$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f6c1b40-91fa-3431-a028-a6c4ad127667.roa File: 2f6c1b40-91fa-3431-a028-a6c4ad127667.roa (raw, json) Hash identifier: lAZSQF8tHKA2BpHdcqIoY5DVYBfF+lxAGxJQfgZJR0Y= Subject key identifier: 05:55:8C:F0:32:12:2F:D5:5B:7A:36:E8:A0:59:F6:0A:E8:FC:24:A4 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4A4713EDF99CD0EC8D0D4D38 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f6c1b40-91fa-3431-a028-a6c4ad127667.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 18779 IP address blocks: 172.120.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:13:ed:f9:9c:d0:ec:8d:0d:4d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=620d70bc-4fc3-476e-8982-484af1a8d828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:50:78:da:95:ec:f8:02:0d:47:c7:a1:73:3d: 3c:bb:c7:30:f7:6f:88:38:cd:76:0b:ce:09:9e:34: 55:42:e8:50:5b:3d:97:df:96:1e:21:ee:6f:02:07: 59:51:ab:ec:74:ac:bd:3b:f2:3b:d0:c5:9a:5c:fa: 0d:2e:a5:6d:5c:c0:70:65:10:c1:e8:5d:9c:b8:51: aa:14:87:28:c5:4b:af:e2:c3:12:9c:c2:0d:c9:94: be:d6:e4:34:a3:0d:a7:05:dc:eb:65:55:2d:a9:9b: c6:28:d6:23:47:c9:07:9b:af:f6:73:cd:23:ab:8b: a5:a4:b1:4b:c7:b9:86:ab:65:5f:57:70:6e:32:b7: d5:7a:9f:cc:ef:6f:97:66:4c:a0:49:c7:4e:3e:ca: bf:f6:96:aa:13:08:dc:73:2b:fe:ec:8d:e4:eb:c1: 6d:0e:c0:f6:40:a5:a1:d1:2e:f0:83:56:68:c7:42: a0:9c:d7:51:f3:7c:48:62:fa:0a:f7:46:1d:29:41: bd:5b:bb:95:4a:ce:0c:db:92:c7:f8:7e:e0:4b:b8: 9a:69:a1:5a:20:fb:da:78:8b:3b:9c:62:90:63:8c: 8d:c1:7a:85:f6:ef:a4:35:ec:99:49:ce:a7:36:45: 54:e8:27:a2:70:46:d1:55:85:9e:ed:fc:a8:02:3f: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:55:8C:F0:32:12:2F:D5:5B:7A:36:E8:A0:59:F6:0A:E8:FC:24:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f6c1b40-91fa-3431-a028-a6c4ad127667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:bc:b2:39:2a:2f:ce:d4:50:ad:a1:a0:e1:d8:bc:a0:6d:53: e2:56:60:ee:3f:38:23:63:30:9e:94:21:4b:4a:f4:7b:a0:f4: 8b:40:ab:65:84:07:07:b1:3c:16:0a:1e:0f:f8:b5:ce:1f:27: 52:71:ee:ad:69:dd:6b:f9:dc:00:f6:c7:e4:ab:1d:17:c0:fa: 11:11:61:32:ac:dc:d7:fc:0c:03:e1:5e:54:61:4c:57:eb:7e: 20:e9:18:7e:ae:78:a8:54:e2:b6:13:2a:78:74:97:9b:c6:33: 4a:c6:5d:cd:cd:bd:4b:b2:bf:aa:90:ea:46:8f:e9:6d:d4:f6: f5:5a:40:59:7c:f0:bf:dc:bd:c9:29:c9:2b:4a:95:55:a6:b0: 7b:41:26:c7:74:6e:79:d9:5b:51:8a:f5:dd:e6:91:0a:ca:ad: 72:29:c4:b9:87:62:66:cb:6b:e0:11:a8:33:c2:ae:3b:4d:59: 7b:69:4c:49:03:df:20:b8:fb:91:e3:f4:03:3e:18:fa:a4:ba: 98:e8:46:32:8c:81:ec:f0:40:29:78:4d:d3:34:aa:88:8d:61: 8a:19:df:38:f0:b4:e5:af:ec:0a:1b:21:dd:df:90:b7:19:af: 24:a5:f4:de:04:8a:94:6c:a8:a8:c1:4b:fb:3c:e5:73:c0:ef: 66:6c:81:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxPt+ZzQ7I0NTTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NjIwZDcwYmMtNGZjMy00NzZlLTg5ODItNDg0YWYxYThkODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVB42pXs+AINR8ehcz08u8cw92+IOM12C84J njRVQuhQWz2X35YeIe5vAgdZUavsdKy9O/I70MWaXPoNLqVtXMBwZRDB6F2cuFGq FIcoxUuv4sMSnMINyZS+1uQ0ow2nBdzrZVUtqZvGKNYjR8kHm6/2c80jq4ulpLFL x7mGq2VfV3BuMrfVep/M72+XZkygScdOPsq/9paqEwjccyv+7I3k68FtDsD2QKWh 0S7wg1Zox0KgnNdR83xIYvoK90YdKUG9W7uVSs4M25LH+H7gS7iaaaFaIPvaeIs7 nGKQY4yNwXqF9u+kNeyZSc6nNkVU6CeicEbRVYWe7fyoAj/6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVVjPAyEi/VW3o26KBZ9gro/CSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmY2YzFiNDAtOTFmYS0z NDMxLWEwMjgtYTZjNGFkMTI3NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm8sjkqL87UUK2hoOHYvKBtU+JWYO4/OCNjMJ6UIUtK9Hug9ItAq2WE BwexPBYKHg/4tc4fJ1Jx7q1p3Wv53AD2x+SrHRfA+hERYTKs3Nf8DAPhXlRhTFfr fiDpGH6ueKhU4rYTKnh0l5vGM0rGXc3NvUuyv6qQ6kaP6W3U9vVaQFl88L/cvckp yStKlVWmsHtBJsd0bnnZW1GK9d3mkQrKrXIpxLmHYmbLa+ARqDPCrjtNWXtpTEkD 3yC4+5Hj9AM+GPqkupjoRjKMgezwQCl4TdM0qoiNYYoZ3zjwtOWv7AobId3fkLcZ rySl9N4EipRsqKjBS/s85XPA72ZsgZQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:28:33 2025 by rpki-client