$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2804bb6-21cb-3070-8a3e-0ce72c1f6af1.roa File: d2804bb6-21cb-3070-8a3e-0ce72c1f6af1.roa (raw, json) Hash identifier: htQdW0Atr5KbxfHknOEni4Jc9EYg31jvUyMmmIl3viM= Subject key identifier: 73:5E:6C:B8:D8:6C:DB:6C:4C:0D:D3:19:64:56:2E:10:FA:38:E2:A0 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AC01620D8D87CBF88FDE7A480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2804bb6-21cb-3070-8a3e-0ce72c1f6af1.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 400536 IP address blocks: 172.120.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:20:d8:d8:7c:bf:88:fd:e7:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=ca08964c-9360-4b50-8f29-dec631e5fd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4e:93:d9:18:e5:54:60:09:e3:2a:24:a2:99: 5a:95:ec:cb:b8:f3:0f:e3:43:07:11:37:1f:06:28: 4a:bf:90:f0:b5:01:95:b2:84:0b:15:a8:61:c3:f8: da:de:15:13:ec:91:e8:bf:1c:38:9d:21:32:f9:dc: a2:98:0a:9b:73:4f:5c:5f:fe:6c:e0:03:ae:23:2f: f4:ec:47:84:d9:af:39:3a:c5:0b:0e:5a:88:f8:3a: a8:fb:5c:ad:cd:27:e2:12:72:c2:a3:aa:3a:c6:80: 75:b9:a3:88:d7:9d:11:14:43:1f:56:9b:1a:38:e7: 11:b5:ad:20:e8:e8:0f:fe:c8:a1:77:de:96:97:68: bb:c5:a8:c5:88:3b:6c:da:d3:bf:f3:03:f7:a9:62: d1:b0:43:4c:1c:62:c5:94:ba:cb:52:c1:01:ef:c4: 0f:78:a8:ec:69:ac:20:10:f5:13:b0:2f:94:fd:38: 28:60:d6:4c:54:85:dc:72:9f:f9:28:b0:11:4f:3c: 93:ea:d7:57:ec:d2:5f:b9:06:a2:f3:91:1b:96:70: 96:49:d0:9d:8c:2c:f0:cf:15:99:ed:0c:49:ff:c7: c9:06:14:d5:22:aa:43:41:86:f2:13:f7:c7:ca:da: ef:d1:a2:e3:5f:78:a9:89:25:80:b5:4d:79:cc:26: 48:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5E:6C:B8:D8:6C:DB:6C:4C:0D:D3:19:64:56:2E:10:FA:38:E2:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2804bb6-21cb-3070-8a3e-0ce72c1f6af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9e:cd:03:91:08:b1:57:f1:f6:55:20:92:7e:11:6b:02:90: 50:8b:f2:16:b0:9f:6d:bd:4b:59:b4:1a:8a:2d:57:6d:17:9e: 70:70:e0:4f:a1:26:77:e0:dc:2f:0a:77:8d:75:b2:8c:28:cf: b1:a9:7e:7d:25:ff:25:5f:dd:a6:b7:6c:3a:b5:7d:f1:39:3a: de:59:13:2d:d4:3c:fd:8c:83:dc:18:4c:7f:ea:16:8c:f2:a6: 1b:82:bf:78:6b:96:37:38:a6:dc:86:02:97:eb:03:c0:55:8c: 13:5a:66:f7:ef:c4:20:d7:6c:3c:70:fc:55:ee:a3:e9:45:73: 11:9c:71:cd:57:63:40:38:a3:38:a6:8e:0c:b2:24:0f:67:7e: b1:01:45:cc:66:ad:19:0b:14:56:46:b3:e0:15:40:9a:46:4c: 4a:10:82:40:84:8f:5b:e4:cc:57:9b:a0:04:ff:e2:34:3b:0f: 92:0f:8e:ef:4c:b5:52:6f:d4:06:58:db:c5:21:18:0e:da:73: c4:63:00:a0:09:29:c9:b5:1c:f7:ff:51:a7:55:1b:d9:da:62: b0:74:91:c0:b9:d1:8e:b1:7e:6c:8a:ad:c6:44:bd:af:28:b8: 8e:21:09:9e:9a:be:d7:f7:c9:5e:a0:9f:61:eb:bc:32:e2:f1: 6b:c0:38:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFiDY2Hy/iP3npIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk Y2EwODk2NGMtOTM2MC00YjUwLThmMjktZGVjNjMxZTVmZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU6T2RjlVGAJ4yokoplalezLuPMP40MHETcf BihKv5DwtQGVsoQLFahhw/ja3hUT7JHovxw4nSEy+dyimAqbc09cX/5s4AOuIy/0 7EeE2a85OsULDlqI+Dqo+1ytzSfiEnLCo6o6xoB1uaOI150RFEMfVpsaOOcRta0g 6OgP/sihd96Wl2i7xajFiDts2tO/8wP3qWLRsENMHGLFlLrLUsEB78QPeKjsaawg EPUTsC+U/TgoYNZMVIXccp/5KLARTzyT6tdX7NJfuQai85EblnCWSdCdjCzwzxWZ 7QxJ/8fJBhTVIqpDQYbyE/fHytrv0aLjX3ipiSWAtU15zCZIkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNebLjYbNtsTA3TGWRWLhD6OOKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDI4MDRiYjYtMjFjYi0z MDcwLThhM2UtMGNlNzJjMWY2YWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuezQORCLFX8fZVIJJ+EWsCkFCL8hawn229S1m0GootV20XnnBw4E+h Jnfg3C8Kd411sowoz7Gpfn0l/yVf3aa3bDq1ffE5Ot5ZEy3UPP2Mg9wYTH/qFozy phuCv3hrljc4ptyGApfrA8BVjBNaZvfvxCDXbDxw/FXuo+lFcxGccc1XY0A4ozim jgyyJA9nfrEBRcxmrRkLFFZGs+AVQJpGTEoQgkCEj1vkzFeboAT/4jQ7D5IPju9M tVJv1AZY28UhGA7ac8RjAKAJKcm1HPf/UadVG9naYrB0kcC50Y6xfmyKrcZEva8o uI4hCZ6avtf3yV6gn2HrvDLi8WvAOIw= -----END CERTIFICATE-----Generated at Sat Aug 23 13:49:23 2025 by rpki-client