$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4190db83-e837-3647-a1e8-a9eec6b30888.roa File: 4190db83-e837-3647-a1e8-a9eec6b30888.roa (raw, json) Hash identifier: 4+h4Jds1+Wf+8SVPGvVHSo7egVkbgq2CzmG8eUQYcRA= Subject key identifier: 02:E2:55:06:5A:45:B7:92:FD:3D:24:EF:FE:22:AF:EC:4F:6C:66:8E Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B64CE6C09AF80647F67D32540 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4190db83-e837-3647-a1e8-a9eec6b30888.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 44559 IP address blocks: 172.120.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:6c:09:af:80:64:7f:67:d3:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b0e76423-194c-4df6-89a9-1ce7e08aa975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2a:74:a3:4f:b2:9d:15:9b:30:6d:28:76:92: a3:5b:19:00:14:89:86:6e:2a:11:21:0e:5c:4d:3a: cd:36:96:4c:1f:c1:f9:0d:00:e6:7b:53:46:d8:0c: 28:9d:81:df:6d:24:c2:f5:07:e6:81:5e:3b:9e:5a: 91:79:dc:47:d1:d7:80:0b:9d:98:7c:48:fb:d5:d4: 35:b2:34:8a:66:4a:4f:0f:28:95:d6:1f:69:eb:d7: 03:08:6f:af:0f:07:0a:8c:09:4b:fe:cf:fb:87:39: dc:84:80:0a:e4:f2:9c:50:9a:d1:1c:cf:12:fc:83: 54:f4:b5:26:de:39:e7:0c:2d:f2:3d:99:cf:6f:9c: dd:cf:12:1f:7d:cc:a0:b9:5a:b2:98:ab:4a:30:35: 3e:9c:cf:81:05:55:90:04:71:7f:42:25:0a:6c:a0: 2d:0e:57:c6:a7:6b:f3:de:be:30:dd:fe:72:31:8b: 6f:45:a8:1e:67:0f:18:3b:46:42:88:8b:6a:81:d9: 56:8d:1d:e9:42:7e:24:2a:f9:09:b5:5f:0a:02:3e: d5:ae:a2:8e:7f:4c:28:58:38:ac:bc:39:21:71:a3: 15:44:94:28:6f:c9:ba:c5:88:8d:2a:29:d9:89:47: 01:91:1e:cf:a8:98:e5:35:d0:d5:63:0e:56:63:0e: b3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E2:55:06:5A:45:B7:92:FD:3D:24:EF:FE:22:AF:EC:4F:6C:66:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4190db83-e837-3647-a1e8-a9eec6b30888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:04:83:4b:4e:48:d8:1e:82:86:db:48:06:02:18:ed:54:6d: 7e:08:dc:49:3f:76:15:30:92:32:8e:e6:e5:f3:8e:a7:aa:9d: c4:1d:46:fc:41:18:82:fe:73:dd:03:7c:bf:ef:7a:68:73:9f: 5a:aa:7c:e0:62:b8:9b:fb:09:d4:39:59:af:7b:c1:9c:28:01: d6:a9:7f:c9:ad:b2:d9:d1:88:2a:cc:2b:6a:27:e1:4c:03:18: b5:1c:a7:48:50:a1:ca:e8:4b:b2:ad:be:67:ce:a2:f9:fa:fd: 6d:a4:24:1a:07:a4:a8:5a:e0:0f:9c:ce:3b:5b:e5:a4:28:9d: ac:bc:a9:b3:2c:bd:3a:91:e2:61:84:5b:24:32:0d:26:f3:4b: 7c:2e:96:4c:64:bc:07:32:33:d9:64:e8:4d:f4:44:23:dc:74: 79:65:5d:9b:ac:f2:92:4a:65:10:18:86:75:e7:ef:25:c0:f7: 62:5d:8d:52:0d:42:05:67:95:d4:fa:46:97:1d:c0:63:b9:37: 93:3a:c5:a6:00:49:71:ed:05:de:ff:f0:83:4d:c3:17:12:58: c2:10:10:11:5b:c9:6e:fd:45:c8:36:2b:a1:0f:69:8f:66:1e: 57:68:38:35:bf:28:75:ca:84:0a:bd:8c:38:c0:af:b3:24:e5: a3:2e:6d:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzmwJr4Bkf2fTJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjBlNzY0MjMtMTk0Yy00ZGY2LTg5YTktMWNlN2UwOGFhOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCp0o0+ynRWbMG0odpKjWxkAFImGbioRIQ5c TTrNNpZMH8H5DQDme1NG2AwonYHfbSTC9QfmgV47nlqRedxH0deAC52YfEj71dQ1 sjSKZkpPDyiV1h9p69cDCG+vDwcKjAlL/s/7hznchIAK5PKcUJrRHM8S/INU9LUm 3jnnDC3yPZnPb5zdzxIffcyguVqymKtKMDU+nM+BBVWQBHF/QiUKbKAtDlfGp2vz 3r4w3f5yMYtvRageZw8YO0ZCiItqgdlWjR3pQn4kKvkJtV8KAj7VrqKOf0woWDis vDkhcaMVRJQob8m6xYiNKinZiUcBkR7PqJjlNdDVYw5WYw6zjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALiVQZaRbeS/T0k7/4ir+xPbGaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDE5MGRiODMtZTgzNy0z NjQ3LWExZTgtYTllZWM2YjMwODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYEg0tOSNgegobbSAYCGO1UbX4I3Ek/dhUwkjKO5uXzjqeqncQdRvxB GIL+c90DfL/vemhzn1qqfOBiuJv7CdQ5Wa97wZwoAdapf8mtstnRiCrMK2on4UwD GLUcp0hQocroS7KtvmfOovn6/W2kJBoHpKha4A+czjtb5aQonay8qbMsvTqR4mGE WyQyDSbzS3wulkxkvAcyM9lk6E30RCPcdHllXZus8pJKZRAYhnXn7yXA92JdjVIN QgVnldT6RpcdwGO5N5M6xaYASXHtBd7/8INNwxcSWMIQEBFbyW79Rcg2K6EPaY9m HldoODW/KHXKhAq9jDjAr7Mk5aMubZQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:44:08 2025 by rpki-client