$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08b21335-61f2-30dc-9186-2f8678286a4b.roa File: 08b21335-61f2-30dc-9186-2f8678286a4b.roa (raw, json) Hash identifier: 6UAErnYkMEslXn48kIWNRGop7FdmMDkOCEyGhnkR4Es= Subject key identifier: 54:48:51:B4:F1:21:9C:23:F3:17:69:18:95:C0:E5:66:D6:B7:D4:4A Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A8DC17E8610B646DB9203B4C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08b21335-61f2-30dc-9186-2f8678286a4b.roa Signing time: Fri 18 Jul 2025 00:19:36 +0000 ROA not before: Fri 18 Jul 2025 00:19:36 +0000 ROA not after: Thu 16 Oct 2025 00:19:36 +0000 asID: 6939 IP address blocks: 172.120.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:c1:7e:86:10:b6:46:db:92:03:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 18 00:19:36 2025 GMT Not After : Oct 16 00:19:36 2025 GMT Subject: CN=a48edae8-b77f-4584-8408-0da7c60ecce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:22:77:42:2a:ef:0e:73:e9:c9:de:59:05: 6d:cf:57:36:cf:81:30:19:a4:0d:8a:06:3f:9c:ef: 9e:d2:ea:38:f4:a2:9f:19:ed:cb:29:07:0f:2d:27: 29:a2:85:84:16:7b:cd:cb:84:87:f5:05:88:64:7a: c6:c4:38:cd:2f:31:86:5a:d1:67:8a:5a:ea:91:58: ab:f3:1b:98:78:c2:17:ae:ba:7d:2f:83:78:78:ae: 58:ad:09:92:48:21:a3:e9:d7:d5:f4:66:86:62:29: 47:35:45:1b:92:f2:df:b4:00:48:e4:4d:7e:b5:0b: 27:33:26:2f:7e:b8:36:bc:9e:1b:de:1b:e8:cc:c2: 1c:6b:72:15:2d:15:bc:2c:eb:d0:10:82:8c:13:3f: 92:d9:0c:aa:f8:cd:da:fc:e1:e7:44:83:54:f3:51: cd:e0:36:73:e5:98:1c:2f:67:bc:8f:c1:e7:a5:4f: 23:51:c5:f4:5e:db:ba:29:b6:66:9e:50:9d:03:f1: f2:17:aa:b7:3e:36:3c:66:7f:17:7e:15:fe:5c:fc: 78:aa:83:25:8b:79:35:97:a2:f1:3b:61:80:59:57: 46:79:dd:2f:e0:e6:be:bb:8a:80:e2:1c:5b:83:a0: 6d:61:14:a4:87:a9:e5:7f:b2:df:0b:18:b7:00:4f: a8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:48:51:B4:F1:21:9C:23:F3:17:69:18:95:C0:E5:66:D6:B7:D4:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08b21335-61f2-30dc-9186-2f8678286a4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d5:63:c9:b1:86:09:50:e8:a9:83:21:48:3b:f3:db:dd:f4: 1d:1d:5d:fc:45:2c:62:3c:b5:b1:df:7d:e8:08:79:70:8a:e5: 59:04:3b:b0:76:3a:d7:d4:42:4f:92:0f:ba:c1:52:b6:e2:5f: 0d:68:1a:c0:83:5c:46:0f:74:9a:ea:25:5c:e1:c0:4c:45:e6: c1:ec:1f:f4:c4:f6:ea:7d:3c:b8:93:99:cc:c9:46:04:47:8c: 65:1b:fb:10:53:5f:cc:1a:58:bf:52:d6:bc:2d:d3:99:13:80: 51:42:a3:b7:5a:52:91:47:10:d4:8b:97:a9:47:aa:a2:aa:65: c8:4c:9f:92:d7:68:8c:c1:29:af:72:82:8e:87:83:b5:7f:e6: 82:42:43:ca:66:5a:03:37:54:bf:77:a3:46:cf:74:c2:9a:4a: f7:d1:99:ad:c8:f4:bf:1e:aa:e9:3b:3e:bb:fb:5a:0f:4c:54: ef:a3:53:4c:71:e4:d2:74:15:30:0a:26:df:a3:55:df:bf:66: e1:d3:f0:69:7d:d5:59:2c:a4:d2:1b:af:54:2d:19:30:0b:db: 80:3d:7a:98:4e:eb:a2:e5:a8:5a:a3:26:a4:6f:09:08:57:cd: b0:d7:a7:f0:db:6f:f0:90:17:0f:d2:39:af:51:9c:23:3c:a2: bf:da:98:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqNwX6GELZG25IDtMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxODAwMTkzNloXDTI1MTAxNjAwMTkzNlowLzEtMCsGA1UEAxMk YTQ4ZWRhZTgtYjc3Zi00NTg0LTg0MDgtMGRhN2M2MGVjY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM0id0Iq7w5z6cneWQVtz1c2z4EwGaQNigY/ nO+e0uo49KKfGe3LKQcPLScpooWEFnvNy4SH9QWIZHrGxDjNLzGGWtFnilrqkVir 8xuYeMIXrrp9L4N4eK5YrQmSSCGj6dfV9GaGYilHNUUbkvLftABI5E1+tQsnMyYv frg2vJ4b3hvozMIca3IVLRW8LOvQEIKMEz+S2Qyq+M3a/OHnRINU81HN4DZz5Zgc L2e8j8HnpU8jUcX0Xtu6KbZmnlCdA/HyF6q3PjY8Zn8XfhX+XPx4qoMli3k1l6Lx O2GAWVdGed0v4Oa+u4qA4hxbg6BtYRSkh6nlf7LfCxi3AE+oQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRIUbTxIZwj8xdpGJXA5WbWt9RKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDhiMjEzMzUtNjFmMi0z MGRjLTkxODYtMmY4Njc4Mjg2YTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjVY8mxhglQ6KmDIUg789vd9B0dXfxFLGI8tbHffegIeXCK5VkEO7B2 OtfUQk+SD7rBUrbiXw1oGsCDXEYPdJrqJVzhwExF5sHsH/TE9up9PLiTmczJRgRH jGUb+xBTX8waWL9S1rwt05kTgFFCo7daUpFHENSLl6lHqqKqZchMn5LXaIzBKa9y go6Hg7V/5oJCQ8pmWgM3VL93o0bPdMKaSvfRma3I9L8equk7Prv7Wg9MVO+jU0xx 5NJ0FTAKJt+jVd+/ZuHT8Gl91VkspNIbr1QtGTAL24A9ephO66LlqFqjJqRvCQhX zbDXp/Dbb/CQFw/SOa9RnCM8or/amPY= -----END CERTIFICATE-----Generated at Mon Aug 4 08:29:13 2025 by rpki-client