$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d7a407e4-6a99-376e-a55e-75b4d25c5e8e.roa File: d7a407e4-6a99-376e-a55e-75b4d25c5e8e.roa (raw, json) Hash identifier: h/UzeyovEf/cQ1RVCRPpjVvwN+8VwZAX01OhDl+2X7E= Subject key identifier: C2:9E:58:DF:AE:08:35:50:6B:9F:74:38:B9:DB:67:F5:09:0C:FC:83 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A38B82FDE2328271DBB692F80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d7a407e4-6a99-376e-a55e-75b4d25c5e8e.roa Signing time: Tue 17 Jun 2025 13:17:09 +0000 ROA not before: Tue 17 Jun 2025 13:17:09 +0000 ROA not after: Mon 15 Sep 2025 13:17:09 +0000 asID: 9304 IP address blocks: 172.120.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:b8:2f:de:23:28:27:1d:bb:69:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 17 13:17:09 2025 GMT Not After : Sep 15 13:17:09 2025 GMT Subject: CN=423e2a83-08fb-4dc1-9b62-2aa61636fe05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:f7:27:36:28:1b:a5:ab:7d:96:6f:6c:6f: 18:d0:40:56:26:8d:62:fd:e9:f7:49:80:83:92:d6: 3b:06:b9:c2:0a:6b:25:89:b3:1b:7a:bb:5f:fb:c6: 45:c9:30:df:7e:8c:77:31:02:64:14:16:18:26:2c: 49:ed:8e:10:5a:c1:51:aa:08:ab:ad:f4:c7:50:52: b8:0f:0e:f3:07:e6:84:b2:78:ee:c7:15:19:c8:73: 0b:90:12:51:a4:4d:9c:57:0a:a0:01:ca:cc:99:97: 5f:2c:28:1a:cd:24:43:13:00:b6:b9:26:8f:f7:73: 84:64:f8:8a:65:66:50:d3:e4:83:1d:46:07:83:3d: ce:c2:1b:c6:2b:3c:71:f5:b1:74:ed:4b:69:97:d0: 92:fa:8f:5c:11:ed:76:8a:b2:72:50:24:78:92:6c: 7b:1b:0c:82:00:3f:f1:ac:39:87:34:a5:50:02:22: 04:24:72:be:eb:6a:96:ce:02:8f:0d:1e:3c:9e:fd: 3a:99:f9:37:b9:cf:3a:6d:b4:f7:a1:81:be:5c:5d: ea:b0:d9:f7:b3:68:55:b0:d9:75:e6:00:8f:18:74: 2e:12:5c:be:60:cc:a4:8b:db:08:c9:56:24:f1:0a: f2:f7:bc:0c:dd:84:b1:60:79:4a:a8:aa:f4:4e:f7: 24:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9E:58:DF:AE:08:35:50:6B:9F:74:38:B9:DB:67:F5:09:0C:FC:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d7a407e4-6a99-376e-a55e-75b4d25c5e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:57:1a:64:a9:48:ca:bc:06:07:4f:73:03:af:de:49:8b:60: 05:d2:48:c2:8c:71:3d:91:7c:56:af:c4:f6:d4:93:50:f0:27: 89:d6:3d:61:ba:46:fa:b9:d5:7b:4b:65:25:00:2c:a9:4d:43: f6:a1:60:5a:17:bf:d0:10:e3:fb:ff:c7:0c:3a:94:ea:a2:55: 51:aa:9b:b1:38:12:df:d8:f5:a4:93:8d:44:af:d6:fc:15:eb: ac:e7:d1:aa:53:fa:fa:be:9f:da:76:6d:2f:17:77:70:cf:15: 45:ce:27:6e:6a:a4:be:66:50:64:a3:98:1b:c5:7d:b6:3b:f1: a0:13:b2:34:c4:9a:6f:09:f6:d5:2b:00:0a:c0:2f:b2:1a:bf: 4e:2a:f4:29:16:60:d6:64:ea:fd:30:d9:29:9c:49:00:1f:0e: af:5e:26:b0:ad:65:5d:a9:6f:d3:e0:da:48:08:0f:4b:0e:b8: 43:6d:85:0d:96:91:0c:09:4e:9a:1d:e9:44:38:1b:a6:41:27: 90:ba:2f:d3:c2:56:08:4a:3c:3c:1f:bb:f3:25:55:01:8f:a4: d0:30:96:06:0e:8c:73:7d:25:05:f3:d2:0f:40:22:dc:d2:0f: 26:a1:9d:f5:5e:ae:cf:e7:31:06:7e:fa:06:42:79:be:4f:67: e6:75:69:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo4uC/eIygnHbtpL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYxNzEzMTcwOVoXDTI1MDkxNTEzMTcwOVowLzEtMCsGA1UEAxMk NDIzZTJhODMtMDhmYi00ZGMxLTliNjItMmFhNjE2MzZmZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcv3JzYoG6WrfZZvbG8Y0EBWJo1i/en3SYCD ktY7BrnCCmslibMbertf+8ZFyTDffox3MQJkFBYYJixJ7Y4QWsFRqgirrfTHUFK4 Dw7zB+aEsnjuxxUZyHMLkBJRpE2cVwqgAcrMmZdfLCgazSRDEwC2uSaP93OEZPiK ZWZQ0+SDHUYHgz3OwhvGKzxx9bF07Utpl9CS+o9cEe12irJyUCR4kmx7GwyCAD/x rDmHNKVQAiIEJHK+62qWzgKPDR48nv06mfk3uc86bbT3oYG+XF3qsNn3s2hVsNl1 5gCPGHQuEly+YMyki9sIyVYk8Qry97wM3YSxYHlKqKr0TvckDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKeWN+uCDVQa590OLnbZ/UJDPyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDdhNDA3ZTQtNmE5OS0z NzZlLWE1NWUtNzViNGQyNWM1ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFXGmSpSMq8BgdPcwOv3kmLYAXSSMKMcT2RfFavxPbUk1DwJ4nWPWG6 Rvq51XtLZSUALKlNQ/ahYFoXv9AQ4/v/xww6lOqiVVGqm7E4Et/Y9aSTjUSv1vwV 66zn0apT+vq+n9p2bS8Xd3DPFUXOJ25qpL5mUGSjmBvFfbY78aATsjTEmm8J9tUr AArAL7Iav04q9CkWYNZk6v0w2SmcSQAfDq9eJrCtZV2pb9Pg2kgID0sOuENthQ2W kQwJTpod6UQ4G6ZBJ5C6L9PCVghKPDwfu/MlVQGPpNAwlgYOjHN9JQXz0g9AItzS DyahnfVers/nMQZ++gZCeb5PZ+Z1aaw= -----END CERTIFICATE-----Generated at Sun Jun 29 04:42:02 2025 by rpki-client