$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b4c2b2e-2a0e-39ec-af7e-3076115d5601.roa File: 2b4c2b2e-2a0e-39ec-af7e-3076115d5601.roa (raw, json) Hash identifier: 7prHt/xVK0Yh55rdGBIsXPnwFVTP+B3r0pRvftNkuaY= Subject key identifier: 0D:E1:BB:5C:58:DB:FD:DA:FB:D6:30:FC:86:23:07:14:BA:E7:F7:5C Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB88D18DC261D0D4CB5BF2F80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b4c2b2e-2a0e-39ec-af7e-3076115d5601.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 214238 IP address blocks: 172.121.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:18:dc:26:1d:0d:4c:b5:bf:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=132aab7a-e148-4600-abf4-1a9ef1ef5fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:2a:00:18:34:52:d2:a0:13:1b:f3:32:e7: c7:1b:ff:c3:63:d6:d8:ca:8b:17:7a:43:ce:71:52: 0a:e5:67:44:b5:aa:0a:3a:17:74:b1:d0:e6:ea:ad: 1a:2a:30:dd:6d:0b:1f:25:31:d2:80:29:0c:21:ad: d7:c6:01:aa:e7:d1:87:16:fe:3e:3e:ab:dc:df:3a: 98:bc:b8:b0:ba:08:f7:e3:99:2d:40:79:62:2e:d1: 5f:a3:61:6f:ba:8c:46:72:5f:26:6a:91:01:e5:d5: d1:6c:44:b4:a6:76:00:57:b1:22:17:07:6d:8b:65: a9:08:a6:41:7a:21:3e:d3:19:54:d4:38:48:09:8c: d1:5e:c1:03:16:1b:a6:de:a1:bc:77:4a:ec:39:b9: 6c:b0:ef:54:eb:6b:ff:da:70:44:ec:21:9f:7e:4f: 64:13:36:23:e5:75:0b:7f:84:da:9c:42:d0:a6:7b: b9:75:3e:7d:8c:bb:4b:ad:9c:bb:2a:03:c1:a2:0b: 18:e7:3e:ee:b8:d6:29:f8:c6:eb:20:19:9e:dc:19: b9:33:5a:e8:f1:7a:c7:fb:e8:1c:dd:77:d2:e9:8c: ab:be:29:1d:9d:71:9e:77:f5:70:a5:b0:5e:5a:98: ee:c0:d7:b0:56:ca:f0:f5:d6:71:45:8d:24:bc:1c: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E1:BB:5C:58:DB:FD:DA:FB:D6:30:FC:86:23:07:14:BA:E7:F7:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b4c2b2e-2a0e-39ec-af7e-3076115d5601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:12:f8:c6:b6:06:01:2f:1b:8a:64:ef:6d:94:c0:ef:35:dd: f7:a5:1a:c0:1d:8e:4e:69:d7:a7:ed:24:30:b7:0d:21:2c:9b: 90:c2:d8:28:d4:24:59:b3:1e:5e:4b:63:bf:0e:b2:69:bb:b0: d3:ac:35:9b:40:40:7e:2c:ea:68:0f:82:c7:e5:49:c3:b1:d5: ba:cb:87:3c:57:2b:12:d1:48:6e:62:cc:51:eb:0c:8d:60:0a: ce:70:70:03:ff:43:30:3a:c3:4c:8a:de:c1:81:6d:2e:68:df: 02:cf:29:54:2c:c1:fd:9a:5b:70:b7:e5:a6:2b:0f:5a:19:64: 80:d5:17:3c:be:15:eb:36:c0:03:27:dd:9a:12:a2:4c:1a:59: 5d:91:7c:1e:84:ec:29:49:56:5e:94:eb:a3:1a:56:ea:2f:4d: f1:0d:3d:13:97:25:33:f1:dc:50:82:3a:2e:43:c3:d7:3d:84: f6:8f:94:8a:51:68:31:4c:44:8f:7e:56:7b:b3:21:fd:68:e5: 45:99:b0:48:e8:58:0b:dc:23:54:05:bd:5c:e0:99:a0:7b:7d: fe:17:c9:f7:28:68:7b:78:42:0f:a3:31:2c:1e:e4:f7:af:20: 61:b1:3f:0f:c9:32:a4:c3:42:99:9f:13:f0:6d:63:50:1b:c1: 2d:0a:b2:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRjcJh0NTLW/L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MTMyYWFiN2EtZTE0OC00NjAwLWFiZjQtMWE5ZWYxZWY1ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXkqABg0UtKgExvzMufHG//DY9bYyosXekPO cVIK5WdEtaoKOhd0sdDm6q0aKjDdbQsfJTHSgCkMIa3XxgGq59GHFv4+Pqvc3zqY vLiwugj345ktQHliLtFfo2FvuoxGcl8mapEB5dXRbES0pnYAV7EiFwdti2WpCKZB eiE+0xlU1DhICYzRXsEDFhum3qG8d0rsOblssO9U62v/2nBE7CGffk9kEzYj5XUL f4TanELQpnu5dT59jLtLrZy7KgPBogsY5z7uuNYp+MbrIBme3Bm5M1ro8XrH++gc 3XfS6YyrvikdnXGed/VwpbBeWpjuwNewVsrw9dZxRY0kvBzpTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3hu1xY2/3a+9Yw/IYjBxS65/dcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmI0YzJiMmUtMmEwZS0z OWVjLWFmN2UtMzA3NjExNWQ1NjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsS+Ma2BgEvG4pk722UwO813felGsAdjk5p16ftJDC3DSEsm5DC2CjU JFmzHl5LY78Osmm7sNOsNZtAQH4s6mgPgsflScOx1brLhzxXKxLRSG5izFHrDI1g Cs5wcAP/QzA6w0yK3sGBbS5o3wLPKVQswf2aW3C35aYrD1oZZIDVFzy+Fes2wAMn 3ZoSokwaWV2RfB6E7ClJVl6U66MaVuovTfENPROXJTPx3FCCOi5Dw9c9hPaPlIpR aDFMRI9+VnuzIf1o5UWZsEjoWAvcI1QFvVzgmaB7ff4XyfcoaHt4Qg+jMSwe5Pev IGGxPw/JMqTDQpmfE/BtY1AbwS0Ksoc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:02 2025 by rpki-client