$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0441a29c-17a7-3bab-9392-75668d601d98.roa File: 0441a29c-17a7-3bab-9392-75668d601d98.roa (raw, json) Hash identifier: SVRArQ3wRF4oUv0kkZeZlDo0s6lZx04ZcXUqbCJ+VwE= Subject key identifier: 21:CC:0A:30:ED:D2:2B:5E:DB:5A:78:90:59:52:9F:43:BC:05:47:C3 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB88D1B0A84B699853FF09800 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0441a29c-17a7-3bab-9392-75668d601d98.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 214238 IP address blocks: 172.120.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:1b:0a:84:b6:99:85:3f:f0:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=89dac2f8-f9ee-45a9-aecd-50f8020ad8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e1:f0:91:13:2d:cb:71:5c:4b:56:fc:8c:2d: 9b:1a:0e:c8:b5:4f:51:c6:41:a3:f3:6e:e1:30:c0: d8:73:bd:69:84:d6:b4:42:f4:54:c7:53:ce:aa:26: 91:8f:27:89:2c:74:d7:7b:10:c8:f2:67:b0:5b:bc: c4:6d:a6:e1:b5:2b:67:d2:b2:64:18:21:d8:ea:ed: 56:31:a1:6f:d6:a4:0f:e9:5d:26:65:43:be:70:9e: e5:e6:30:4e:d9:a5:cc:2a:f3:25:47:c6:38:8d:76: f4:88:64:17:6f:83:a8:90:24:ab:d8:31:cf:88:1b: 17:ab:02:75:27:49:4e:04:26:de:81:b8:ed:26:d4: 86:93:3b:55:e6:d9:08:04:d4:7e:46:2f:11:62:6b: 76:dd:58:66:1c:68:4a:50:4c:a0:ef:92:d7:4e:79: b5:0e:ed:bf:ec:46:aa:b6:b7:43:d1:83:15:62:20: 75:8e:52:af:4a:23:25:b3:cb:8e:70:f2:50:67:37: d0:82:46:9d:b7:fd:15:68:ee:e5:61:17:34:16:ce: e9:df:05:16:56:8e:e4:75:b9:2b:e5:18:23:0a:ee: 7f:34:73:a3:e5:8b:39:a0:04:4c:98:2f:e4:f9:e2: 60:1e:64:a4:c1:ca:56:93:60:3a:cc:71:40:b9:7e: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CC:0A:30:ED:D2:2B:5E:DB:5A:78:90:59:52:9F:43:BC:05:47:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0441a29c-17a7-3bab-9392-75668d601d98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4e:8f:79:e8:07:f2:93:e7:40:5a:90:1e:1b:ab:dc:df:64: 5d:90:95:f4:dc:e7:2e:19:92:19:ee:12:c2:7f:43:2e:6b:de: f0:69:ed:ca:65:41:44:3d:20:7d:cb:15:f2:c9:2e:57:93:8b: d9:dd:4c:ef:9c:3e:53:16:63:4a:57:d7:c4:a3:55:85:61:2c: 78:b0:3d:87:a1:fd:32:e0:d0:50:03:db:c4:ac:c9:f0:3d:98: ed:19:b1:aa:13:41:45:0a:16:cc:e7:7f:f6:90:8b:e0:f1:70: 4b:96:9a:a1:60:2a:6a:d6:2e:44:49:ce:18:8d:08:b1:66:36: 95:d6:43:3f:cf:2b:7b:00:54:84:e9:94:16:4d:b1:89:be:66: b6:5c:dc:39:58:d5:1c:2a:b4:7f:78:c9:61:7b:83:71:a1:5f: f0:db:e9:ed:a0:5b:65:89:ed:e2:bb:8f:81:df:85:44:d2:9e: de:bb:55:9f:ae:4c:ea:10:d4:8f:4b:94:a3:b1:11:e2:5c:a0: f8:7b:d6:eb:0e:91:39:b1:04:8a:25:0a:79:03:50:dd:54:fc: ea:a0:6a:1a:d6:7f:2d:6d:3d:10:12:29:75:cc:43:fe:53:76: 37:73:5d:34:a0:03:45:75:86:89:ed:1a:f8:28:de:9b:5e:a3: be:37:b3:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRsKhLaZhT/wmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ODlkYWMyZjgtZjllZS00NWE5LWFlY2QtNTBmODAyMGFkOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOHwkRMty3FcS1b8jC2bGg7ItU9RxkGj827h MMDYc71phNa0QvRUx1POqiaRjyeJLHTXexDI8mewW7zEbabhtStn0rJkGCHY6u1W MaFv1qQP6V0mZUO+cJ7l5jBO2aXMKvMlR8Y4jXb0iGQXb4OokCSr2DHPiBsXqwJ1 J0lOBCbegbjtJtSGkztV5tkIBNR+Ri8RYmt23VhmHGhKUEyg75LXTnm1Du2/7Eaq trdD0YMVYiB1jlKvSiMls8uOcPJQZzfQgkadt/0VaO7lYRc0Fs7p3wUWVo7kdbkr 5RgjCu5/NHOj5Ys5oARMmC/k+eJgHmSkwcpWk2A6zHFAuX59eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHMCjDt0ite21p4kFlSn0O8BUfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDQ0MWEyOWMtMTdhNy0z YmFiLTkzOTItNzU2NjhkNjAxZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBOj3noB/KT50BakB4bq9zfZF2QlfTc5y4ZkhnuEsJ/Qy5r3vBp7cpl QUQ9IH3LFfLJLleTi9ndTO+cPlMWY0pX18SjVYVhLHiwPYeh/TLg0FAD28SsyfA9 mO0ZsaoTQUUKFsznf/aQi+DxcEuWmqFgKmrWLkRJzhiNCLFmNpXWQz/PK3sAVITp lBZNsYm+ZrZc3DlY1RwqtH94yWF7g3GhX/Db6e2gW2WJ7eK7j4HfhUTSnt67VZ+u TOoQ1I9LlKOxEeJcoPh71usOkTmxBIolCnkDUN1U/OqgahrWfy1tPRASKXXMQ/5T djdzXTSgA0V1hontGvgo3pteo743s/s= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:34 2025 by rpki-client