$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f8972f-b224-3de8-9a37-5e776d3b130b.roa File: 38f8972f-b224-3de8-9a37-5e776d3b130b.roa (raw, json) Hash identifier: 2ZbzXnDi/0NBwRSFKoiuwaL5QdXDarKXt2aFmSllyr0= Subject key identifier: 1D:26:0C:B6:5B:1D:60:C4:17:91:6E:1E:35:43:11:AD:10:06:60:C7 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BBCDAE5D2390284CADCA2B0C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f8972f-b224-3de8-9a37-5e776d3b130b.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 18779 IP address blocks: 172.121.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e5:d2:39:02:84:ca:dc:a2:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=00bbdfdd-4113-4140-a7f8-3f3a4b20487e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:99:e9:c2:98:28:35:ba:b5:e1:cc:2d:42:40: e7:25:22:ea:94:9a:12:82:be:e8:54:8b:df:b8:f0: 0d:32:a0:39:99:66:f1:0f:2b:86:e8:b8:45:df:90: c4:72:76:e3:59:29:d1:53:4f:f3:9b:3b:a7:72:1f: 42:06:06:15:6d:08:63:9a:7f:b6:4f:e0:db:1b:4e: 1d:d6:2e:ae:d4:f5:5e:d0:12:3f:7a:cb:af:73:01: 0c:29:73:55:63:fc:eb:51:11:df:2a:49:0d:91:f4: 8a:27:4d:ca:cd:24:91:ee:fd:34:4a:51:0c:72:a8: 47:4d:ca:0a:f3:c5:7a:72:f3:34:0c:ea:6f:16:b6: f6:88:55:0e:b1:27:96:6f:47:2e:61:9e:83:b7:13: 7c:28:30:72:f9:62:9e:7e:7f:b6:07:54:0c:07:2b: 9e:21:6e:20:ef:ea:6a:a5:d4:25:82:61:3d:ac:5d: 31:c1:49:c6:48:3c:bc:bd:06:f9:e3:3f:af:4e:be: 32:54:ba:c2:98:0e:93:ac:b2:0e:a1:35:b9:bd:0e: 86:83:63:fa:39:72:20:d6:9a:ea:9c:7a:39:3f:77: 5c:39:c6:0e:e9:af:7b:5b:46:e0:34:cc:1b:f2:3f: 8a:a5:bb:ef:c4:36:c7:b1:fd:90:3b:a1:de:70:de: 0e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:26:0C:B6:5B:1D:60:C4:17:91:6E:1E:35:43:11:AD:10:06:60:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/38f8972f-b224-3de8-9a37-5e776d3b130b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a7:e8:db:7d:90:22:ba:11:e1:4d:f7:17:25:5d:d1:df:5a: fd:b2:ff:8b:f4:62:b0:1d:0a:30:60:17:a7:4c:a1:c2:42:c6: 10:cf:fd:e3:2a:e6:78:97:22:b3:d8:1e:8d:88:29:4c:04:4e: 74:ca:40:db:00:b3:21:e8:32:ce:3d:bc:ad:01:4b:d4:2e:95: 31:2f:ae:cf:ae:0d:5b:58:cb:c3:6f:f2:1b:c1:fb:17:92:10: c9:75:8c:9a:1a:46:a0:e2:b9:69:cc:9a:17:b2:1c:fa:80:7b: 07:42:df:5b:ea:a3:13:9a:03:5e:9e:59:85:86:72:b5:c3:4c: 4f:a8:f0:f6:fd:f5:73:c3:0f:1a:3a:5d:6a:27:38:3d:15:11: ac:a6:f3:0d:f1:f8:ad:1e:2a:38:a1:6e:98:19:d6:0f:e6:9b: c4:65:e8:77:2d:40:a1:1a:09:d5:9f:c9:b2:ab:7f:6d:1d:46: 61:0e:21:70:c9:ba:b5:1c:64:13:e6:70:bb:32:db:4e:08:e0: b4:18:e1:f4:90:e4:e5:05:8d:f7:f0:44:01:97:6d:10:03:c4: 76:8b:7a:d0:80:a7:df:f6:63:e5:12:46:c1:3b:a7:0c:bd:5d: f6:99:b9:b4:11:86:de:d4:49:cc:12:e1:90:b3:68:2e:cd:16: e3:87:7e:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82uXSOQKEytyisMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk MDBiYmRmZGQtNDExMy00MTQwLWE3ZjgtM2YzYTRiMjA0ODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZnpwpgoNbq14cwtQkDnJSLqlJoSgr7oVIvf uPANMqA5mWbxDyuG6LhF35DEcnbjWSnRU0/zmzunch9CBgYVbQhjmn+2T+DbG04d 1i6u1PVe0BI/esuvcwEMKXNVY/zrURHfKkkNkfSKJ03KzSSR7v00SlEMcqhHTcoK 88V6cvM0DOpvFrb2iFUOsSeWb0cuYZ6DtxN8KDBy+WKefn+2B1QMByueIW4g7+pq pdQlgmE9rF0xwUnGSDy8vQb54z+vTr4yVLrCmA6TrLIOoTW5vQ6Gg2P6OXIg1prq nHo5P3dcOcYO6a97W0bgNMwb8j+KpbvvxDbHsf2QO6HecN4OrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0mDLZbHWDEF5FuHjVDEa0QBmDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzhmODk3MmYtYjIyNC0z ZGU4LTlhMzctNWU3NzZkM2IxMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADun6Nt9kCK6EeFN9xclXdHfWv2y/4v0YrAdCjBgF6dMocJCxhDP/eMq 5niXIrPYHo2IKUwETnTKQNsAsyHoMs49vK0BS9QulTEvrs+uDVtYy8Nv8hvB+xeS EMl1jJoaRqDiuWnMmheyHPqAewdC31vqoxOaA16eWYWGcrXDTE+o8Pb99XPDDxo6 XWonOD0VEaym8w3x+K0eKjihbpgZ1g/mm8Rl6HctQKEaCdWfybKrf20dRmEOIXDJ urUcZBPmcLsy204I4LQY4fSQ5OUFjffwRAGXbRADxHaLetCAp9/2Y+USRsE7pwy9 XfaZubQRht7UScwS4ZCzaC7NFuOHft8= -----END CERTIFICATE-----Generated at Wed Nov 5 03:23:07 2025 by rpki-client