$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a72836-be1f-3a1b-9fbc-b3cc175122f5.roa File: 42a72836-be1f-3a1b-9fbc-b3cc175122f5.roa (raw, json) Hash identifier: asgVv4O3rmK0I/zoZvbUVunWbqFisgVPSd8ukd8bla8= Subject key identifier: 2F:41:4F:02:33:B1:FA:37:EC:67:11:7B:F6:54:59:62:DA:C9:23:9F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AA9C0DDDB8AE46BB0C0F1E580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a72836-be1f-3a1b-9fbc-b3cc175122f5.roa Signing time: Mon 28 Jul 2025 01:00:51 +0000 ROA not before: Mon 28 Jul 2025 01:00:51 +0000 ROA not after: Sun 26 Oct 2025 01:00:51 +0000 asID: 55201 IP address blocks: 172.121.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:c0:dd:db:8a:e4:6b:b0:c0:f1:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 28 01:00:51 2025 GMT Not After : Oct 26 01:00:51 2025 GMT Subject: CN=672b39c3-0c19-4412-8d9c-7d89f79c83b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:c4:cf:4e:e7:27:ab:01:35:84:ff:66:49: 84:c3:f0:91:12:03:41:ee:bc:79:8d:51:cc:ba:8f: 7a:89:60:f0:38:e2:3e:e7:8e:de:d1:22:66:1c:c1: b9:52:b9:f1:da:30:c6:2b:45:02:3b:c2:af:68:e2: ad:f3:9b:c6:45:72:f9:03:c0:e7:bd:6f:3c:52:62: ae:5c:13:65:9e:86:f8:08:00:70:12:33:87:22:ea: 88:61:5e:6d:8c:8f:14:c3:d1:b0:b1:49:2e:34:ae: 76:a4:61:d0:bb:12:84:39:9e:d3:e6:17:70:57:94: 8b:b4:16:3a:08:f4:56:d0:0e:31:85:37:cf:d1:7d: 38:87:47:36:cc:09:d2:69:38:63:1a:d7:5d:23:9b: ac:76:41:68:77:f7:5b:6e:46:b5:b7:f8:ae:b0:6b: f4:22:5d:c1:e0:83:24:b7:1f:66:07:9f:f8:68:8d: 4d:87:1a:83:86:f2:6c:79:fd:4a:d4:89:86:a2:10: 5e:73:a9:a5:16:bf:29:99:9c:73:70:97:8e:63:de: ec:45:c7:2a:14:86:1f:95:ff:c6:3e:3f:11:7d:23: b7:6b:4b:62:77:ea:49:eb:dc:da:45:83:f9:4b:07: 0a:85:2c:f0:fb:0a:75:7d:52:02:78:41:5c:cd:92: 64:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:41:4F:02:33:B1:FA:37:EC:67:11:7B:F6:54:59:62:DA:C9:23:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42a72836-be1f-3a1b-9fbc-b3cc175122f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:93:27:eb:b2:5e:5d:a6:3b:2a:3d:40:bf:4f:c0:71:5a:e8: 16:c9:09:87:aa:99:e0:32:e7:88:ea:3a:a0:07:69:37:df:fe: 6f:43:4e:79:73:1b:48:43:36:d6:b1:81:00:6b:52:e5:a3:f2: 89:4e:4b:8d:95:93:2c:88:97:91:ae:9f:50:68:15:10:90:57: 26:88:29:8f:13:b9:73:78:ec:b6:ea:c4:71:43:8a:d0:43:74: f7:21:3a:1c:98:4d:64:fb:60:08:7c:12:cd:6d:1c:3e:52:21: 3d:d0:42:a2:bf:50:05:f9:d6:0d:9c:c5:db:76:d3:ff:ec:17: 4b:fd:03:a4:3a:b8:59:45:3b:f7:31:58:3c:b3:6e:30:8d:82: 12:f9:1d:f4:5d:0f:d7:ba:96:c8:24:11:4a:2a:6d:84:67:46: b1:97:43:5a:bf:a6:75:ce:79:80:8c:13:8b:a9:b5:00:6f:e8: a7:f5:d4:23:79:25:4e:dc:05:f4:af:64:ad:66:14:89:ec:3e: 53:29:05:bf:7b:82:81:bf:7e:89:8d:e0:c2:61:b9:66:d4:7e: 86:c2:36:9d:a9:4a:b6:b3:6d:f1:54:e2:bb:2e:7c:c8:d2:08: 09:92:8c:4a:c3:c4:a6:61:69:7b:63:97:22:a2:df:e7:ed:e9: 22:47:9b:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqpwN3biuRrsMDx5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcyODAxMDA1MVoXDTI1MTAyNjAxMDA1MVowLzEtMCsGA1UEAxMk NjcyYjM5YzMtMGMxOS00NDEyLThkOWMtN2Q4OWY3OWM4M2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHPEz07nJ6sBNYT/ZkmEw/CREgNB7rx5jVHM uo96iWDwOOI+547e0SJmHMG5Urnx2jDGK0UCO8KvaOKt85vGRXL5A8DnvW88UmKu XBNlnob4CABwEjOHIuqIYV5tjI8Uw9GwsUkuNK52pGHQuxKEOZ7T5hdwV5SLtBY6 CPRW0A4xhTfP0X04h0c2zAnSaThjGtddI5usdkFod/dbbka1t/iusGv0Il3B4IMk tx9mB5/4aI1NhxqDhvJsef1K1ImGohBec6mlFr8pmZxzcJeOY97sRccqFIYflf/G Pj8RfSO3a0tid+pJ69zaRYP5SwcKhSzw+wp1fVICeEFczZJk/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9BTwIzsfo37GcRe/ZUWWLaySOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDJhNzI4MzYtYmUxZi0z YTFiLTlmYmMtYjNjYzE3NTEyMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeTJ+uyXl2mOyo9QL9PwHFa6BbJCYeqmeAy54jqOqAHaTff/m9DTnlz G0hDNtaxgQBrUuWj8olOS42VkyyIl5Gun1BoFRCQVyaIKY8TuXN47LbqxHFDitBD dPchOhyYTWT7YAh8Es1tHD5SIT3QQqK/UAX51g2cxdt20//sF0v9A6Q6uFlFO/cx WDyzbjCNghL5HfRdD9e6lsgkEUoqbYRnRrGXQ1q/pnXOeYCME4uptQBv6Kf11CN5 JU7cBfSvZK1mFInsPlMpBb97goG/fomN4MJhuWbUfobCNp2pSrazbfFU4rsufMjS CAmSjErDxKZhaXtjlyKi3+ft6SJHm9Q= -----END CERTIFICATE-----Generated at Wed Aug 6 16:14:43 2025 by rpki-client