:26: af:07:81:26:fe:aa:56:75:7e:e6:39:78:36:72:65:aa:36:38: 29:f3:04:48:e0:38:41:a2:d3:d0:b7:a7:ea:97:ce:53:5b:07: 65:fa:4f:04:1f:75:91:b4:6a:9a:86:09:1c:08:f3:70:53:02: 06:85:2e:ee:91:8a:2a:83:37:43:04:a9:d1:59:74:ef:dc:35: 3c:94:25:2a:63:c6:92:3a:60:9d:73:a7:b2:82:1d:ff:86:33: c0:ed:5f:10:05:e9:14:98:61:69:a4:66:b0:e1:ca:de:e2:e9: c6:7e:38:e0:24:ff:bb:00:86:29:ed:32:f1:c9:b1:13:94:ae: 7c:00:ec:46:84:26:74:2d:4a:0d:48:58:91:95:76:91:c5:94: d2:fc:7d:fc:60:41:b7:a7:56:11:63:c4:8e:65:23:d9:d1:cc: b8:f6:d1:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7Qdkf4Ig9iLPwuqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYxODExMDYwOFoXDTI1MDkxNjExMDYwOFowLzEtMCsGA1UEAxMk MDI4YTgyNzQtZGFhNS00Nzc1LWFhMzQtMDU2Y2JhZGEyM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLUxwlnJxIaOEqp/dqTjybHVDdbkF0rd6kja tI18A4EpazXbo673RI8q/I1CrxsGdQ3h9Pj0cxcDx2Ffq7ams8uqe6utUXUgsz3P HzQHiFv7wO7ODGycZeFqph912qGRYECoP33F4pJ2YndaLIU4+aE3oc5v0bH/mFyP RqVUZMwG/Do9HmaFyLz6NqHwd8D9+rE4B5oVfmFpiPUdJGZyneu8HdtHAR/QSkaE 9J+iK7NzU9od0W8GOlE57+NNiffAsWTOVQ+i5TTPnKOXP4fTnw4CU0zj64VzXp9z +SipC8lskRmS4/3iPtW74fEfJxSMCRV63e88le4k8AOReJ7H8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxENLXrCrWNZUAAM9U75TjDd9yqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzA0OTUzZjAtMDU5Ny0z NzhhLWE4YTgtZjNiYTdmZDJhMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiu0XV52LhGbnbmBrKy44bTvFe7q+HiGtjQqBvhUG2PpepSxOE5jxmY ih275VHQFHTGljz3etL+4K/7wUPeQTV5GH96scB8TcykmdAXSaw0s6mp86f5OL8j Jq8HgSb+qlZ1fuY5eDZyZao2OCnzBEjgOEGi09C3p+qXzlNbB2X6TwQfdZG0apqG CRwI83BTAgaFLu6RiiqDN0MEqdFZdO/cNTyUJSpjxpI6YJ1zp7KCHf+GM8DtXxAF 6RSYYWmkZrDhyt7i6cZ+OOAk/7sAhintMvHJsROUrnwA7EaEJnQtSg1IWJGVdpHF lNL8ffxgQbenVhFjxI5lI9nRzLj20Sk= -----END CERTIFICATE-----Generated at Tue Jul 1 15:58:46 2025 by rpki-client