$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/543093bb-0c16-3380-aa46-f5fa0a6aed8a.roa File: 543093bb-0c16-3380-aa46-f5fa0a6aed8a.roa (raw, json) Hash identifier: nSGp2dZXf+M7zTApkaOSHkWSwOXEm2WuI2hhIE1kD7M= Subject key identifier: 2F:77:17:A9:82:FE:DB:1A:6F:8D:B1:38:03:25:D3:C3:69:D1:84:3D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB88D543B94BACA8316C9A280 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/543093bb-0c16-3380-aa46-f5fa0a6aed8a.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 214238 IP address blocks: 172.120.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:54:3b:94:ba:ca:83:16:c9:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=1a101791-564b-4d58-abf3-65577cd1d973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:10:06:e3:77:16:d3:1f:7f:6c:26:9a:26:fb: 56:9a:da:bf:d7:86:18:21:ec:44:0e:86:c8:32:a7: d3:bb:18:29:12:ac:12:a8:85:1b:98:d2:7f:5e:ce: a1:28:5f:25:1b:38:56:6e:95:03:18:ea:95:c8:11: 9c:a4:f6:c4:c6:f5:41:69:4a:3e:cb:82:e8:dc:79: 1a:aa:c5:ae:30:dc:a7:3d:d5:b8:97:0f:ad:16:f4: ac:28:82:ad:bb:9b:45:fa:66:62:f0:f0:6d:d2:af: 56:db:42:dc:36:8e:df:b7:0e:7b:b8:ea:32:42:5f: 94:57:e6:45:c2:5c:9d:0f:17:6e:82:ee:3a:29:ff: 19:c9:a5:d9:92:8c:53:cc:3a:91:9d:32:e3:58:da: ca:c0:da:35:30:dd:ec:2b:f2:ab:e7:31:86:e5:c5: fb:71:c0:7d:4b:c6:33:c2:b5:5a:61:fe:5a:7d:0a: 2c:18:23:25:db:7d:b0:ca:ae:23:cc:2d:13:06:e7: 01:d7:ba:bb:49:05:4e:ff:1f:63:e8:96:58:99:46: a6:40:90:9a:4b:86:ed:17:50:f6:47:00:24:c4:7a: 6a:fb:a0:9a:71:5f:99:40:e4:dd:e3:28:7b:fd:a5: be:eb:da:f7:f5:fe:07:48:5f:ac:b9:37:f3:27:d2: b7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:77:17:A9:82:FE:DB:1A:6F:8D:B1:38:03:25:D3:C3:69:D1:84:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/543093bb-0c16-3380-aa46-f5fa0a6aed8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:07:f4:ef:0c:63:9f:33:d9:c4:9b:b6:80:77:fe:df:0d:23: 4e:e3:ff:25:b4:4d:4b:f5:d6:54:81:e1:14:a9:95:12:74:00: b0:1c:9c:67:cb:51:ac:f7:ac:ab:81:14:73:30:e2:95:00:ce: 68:0d:17:02:38:8b:23:d8:b1:25:3c:b7:3f:c4:7f:5e:ec:ce: 9a:cc:f4:61:37:bc:63:27:35:86:9e:fa:93:09:44:d0:c8:ca: 93:0f:94:6d:cc:09:43:3a:20:9f:eb:a5:50:42:28:17:ef:26: 2b:1e:54:f8:bc:34:0f:eb:62:50:c8:f0:ef:72:07:2e:f5:c5: d2:53:ef:e2:c6:b7:13:24:77:34:42:98:e7:45:6f:e4:52:48: 79:a8:58:2e:a1:8c:35:c4:b8:44:39:57:6b:2c:69:c5:b1:1a: b6:c7:9f:fc:ed:59:da:34:b3:29:2b:59:e5:02:16:a9:bb:4b: 95:29:63:31:21:fe:2c:91:48:38:54:2d:ab:f1:f0:36:0b:87: fd:e0:44:58:6c:46:0f:a2:08:ef:67:18:b7:4d:a9:b4:57:d6: df:48:59:fe:03:e9:16:e3:0c:62:3f:7c:cd:ef:04:dd:7d:93: 93:ca:2f:09:fd:0e:a8:ff:75:c2:79:62:e4:eb:c7:8f:0a:c8: 6b:57:72:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVQ7lLrKgxbJooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk MWExMDE3OTEtNTY0Yi00ZDU4LWFiZjMtNjU1NzdjZDFkOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RAG43cW0x9/bCaaJvtWmtq/14YYIexEDobI MqfTuxgpEqwSqIUbmNJ/Xs6hKF8lGzhWbpUDGOqVyBGcpPbExvVBaUo+y4Lo3Hka qsWuMNynPdW4lw+tFvSsKIKtu5tF+mZi8PBt0q9W20LcNo7ftw57uOoyQl+UV+ZF wlydDxdugu46Kf8ZyaXZkoxTzDqRnTLjWNrKwNo1MN3sK/Kr5zGG5cX7ccB9S8Yz wrVaYf5afQosGCMl232wyq4jzC0TBucB17q7SQVO/x9j6JZYmUamQJCaS4btF1D2 RwAkxHpq+6CacV+ZQOTd4yh7/aW+69r39f4HSF+suTfzJ9K3sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC93F6mC/tsab42xOAMl08Np0YQ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTQzMDkzYmItMGMxNi0z MzgwLWFhNDYtZjVmYTBhNmFlZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkH9O8MY58z2cSbtoB3/t8NI07j/yW0TUv11lSB4RSplRJ0ALAcnGfL Uaz3rKuBFHMw4pUAzmgNFwI4iyPYsSU8tz/Ef17szprM9GE3vGMnNYae+pMJRNDI ypMPlG3MCUM6IJ/rpVBCKBfvJiseVPi8NA/rYlDI8O9yBy71xdJT7+LGtxMkdzRC mOdFb+RSSHmoWC6hjDXEuEQ5V2ssacWxGrbHn/ztWdo0sykrWeUCFqm7S5UpYzEh /iyRSDhULavx8DYLh/3gRFhsRg+iCO9nGLdNqbRX1t9IWf4D6RbjDGI/fM3vBN19 k5PKLwn9Dqj/dcJ5YuTrx48KyGtXcqs= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:34 2025 by rpki-client