$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bdc2ac7-4e15-3ddd-a1f6-50ba6ff37c1b.roa File: 3bdc2ac7-4e15-3ddd-a1f6-50ba6ff37c1b.roa (raw, json) Hash identifier: DUDreAskHW1nPGZ0H2tkkU7YnGTLM0QruxScO7v2hdw= Subject key identifier: 1B:D2:D8:91:2C:CA:40:B9:8B:A4:61:D4:DF:A4:58:60:D9:A1:5F:91 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB88D06F9890664C5D44448A0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bdc2ac7-4e15-3ddd-a1f6-50ba6ff37c1b.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 214238 IP address blocks: 172.120.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:06:f9:89:06:64:c5:d4:44:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=b7dd59c6-78bb-45ab-b6e6-6793b252a0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:93:25:9b:ab:07:65:46:f4:15:cc:76:e7:7b: d4:75:c7:a9:1c:43:75:08:2c:07:1a:e9:12:e1:87: 72:63:91:86:f8:1a:d4:6a:f0:2b:60:78:82:2a:38: 9e:a4:20:d3:95:d2:3b:ce:9c:10:4a:1e:99:58:6f: a1:16:8a:98:39:95:2a:af:f0:93:60:fa:b1:a1:9a: ad:4d:ed:6f:be:e3:4c:b7:e1:6b:3f:ba:dc:25:21: 88:af:8f:fc:95:92:62:93:46:b1:49:f2:66:0d:57: 41:62:01:8c:51:f0:72:54:c8:34:63:24:e8:0f:e5: cc:51:c4:cd:14:86:5f:e1:4d:de:03:09:58:66:0e: ea:cd:ba:a7:b6:1c:74:ad:26:a8:ce:e1:fa:b5:b8: ba:1d:e0:65:19:c5:f1:5c:e1:45:55:c7:98:81:d1: bc:0b:d4:67:32:2e:9b:68:a7:4a:1d:ed:f8:c8:8b: c8:95:8b:77:80:eb:9b:63:3d:ed:06:f1:3c:45:3e: a7:b7:83:94:77:47:01:02:15:dd:3f:59:71:64:7d: fb:71:01:38:4e:7d:ba:44:18:70:af:75:24:88:10: bf:e0:f0:be:be:d5:49:0e:49:70:17:ec:c3:d2:8e: 56:80:4b:b3:17:db:d2:fb:3d:93:ce:f4:00:42:dd: 5c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D2:D8:91:2C:CA:40:B9:8B:A4:61:D4:DF:A4:58:60:D9:A1:5F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3bdc2ac7-4e15-3ddd-a1f6-50ba6ff37c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:81:33:7e:e2:a3:8c:bb:fe:b2:b8:8d:04:d6:f3:d8:ab:09: f0:f2:13:37:00:45:50:39:4d:58:cd:b3:b7:86:b8:ba:81:ad: 37:1b:5d:be:3e:07:9c:f5:a9:8b:00:24:30:2f:53:cd:e1:1d: 27:bd:86:42:10:48:bc:71:27:5c:5f:8c:8b:3c:6e:bd:8a:11: d4:ce:8a:60:79:a1:ab:21:2f:28:69:7f:f2:36:52:42:ca:90: 0e:6f:f4:2b:ed:5c:ee:f5:d7:8c:b8:27:f2:f1:4a:da:e3:b7: ff:e2:e3:87:25:00:74:73:44:12:2e:ca:d1:85:70:de:a1:f8: ef:06:39:3c:14:cf:24:9f:29:a9:bc:8e:be:3d:97:70:4b:4f: b9:9f:b1:c8:f1:20:c0:86:a5:df:64:e1:56:c5:4c:b0:c6:f2: e5:a2:d2:e9:d1:93:70:5a:40:ff:9f:26:c2:40:67:c5:2c:bf: 4d:9b:5e:7e:0e:6e:eb:9e:96:72:27:a9:d6:82:6c:03:f2:bc: b4:d6:86:6a:a8:ce:cc:f9:38:6a:b5:ca:c6:f4:2d:c0:45:ca: 96:65:3e:6d:0b:f7:37:28:43:7f:de:ed:d3:fe:a2:af:e9:58: 4e:a3:bb:d0:28:ad:37:71:de:7d:bc:22:52:22:10:3e:c1:c5: e5:6e:b7:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQb5iQZkxdRESKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjdkZDU5YzYtNzhiYi00NWFiLWI2ZTYtNjc5M2IyNTJhMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpMlm6sHZUb0Fcx253vUdcepHEN1CCwHGukS 4YdyY5GG+BrUavArYHiCKjiepCDTldI7zpwQSh6ZWG+hFoqYOZUqr/CTYPqxoZqt Te1vvuNMt+FrP7rcJSGIr4/8lZJik0axSfJmDVdBYgGMUfByVMg0YyToD+XMUcTN FIZf4U3eAwlYZg7qzbqnthx0rSaozuH6tbi6HeBlGcXxXOFFVceYgdG8C9RnMi6b aKdKHe34yIvIlYt3gOubYz3tBvE8RT6nt4OUd0cBAhXdP1lxZH37cQE4Tn26RBhw r3UkiBC/4PC+vtVJDklwF+zD0o5WgEuzF9vS+z2TzvQAQt1cswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvS2JEsykC5i6Rh1N+kWGDZoV+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2JkYzJhYzctNGUxNS0z ZGRkLWExZjYtNTBiYTZmZjM3YzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaBM37io4y7/rK4jQTW89irCfDyEzcARVA5TVjNs7eGuLqBrTcbXb4+ B5z1qYsAJDAvU83hHSe9hkIQSLxxJ1xfjIs8br2KEdTOimB5oashLyhpf/I2UkLK kA5v9CvtXO7114y4J/LxStrjt//i44clAHRzRBIuytGFcN6h+O8GOTwUzySfKam8 jr49l3BLT7mfscjxIMCGpd9k4VbFTLDG8uWi0unRk3BaQP+fJsJAZ8Usv02bXn4O buuelnInqdaCbAPyvLTWhmqozsz5OGq1ysb0LcBFypZlPm0L9zcoQ3/e7dP+oq/p WE6ju9AorTdx3n28IlIiED7BxeVutw4= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:41 2025 by rpki-client