$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cea8339a-b055-3fdd-833e-66824b7fc719.roa File: cea8339a-b055-3fdd-833e-66824b7fc719.roa (raw, json) Hash identifier: QYliaiPykN+c8bu5e+TaNeEL1+hmTwBAVJ974cImcGw= Subject key identifier: 3A:BC:12:13:29:4E:51:31:56:E2:B6:16:1C:E3:08:60:83:3D:62:5C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B7F520B322494C9BF19C25180 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cea8339a-b055-3fdd-833e-66824b7fc719.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 7018 IP address blocks: 172.121.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0b:32:24:94:c9:bf:19:c2:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=a0c0df5b-73eb-4050-a52e-75d0dcf413d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d8:3e:21:db:63:cb:c1:2a:fc:14:73:12:5d: aa:6a:c4:24:f6:1e:e5:8b:f2:99:bb:0a:eb:b7:49: 60:cb:fd:0a:fb:42:a5:39:b6:cf:1b:f7:db:7d:48: 8a:9a:e0:b3:03:44:9d:48:2a:ea:5f:a6:09:7c:c5: 38:af:e7:dc:9b:d4:3e:1b:0b:fd:71:9a:07:24:6c: 6f:90:34:46:54:54:42:9f:78:8f:36:94:8f:8f:c2: 56:60:8e:08:d0:b2:e4:f3:91:41:a1:00:f9:d4:cc: 77:f7:0a:57:87:31:bc:12:58:27:0c:66:39:43:a4: c4:a1:82:1a:60:55:56:e7:fd:3e:0d:cb:fb:26:bf: 7f:41:2e:45:0f:0b:fd:9d:6b:4f:fd:9a:73:a2:f5: c7:56:af:29:46:43:9e:7c:d4:ea:2c:5e:d6:38:f8: 74:f7:4d:47:16:ec:b4:f8:32:6c:b1:e6:44:1a:31: 5c:86:1c:83:7f:cd:b3:8f:56:41:f6:47:36:24:98: f6:10:e0:12:46:4d:bd:64:5c:72:96:a0:de:39:81: f9:f1:62:25:d4:09:41:7c:f5:72:b3:d7:e8:3a:fe: b0:6a:22:43:b2:80:4a:94:e7:e1:19:f6:40:ff:d4: d9:70:16:f1:b6:0e:82:d8:d0:ba:e3:8d:ec:c6:cc: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BC:12:13:29:4E:51:31:56:E2:B6:16:1C:E3:08:60:83:3D:62:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cea8339a-b055-3fdd-833e-66824b7fc719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e1:8e:a8:d0:2f:be:3c:ea:b4:50:ed:c7:ca:b6:6e:03:5c: d5:d9:e1:93:d6:be:1e:48:7c:75:cb:58:63:0e:f6:2c:08:cb: 3b:12:b1:e9:2f:d3:48:db:15:85:a8:b5:67:04:93:c7:7b:21: 56:29:5e:9e:b5:84:83:e4:5a:28:07:4e:77:22:3f:19:8a:ad: c2:26:d7:77:e0:d3:0f:aa:96:5b:d2:94:3a:4f:01:f1:43:70: 31:75:df:7e:d4:93:4d:31:05:40:a7:a4:f6:ab:e3:07:8b:de: 07:dc:1e:08:7b:78:7f:61:1a:90:fc:50:a5:0c:58:79:32:6e: 32:16:df:3a:87:7d:ab:eb:75:a3:77:93:d9:62:61:10:3e:47: 79:77:92:47:4f:96:04:d2:46:20:7b:13:f5:40:a7:55:a7:82: 14:2b:cd:e2:6f:73:a1:d5:13:33:64:93:21:44:0b:11:50:ec: 02:03:54:cb:42:1f:20:70:a8:71:8c:a7:52:d4:f9:7d:7b:b3: a2:51:84:de:83:94:70:c0:07:80:1f:bb:90:88:06:e1:fd:6b: af:43:6f:f0:d2:f0:d9:b8:3a:0c:cc:03:6f:cc:a3:c2:62:e7: 33:f2:ff:72:c5:67:c9:6e:a2:90:06:6b:99:9e:ca:e1:9a:84: df:2d:df:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UgsyJJTJvxnCUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YTBjMGRmNWItNzNlYi00MDUwLWE1MmUtNzVkMGRjZjQxM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ng+Idtjy8Eq/BRzEl2qasQk9h7li/KZuwrr t0lgy/0K+0KlObbPG/fbfUiKmuCzA0SdSCrqX6YJfMU4r+fcm9Q+Gwv9cZoHJGxv kDRGVFRCn3iPNpSPj8JWYI4I0LLk85FBoQD51Mx39wpXhzG8ElgnDGY5Q6TEoYIa YFVW5/0+Dcv7Jr9/QS5FDwv9nWtP/ZpzovXHVq8pRkOefNTqLF7WOPh0901HFuy0 +DJsseZEGjFchhyDf82zj1ZB9kc2JJj2EOASRk29ZFxylqDeOYH58WIl1AlBfPVy s9foOv6waiJDsoBKlOfhGfZA/9TZcBbxtg6C2NC6443sxsz24wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq8EhMpTlExVuK2FhzjCGCDPWJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2VhODMzOWEtYjA1NS0z ZmRkLTgzM2UtNjY4MjRiN2ZjNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDhjqjQL7486rRQ7cfKtm4DXNXZ4ZPWvh5IfHXLWGMO9iwIyzsSsekv 00jbFYWotWcEk8d7IVYpXp61hIPkWigHTnciPxmKrcIm13fg0w+qllvSlDpPAfFD cDF1337Uk00xBUCnpPar4weL3gfcHgh7eH9hGpD8UKUMWHkybjIW3zqHfavrdaN3 k9liYRA+R3l3kkdPlgTSRiB7E/VAp1WnghQrzeJvc6HVEzNkkyFECxFQ7AIDVMtC HyBwqHGMp1LU+X17s6JRhN6DlHDAB4Afu5CIBuH9a69Db/DS8Nm4OgzMA2/Mo8Ji 5zPy/3LFZ8luopAGa5meyuGahN8t39o= -----END CERTIFICATE-----Generated at Mon Oct 20 13:24:28 2025 by rpki-client