$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0cbafa32-79b7-30d1-8983-52eafddd3594.roa File: 0cbafa32-79b7-30d1-8983-52eafddd3594.roa (raw, json) Hash identifier: nkWEFt0+bUybmPRd3MfIIBTP//2m6xcOgQ5UC5XhZXc= Subject key identifier: 27:1F:C4:E0:AD:86:70:26:D6:7F:5A:25:B6:13:27:5E:1B:51:C9:B1 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB88D566E4066AC3DEF04B6C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0cbafa32-79b7-30d1-8983-52eafddd3594.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 214238 IP address blocks: 172.121.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:56:6e:40:66:ac:3d:ef:04:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=7578de72-93f0-490a-9739-458b6096cb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d3:77:89:2c:42:af:bd:ad:61:fb:d9:ee:0f: 08:ec:b4:56:c4:a3:e6:3b:02:1a:b8:2f:c2:e7:5a: b3:8d:3e:99:dc:c7:54:7d:ee:87:49:e2:8e:a0:17: ea:74:d8:5f:98:b8:01:a4:62:74:77:b3:42:c7:39: 33:5a:46:3a:38:bb:59:21:7a:b7:36:86:67:39:c5: 02:a9:2b:d1:02:e6:96:ce:ce:14:14:7f:9d:8c:f0: 0d:d5:ef:7e:12:4e:ae:ac:65:d8:4b:c9:a2:f8:31: e8:a6:0f:5e:27:24:f5:0f:73:e9:a9:fb:06:57:4e: bf:5f:79:48:82:c4:c0:73:fc:34:e8:05:a0:d8:1e: 10:60:cf:a2:e6:98:52:34:ec:35:3c:33:99:e2:bc: 61:9b:f0:f4:a8:b6:2e:b5:1a:19:29:cf:54:5b:42: 3b:c6:b6:b4:cd:3a:ea:97:15:36:47:84:59:1f:6a: b0:8d:08:36:e1:ad:fe:36:9f:84:bb:40:d2:f5:c6: 74:d3:55:4c:0e:a9:c3:a4:46:09:aa:fe:a2:6c:5f: 36:b9:9b:ec:fa:88:1e:b0:c0:5c:92:04:49:01:06: 8c:50:d3:24:77:fd:44:57:70:5a:f2:21:48:ee:6c: 73:86:ad:46:67:a0:68:0b:11:10:59:19:b8:ef:56: 44:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1F:C4:E0:AD:86:70:26:D6:7F:5A:25:B6:13:27:5E:1B:51:C9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0cbafa32-79b7-30d1-8983-52eafddd3594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:02:7b:75:da:51:af:d4:3b:8b:3b:c0:82:60:ea:0c:02:a7: 36:a3:dd:02:f4:b4:df:1e:25:6d:d2:6c:1b:64:dc:84:84:3b: ea:eb:41:b9:df:78:8b:26:17:95:62:40:3a:dd:d1:46:76:38: a3:8c:dd:f4:3d:0e:98:e7:c3:f3:05:06:58:26:81:96:8f:48: f3:09:0d:70:88:74:84:a4:0a:c7:66:06:7b:dc:c5:cc:94:90: f1:b5:7b:d1:aa:aa:62:4a:de:aa:a8:00:e9:3f:0c:43:c5:31: 48:7d:af:2e:7c:73:6d:35:55:3d:d7:19:9f:ac:de:87:7e:3a: 46:52:bc:68:27:c9:e3:33:37:bf:24:7c:b0:94:cc:ac:8f:c3: 28:3d:36:2c:c3:b9:eb:40:01:82:ba:5b:34:de:b3:3d:7e:b1: 81:bc:10:e7:1e:f0:79:25:55:53:c2:69:b1:fc:87:99:c6:72: f3:68:c5:ff:33:f6:ec:8e:81:72:89:95:4a:f3:e1:8e:da:5b: 7a:e4:6e:6d:3d:7f:42:e8:9e:ba:bc:00:4d:00:9e:7b:f5:39: 28:40:5c:16:02:62:20:4d:ba:5c:59:8d:52:4e:d1:7d:70:3d: b3:75:a5:83:a9:c5:b7:52:cc:7d:7b:e6:5f:58:9f:18:62:ca: e3:97:f6:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVZuQGasPe8EtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzU3OGRlNzItOTNmMC00OTBhLTk3MzktNDU4YjYwOTZjYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdN3iSxCr72tYfvZ7g8I7LRWxKPmOwIauC/C 51qzjT6Z3MdUfe6HSeKOoBfqdNhfmLgBpGJ0d7NCxzkzWkY6OLtZIXq3NoZnOcUC qSvRAuaWzs4UFH+djPAN1e9+Ek6urGXYS8mi+DHopg9eJyT1D3PpqfsGV06/X3lI gsTAc/w06AWg2B4QYM+i5phSNOw1PDOZ4rxhm/D0qLYutRoZKc9UW0I7xra0zTrq lxU2R4RZH2qwjQg24a3+Np+Eu0DS9cZ001VMDqnDpEYJqv6ibF82uZvs+ogesMBc kgRJAQaMUNMkd/1EV3Ba8iFI7mxzhq1GZ6BoCxEQWRm471ZEjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcfxOCthnAm1n9aJbYTJ14bUcmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGNiYWZhMzItNzliNy0z MGQxLTg5ODMtNTJlYWZkZGQzNTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoCe3XaUa/UO4s7wIJg6gwCpzaj3QL0tN8eJW3SbBtk3ISEO+rrQbnf eIsmF5ViQDrd0UZ2OKOM3fQ9Dpjnw/MFBlgmgZaPSPMJDXCIdISkCsdmBnvcxcyU kPG1e9GqqmJK3qqoAOk/DEPFMUh9ry58c201VT3XGZ+s3od+OkZSvGgnyeMzN78k fLCUzKyPwyg9NizDuetAAYK6WzTesz1+sYG8EOce8HklVVPCabH8h5nGcvNoxf8z 9uyOgXKJlUrz4Y7aW3rkbm09f0Lonrq8AE0Annv1OShAXBYCYiBNulxZjVJO0X1w PbN1pYOpxbdSzH175l9YnxhiyuOX9qI= -----END CERTIFICATE-----Generated at Tue Nov 4 18:55:58 2025 by rpki-client