$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c98b4e6d-9c3a-37f1-b541-025506034e91.roa File: c98b4e6d-9c3a-37f1-b541-025506034e91.roa (raw, json) Hash identifier: 174Iq/FIUXms8YIHjtv/JD4APTuTjhphJ2iyHvxY23M= Subject key identifier: C8:82:F8:A2:1B:04:20:06:22:06:B9:53:96:48:80:00:CF:5E:99:C8 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A3B41C315224363279DF8948C Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c98b4e6d-9c3a-37f1-b541-025506034e91.roa Signing time: Wed 18 Jun 2025 11:05:57 +0000 ROA not before: Wed 18 Jun 2025 11:05:57 +0000 ROA not after: Tue 16 Sep 2025 11:05:57 +0000 asID: 35554 IP address blocks: 172.121.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:41:c3:15:22:43:63:27:9d:f8:94:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 18 11:05:57 2025 GMT Not After : Sep 16 11:05:57 2025 GMT Subject: CN=b2b0b0c2-46be-4f6d-a4c1-454fc4a51332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:4e:78:f4:3f:22:68:23:6e:b3:c9:1c:9a: 39:61:d1:08:bc:fa:6f:88:fb:95:66:32:b9:86:3e: 3d:a7:fb:3d:81:27:0d:bc:b6:78:6f:be:ec:f8:12: c4:41:57:f1:21:03:f2:58:77:13:36:9f:c6:0a:de: 40:dc:32:00:90:b8:e6:dc:a2:e1:74:f6:bc:b1:37: f4:02:43:de:7d:f9:e3:f2:17:5e:1c:5b:ef:87:9f: a0:b1:a1:d6:32:1d:a4:24:62:93:8a:a0:43:67:0e: 76:5f:11:36:3b:05:23:d0:d3:a2:0a:34:69:f2:f5: 86:75:80:58:35:36:35:28:e4:f9:70:c1:30:69:a9: 9d:6e:77:cf:13:86:71:5b:c0:55:52:f5:48:88:39: 6e:f4:54:28:0d:d7:18:1d:60:33:93:06:56:79:af: 36:9b:42:5b:a9:09:0c:ad:a4:d2:7b:40:10:01:5b: 06:de:82:58:5f:f2:4d:7a:2b:8d:46:c1:ab:b3:38: 74:cf:49:3e:51:96:36:21:b1:c4:e9:29:4d:36:b8: 9b:75:e9:af:56:07:b3:09:24:88:89:e4:90:7f:ec: ee:3e:fb:b9:0e:6f:b1:d2:39:ff:f4:a2:4a:49:20: c2:17:9a:f8:58:a3:a0:bc:b1:d2:81:a4:c3:fc:81: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:82:F8:A2:1B:04:20:06:22:06:B9:53:96:48:80:00:CF:5E:99:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c98b4e6d-9c3a-37f1-b541-025506034e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:aa:9b:a6:f7:b9:0e:ec:84:b3:81:c8:22:af:e9:bc:c8:c7: de:29:d9:e4:6d:32:70:87:b2:25:02:fe:25:44:e1:59:77:0b: 3d:d7:f0:72:c0:52:d3:d1:c7:a1:3b:13:62:15:28:d3:c3:42: 74:50:11:dc:08:6a:1c:0a:a2:7d:04:f0:26:02:db:f2:2a:fd: 28:55:eb:ac:27:a7:1c:d3:82:40:cb:80:c9:8b:d6:d7:f5:d1: 4c:31:6a:17:2b:dd:78:60:d0:e2:24:4e:bf:4d:54:29:58:5d: fa:03:06:87:47:4d:4e:a2:98:6c:f4:13:fc:73:e8:61:ef:c2: b0:82:d3:f1:17:6d:7b:5f:bf:0b:82:21:2a:ca:e4:82:76:2c: f2:df:01:2a:53:ed:d3:76:6b:46:72:b5:ce:19:e7:04:a6:cf: 71:be:89:0b:89:7e:2e:6c:4e:fb:b0:fb:43:aa:a4:32:28:62: 44:76:98:5c:cc:70:31:fc:61:61:39:b6:59:e5:d3:4f:36:ac: 26:95:fe:aa:ec:65:89:94:bf:00:98:8f:e9:da:51:8b:95:6e: 69:71:5b:25:64:14:9f:5f:6d:3b:7d:2f:e8:87:a8:3c:e7:fc: 55:62:f4:e1:bf:d5:2d:a3:d2:fe:2a:5f:8a:6f:86:25:ac:71: 46:9a:bc:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7QcMVIkNjJ534lIwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYxODExMDU1N1oXDTI1MDkxNjExMDU1N1owLzEtMCsGA1UEAxMk YjJiMGIwYzItNDZiZS00ZjZkLWE0YzEtNDU0ZmM0YTUxMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrZOePQ/ImgjbrPJHJo5YdEIvPpviPuVZjK5 hj49p/s9gScNvLZ4b77s+BLEQVfxIQPyWHcTNp/GCt5A3DIAkLjm3KLhdPa8sTf0 AkPeffnj8hdeHFvvh5+gsaHWMh2kJGKTiqBDZw52XxE2OwUj0NOiCjRp8vWGdYBY NTY1KOT5cMEwaamdbnfPE4ZxW8BVUvVIiDlu9FQoDdcYHWAzkwZWea82m0JbqQkM raTSe0AQAVsG3oJYX/JNeiuNRsGrszh0z0k+UZY2IbHE6SlNNribdemvVgezCSSI ieSQf+zuPvu5Dm+x0jn/9KJKSSDCF5r4WKOgvLHSgaTD/IHWFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiC+KIbBCAGIga5U5ZIgADPXpnIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzk4YjRlNmQtOWMzYS0z N2YxLWI1NDEtMDI1NTA2MDM0ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOqm6b3uQ7shLOByCKv6bzIx94p2eRtMnCHsiUC/iVE4Vl3Cz3X8HLA UtPRx6E7E2IVKNPDQnRQEdwIahwKon0E8CYC2/Iq/ShV66wnpxzTgkDLgMmL1tf1 0Uwxahcr3Xhg0OIkTr9NVClYXfoDBodHTU6imGz0E/xz6GHvwrCC0/EXbXtfvwuC ISrK5IJ2LPLfASpT7dN2a0Zytc4Z5wSmz3G+iQuJfi5sTvuw+0OqpDIoYkR2mFzM cDH8YWE5tlnl0082rCaV/qrsZYmUvwCYj+naUYuVbmlxWyVkFJ9fbTt9L+iHqDzn /FVi9OG/1S2j0v4qX4pvhiWscUaavOQ= -----END CERTIFICATE-----Generated at Tue Jul 1 19:55:28 2025 by rpki-client