$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/57f9f055-107f-3422-878f-7fa0b7773861.roa File: 57f9f055-107f-3422-878f-7fa0b7773861.roa (raw, json) Hash identifier: l+50JsmnCcYkFopB7BODzBJPYfLyxNK+AkbK+WZmu0A= Subject key identifier: 69:45:46:C0:2F:EF:9E:79:43:A5:D8:28:0D:4C:C3:D5:A7:BC:3A:02 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B6D2CC6115C6CC42F712C7F00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/57f9f055-107f-3422-878f-7fa0b7773861.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 6939 IP address blocks: 172.121.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:c6:11:5c:6c:c4:2f:71:2c:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=84abc1ad-2cf0-4067-8b2b-01f606adab6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b3:ce:d7:3f:33:69:41:9a:3a:47:4e:50:78: db:66:da:f8:a8:52:d8:51:11:6c:63:1a:95:a1:cc: 3b:0c:dd:69:ef:c8:21:70:2c:74:a1:1d:3c:b4:f5: f2:e9:14:14:35:e0:45:f8:60:cb:15:29:8b:6c:d0: 0e:85:a0:07:02:e8:2e:b0:68:bf:02:73:ef:fc:2e: b6:e4:90:26:aa:7d:e5:df:bb:1c:d9:05:05:82:52: 48:28:63:fe:1a:03:fc:b0:cb:5c:bb:dd:7e:34:47: 63:db:b2:09:31:a9:7d:32:f6:70:45:c4:1f:98:7d: e4:cb:c2:28:9a:e7:c9:0a:d9:d6:b9:58:7e:71:7a: 6b:14:c5:b4:96:98:48:b5:65:06:5b:e6:a5:81:fa: 16:b1:88:8c:c7:b0:f6:84:70:fe:62:79:05:35:71: b1:d6:86:c8:2c:eb:9f:80:7e:f3:00:0f:27:86:82: 6a:d9:6b:f3:56:78:f7:6a:91:59:23:4f:3a:53:4e: 9b:28:02:81:eb:22:44:59:a1:f2:5b:44:66:a5:7b: 16:4a:ad:83:16:81:5b:c7:01:22:66:ed:2d:41:97: 9e:b5:19:03:0c:dc:08:1a:55:b1:aa:aa:5e:93:16: b3:5d:f0:21:0e:d3:01:f1:5f:8d:e4:19:4e:d1:b7: 33:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:45:46:C0:2F:EF:9E:79:43:A5:D8:28:0D:4C:C3:D5:A7:BC:3A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/57f9f055-107f-3422-878f-7fa0b7773861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:02:e5:4f:7c:50:b4:7f:94:59:7c:e2:1a:4c:b1:59:6a:e2: ea:c5:19:a5:8f:ad:42:cb:b5:a6:d5:a9:b6:c3:7c:35:bf:45: 49:6f:f9:e3:95:ea:02:56:dc:3e:30:ea:bf:2c:cd:a6:5c:a3: 0a:36:52:7b:9a:6a:4b:80:07:14:4b:ce:ac:10:da:62:e6:32: 4a:35:04:c3:2b:31:77:b0:27:eb:d4:39:2a:97:2f:9f:c2:2f: 66:be:ea:98:a9:d7:8a:b8:a8:b5:4b:9a:f1:d4:06:71:cd:2a: cf:8c:e6:b2:46:ae:33:ac:fb:2c:1d:7d:00:f3:44:b7:67:a6: 25:0b:8e:21:bf:64:4c:36:8c:bd:cb:c8:21:11:aa:87:2f:9d: b5:fb:f6:93:3a:c1:19:5b:98:00:5a:c0:5c:c6:1a:2b:26:e5: 55:74:3d:45:be:c8:09:6f:ed:80:ec:de:82:b5:35:1e:e0:26: 72:74:f3:da:38:f4:b0:f9:81:a5:73:39:e2:b7:7d:02:21:77: a2:ac:a5:56:81:81:c0:03:bc:fb:6f:bf:c3:58:ae:79:5a:2b: 7b:cb:08:14:96:54:44:4d:00:1c:f7:f0:ce:64:3f:97:d1:b7: 3f:44:38:2f:23:2a:00:c0:a3:d9:22:4e:a6:1b:f7:e7:ee:7d: 11:3b:27:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLMYRXGzEL3EsfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODRhYmMxYWQtMmNmMC00MDY3LThiMmItMDFmNjA2YWRhYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LPO1z8zaUGaOkdOUHjbZtr4qFLYURFsYxqV ocw7DN1p78ghcCx0oR08tPXy6RQUNeBF+GDLFSmLbNAOhaAHAugusGi/AnPv/C62 5JAmqn3l37sc2QUFglJIKGP+GgP8sMtcu91+NEdj27IJMal9MvZwRcQfmH3ky8Io mufJCtnWuVh+cXprFMW0lphItWUGW+algfoWsYiMx7D2hHD+YnkFNXGx1obILOuf gH7zAA8nhoJq2WvzVnj3apFZI086U06bKAKB6yJEWaHyW0RmpXsWSq2DFoFbxwEi Zu0tQZeetRkDDNwIGlWxqqpekxazXfAhDtMB8V+N5BlO0bczVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlFRsAv7555Q6XYKA1Mw9WnvDoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTdmOWYwNTUtMTA3Zi0z NDIyLTg3OGYtN2ZhMGI3NzczODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHl7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4C5U98ULR/lFl84hpMsVlq4urFGaWPrULLtabVqbbDfDW/RUlv+eOV 6gJW3D4w6r8szaZcowo2UnuaakuABxRLzqwQ2mLmMko1BMMrMXewJ+vUOSqXL5/C L2a+6pip14q4qLVLmvHUBnHNKs+M5rJGrjOs+ywdfQDzRLdnpiULjiG/ZEw2jL3L yCERqocvnbX79pM6wRlbmABawFzGGism5VV0PUW+yAlv7YDs3oK1NR7gJnJ089o4 9LD5gaVzOeK3fQIhd6KspVaBgcADvPtvv8NYrnlaK3vLCBSWVERNABz38M5kP5fR tz9EOC8jKgDAo9kiTqYb9+fufRE7J1M= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:06 2025 by rpki-client