$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa File: da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa (raw, json) Hash identifier: Mc2YeDw85KUlEAvU1OrO6CnhwQPm0S3r3oypJxP9W/8= Subject key identifier: C3:9F:52:92:B8:AF:BB:F7:3E:53:BF:16:8E:1B:F6:8F:05:9F:30:3D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AD7D1565C9C11EC1B63FEF880 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 214238 IP address blocks: 172.120.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:56:5c:9c:11:ec:1b:63:fe:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=d430024e-09db-4f0c-975c-50fb7977e87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:02:c4:5a:42:e5:f3:90:fd:5f:c5:44:0c: 39:35:b7:df:37:a5:4b:24:83:75:f3:48:00:3e:df: 1d:6a:d8:39:84:90:eb:47:16:f7:ec:23:53:24:1d: 9a:3b:aa:ec:62:66:c4:90:19:00:31:75:c6:07:be: 44:e1:f3:e8:8e:bd:74:92:da:7f:36:90:0c:d9:bd: b1:6a:dc:18:6a:a7:7f:d3:3f:6c:66:fa:66:89:13: e5:0f:f7:c6:e2:2a:5f:3f:da:ae:fa:54:ab:32:97: c7:68:b8:ce:31:c9:88:b4:f5:95:53:a0:14:f0:1e: 8a:f1:34:6c:6d:fb:b4:f7:3c:85:e6:c5:7f:b9:a2: 10:c0:3c:52:de:ad:f2:a4:f4:35:c4:7b:63:01:df: 32:cf:96:5a:20:19:65:a8:d5:db:bd:c9:eb:67:9e: 80:53:16:93:ca:d8:05:51:03:ae:e3:e8:44:5c:70: fd:6a:9e:ad:2f:da:6a:49:92:da:83:29:19:cd:03: 0c:e6:3e:16:4e:bd:b7:9d:7f:bf:68:90:91:a1:a5: ea:c5:5f:3a:c3:17:d4:9e:13:54:fd:96:14:57:2a: 79:26:85:a8:e5:40:97:7d:93:80:4b:f2:34:10:b4: b0:5a:d8:d4:c3:f6:96:0b:31:f5:09:b3:eb:d2:10: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9F:52:92:B8:AF:BB:F7:3E:53:BF:16:8E:1B:F6:8F:05:9F:30:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:db:ca:26:4f:5e:ee:b1:44:0c:59:59:02:4b:09:a5:79:39: a5:e5:56:4d:8d:54:db:4c:6b:b1:a2:99:92:48:31:ad:18:4f: af:15:92:a1:59:37:2e:27:cf:5f:2d:cc:54:22:d1:09:d2:4c: 3b:ef:dd:42:90:58:b7:80:d3:5d:18:76:05:12:35:3f:b1:c8: 1c:11:b9:56:7b:27:4b:04:6b:61:04:ad:82:80:fd:1e:fa:f2: 0a:b2:b1:bf:ce:28:00:61:85:c9:2b:d3:e5:2d:61:a4:6a:26: 59:89:18:2c:73:08:3f:a1:dd:31:60:38:f3:6d:a7:01:70:3f: 30:37:1a:3a:ef:f7:ea:33:36:83:08:ed:5f:2e:4b:42:c4:0d: 5e:1c:82:b5:a6:4a:a7:1b:46:a1:aa:6b:74:e9:8f:82:7b:e0: f8:ef:5e:05:de:15:b6:22:d0:e5:9e:82:fb:6a:ba:29:93:4b: 9f:8d:68:db:cb:1b:bc:d7:1b:12:38:a7:0c:a5:e2:52:a1:bd: ca:5b:c7:2a:56:22:ae:1d:f7:36:6a:f9:58:3b:ee:dc:4c:13: eb:a5:c8:84:bd:f3:59:21:7c:c8:16:4e:43:c2:c4:60:c8:2c: 60:fc:d3:f7:df:42:e6:aa:bf:29:9f:81:d8:d7:3a:ae:71:d1: 72:fe:6f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0VZcnBHsG2P++IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDQzMDAyNGUtMDlkYi00ZjBjLTk3NWMtNTBmYjc5NzdlODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCcCxFpC5fOQ/V/FRAw5NbffN6VLJIN180gA Pt8datg5hJDrRxb37CNTJB2aO6rsYmbEkBkAMXXGB75E4fPojr10ktp/NpAM2b2x atwYaqd/0z9sZvpmiRPlD/fG4ipfP9qu+lSrMpfHaLjOMcmItPWVU6AU8B6K8TRs bfu09zyF5sV/uaIQwDxS3q3ypPQ1xHtjAd8yz5ZaIBllqNXbvcnrZ56AUxaTytgF UQOu4+hEXHD9ap6tL9pqSZLagykZzQMM5j4WTr23nX+/aJCRoaXqxV86wxfUnhNU /ZYUVyp5JoWo5UCXfZOAS/I0ELSwWtjUw/aWCzH1CbPr0hC5WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOfUpK4r7v3PlO/Fo4b9o8FnzA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGExY2FlNmMtMWU5NS0z NWIwLTlhMDAtZDJjNWE0NmYxNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLbyiZPXu6xRAxZWQJLCaV5OaXlVk2NVNtMa7GimZJIMa0YT68VkqFZ Ny4nz18tzFQi0QnSTDvv3UKQWLeA010YdgUSNT+xyBwRuVZ7J0sEa2EErYKA/R76 8gqysb/OKABhhckr0+UtYaRqJlmJGCxzCD+h3TFgOPNtpwFwPzA3Gjrv9+ozNoMI 7V8uS0LEDV4cgrWmSqcbRqGqa3Tpj4J74PjvXgXeFbYi0OWegvtquimTS5+NaNvL G7zXGxI4pwyl4lKhvcpbxypWIq4d9zZq+Vg77txME+ulyIS981khfMgWTkPCxGDI LGD80/ffQuaqvymfgdjXOq5x0XL+b/Q= -----END CERTIFICATE-----Generated at Sat Aug 23 13:25:28 2025 by rpki-client