$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38b53e32-f2fa-3286-9338-f5267ada83f9.roa File: 38b53e32-f2fa-3286-9338-f5267ada83f9.roa (raw, json) Hash identifier: 6R33QFXU1HfHxSUI4FVBxlFzlE9D/wCZxHEE64vTRHA= Subject key identifier: 30:DD:18:BA:8F:66:27:57:FA:A7:0C:C6:3B:7D:AA:B6:73:0A:4A:22 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B64CE3F0EE8866912CC5EE8C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38b53e32-f2fa-3286-9338-f5267ada83f9.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 21859 IP address blocks: 172.121.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:3f:0e:e8:86:69:12:cc:5e:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e1830770-49dc-49ff-a3eb-0c5168e21a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b0:76:97:9f:71:52:1c:17:a8:86:6d:99:e7: bf:b9:70:b8:85:77:26:3e:ba:d9:b0:9e:cf:7a:5c: e6:bf:3b:34:62:9f:ea:2d:a8:e8:f3:ec:29:c3:9e: e7:d4:9b:07:3c:0b:6e:8a:6c:46:5b:90:32:07:dc: 45:1a:bb:d8:28:d8:34:41:e6:1b:31:5b:01:06:0e: 90:7b:e8:69:2c:48:e6:ec:73:a7:98:9b:76:27:e9: b8:36:e9:61:8c:55:9b:64:bf:c8:a1:83:d3:25:3d: 03:fd:85:20:34:e0:ee:89:ec:6e:b0:2a:5e:3f:c3: 8e:ab:1e:d1:79:37:52:2f:81:b6:2a:73:22:6c:70: 0d:32:37:ef:1b:2f:88:bc:f8:16:a2:fe:c0:7d:8c: 95:94:69:af:fd:6a:64:95:f8:81:23:ce:6c:bf:48: 94:6b:75:25:0c:a7:86:a9:a7:d9:94:a4:95:40:f7: a5:80:8f:c7:38:d0:cb:e9:56:dd:b2:09:6a:7a:17: 65:be:2a:5a:8c:25:b5:3d:26:40:ff:c7:fe:a6:43: a9:45:e8:49:95:40:a2:48:9a:de:fc:2b:00:dd:49: 1e:01:a1:fa:ca:cb:e3:0f:c3:83:ed:a7:4c:b9:a2: 55:3d:26:b1:89:0c:7f:60:6c:c2:f5:ba:5d:cf:f7: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DD:18:BA:8F:66:27:57:FA:A7:0C:C6:3B:7D:AA:B6:73:0A:4A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38b53e32-f2fa-3286-9338-f5267ada83f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9b:65:d6:12:be:a3:34:4c:b5:ac:70:df:78:41:d9:9d:58: 1d:4b:7d:6a:08:be:2f:15:fb:32:5f:3c:86:36:5a:dc:02:04: c2:8d:5c:f1:d7:f6:f2:98:95:1c:a3:c4:d0:ff:9b:cf:2b:3a: dd:6b:6e:d3:d9:ae:52:b4:cd:77:4f:c3:f1:4c:6a:f4:99:18: 8c:d2:2a:d4:02:0a:df:0c:52:46:87:0c:5e:2f:1b:7a:aa:a6: 63:79:56:16:7e:50:11:1f:b3:86:20:37:f2:c7:18:61:57:69: 9d:28:51:40:50:72:91:f4:d2:70:7d:20:c9:92:b0:86:2f:61: db:9d:31:43:69:17:96:67:e8:c1:0a:d8:31:b0:5e:91:01:4e: 9f:62:bf:dc:66:2b:54:c8:08:3d:86:e1:b6:72:a4:6a:fd:52: 5a:55:45:6c:5c:e6:52:d3:4e:fa:30:48:8c:cb:42:96:bf:f9: 77:33:05:be:fa:64:5a:f5:31:23:82:48:90:c3:79:5d:57:24: b8:40:88:ea:5f:4b:c4:ad:80:30:94:2d:e6:53:91:4b:05:0d: 2d:93:15:b2:12:20:a1:27:60:20:7e:11:ed:66:50:10:ca:c8: 89:55:02:1f:5e:f1:ea:c7:37:77:b9:8d:15:e2:17:1e:42:22: 80:df:36:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzj8O6IZpEsxe6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTE4MzA3NzAtNDlkYy00OWZmLWEzZWItMGM1MTY4ZTIxYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7B2l59xUhwXqIZtmee/uXC4hXcmPrrZsJ7P elzmvzs0Yp/qLajo8+wpw57n1JsHPAtuimxGW5AyB9xFGrvYKNg0QeYbMVsBBg6Q e+hpLEjm7HOnmJt2J+m4NulhjFWbZL/IoYPTJT0D/YUgNODuiexusCpeP8OOqx7R eTdSL4G2KnMibHANMjfvGy+IvPgWov7AfYyVlGmv/WpklfiBI85sv0iUa3UlDKeG qafZlKSVQPelgI/HONDL6VbdsglqehdlvipajCW1PSZA/8f+pkOpRehJlUCiSJre /CsA3UkeAaH6ysvjD8OD7adMuaJVPSaxiQx/YGzC9bpdz/fceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDdGLqPZidX+qcMxjt9qrZzCkoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzhiNTNlMzItZjJmYS0z Mjg2LTkzMzgtZjUyNjdhZGE4M2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImbZdYSvqM0TLWscN94QdmdWB1LfWoIvi8V+zJfPIY2WtwCBMKNXPHX 9vKYlRyjxND/m88rOt1rbtPZrlK0zXdPw/FMavSZGIzSKtQCCt8MUkaHDF4vG3qq pmN5VhZ+UBEfs4YgN/LHGGFXaZ0oUUBQcpH00nB9IMmSsIYvYdudMUNpF5Zn6MEK 2DGwXpEBTp9iv9xmK1TICD2G4bZypGr9UlpVRWxc5lLTTvowSIzLQpa/+XczBb76 ZFr1MSOCSJDDeV1XJLhAiOpfS8StgDCULeZTkUsFDS2TFbISIKEnYCB+Ee1mUBDK yIlVAh9e8erHN3e5jRXiFx5CIoDfNmA= -----END CERTIFICATE-----Generated at Wed Nov 5 03:51:30 2025 by rpki-client