$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa File: 6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa (raw, json) Hash identifier: wLnB0/csf3gri1lLxOCZ2/m70geoa911iizKeBDB7C8= Subject key identifier: CE:1A:D3:B0:32:75:C7:A4:1E:D5:E4:BC:9D:A8:E1:3C:B9:21:70:1D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AF0F12F69A511F70592091E80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 7018 IP address blocks: 172.120.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:2f:69:a5:11:f7:05:92:09:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=9e1346cd-f7c9-46b1-9d8c-4616c62c2827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:de:c3:34:d7:0a:6a:f1:0e:05:7e:6d:43: 51:3c:de:ae:f8:09:08:71:4c:b8:5c:c4:e2:19:34: 51:6f:bc:6c:ec:9d:47:c2:8a:53:ae:d4:1a:b4:45: 30:eb:21:1d:62:3f:4a:f5:07:94:07:05:26:b2:5e: 68:fb:3d:fe:44:67:69:49:0e:9a:1a:8f:a6:21:92: b3:bf:72:72:f7:ac:b6:03:64:e1:a4:b2:67:41:fa: db:3b:85:3f:71:f9:f7:11:8d:32:1b:6d:d4:d3:b7: 64:e1:d1:51:6c:13:0f:01:33:6c:cb:f3:0b:78:e8: 97:6a:88:ea:d2:86:c1:2b:e5:0e:bf:0b:9e:f0:cc: 2d:5d:37:41:8a:0f:e9:d0:e7:c8:04:28:1b:92:19: c9:24:89:bc:8f:77:7c:3c:84:bc:3f:ff:44:4b:da: ec:0d:ba:cf:19:f2:27:bc:15:27:70:56:29:32:24: 6d:15:32:18:e8:e4:e8:09:5e:f8:34:a3:bc:8c:f9: 84:1f:b5:c0:5a:51:c6:4d:a9:ae:0c:80:e7:4f:6c: 05:95:30:74:d1:ed:5c:e8:1d:7b:17:43:19:1a:fe: d2:53:00:c4:e6:41:0d:47:19:e4:4f:75:93:01:e7: b4:21:31:8e:60:66:4d:30:d3:65:4b:1b:9f:2c:aa: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1A:D3:B0:32:75:C7:A4:1E:D5:E4:BC:9D:A8:E1:3C:B9:21:70:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6d90ee8e-a9a2-3936-b8c1-2c290237f19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a2:4c:e4:a5:08:4c:3f:c7:c1:03:cb:4e:da:72:cf:56:1b: 44:0d:c2:fa:d0:46:33:84:6d:3d:49:a3:f2:68:79:f2:2d:59: 6d:bd:c3:80:35:67:11:74:1a:f0:cd:3a:bc:6d:e7:ac:45:ee: 0f:13:e1:58:cf:db:eb:48:b7:7e:9b:e1:1c:c0:4a:e6:90:c8: db:63:6b:43:67:0d:84:7f:75:a6:4d:7f:b3:79:ab:26:1d:27: 99:5f:a1:aa:cd:35:27:58:c7:ae:6c:b7:ba:d0:8e:0e:34:b0: 39:f6:b9:94:ab:76:ac:bf:7b:53:a8:ee:6b:42:61:2c:0c:47: a8:91:ea:f1:a0:ba:86:16:2f:77:f5:32:66:d4:55:ca:d0:7b: bc:c0:ed:50:c7:fa:60:77:3b:a5:65:ce:ff:d4:b7:03:ec:a9: c8:92:a7:2d:aa:f1:6a:3b:95:7a:fb:15:b6:98:f5:94:30:8d: db:d4:70:b7:1f:13:88:d9:58:fa:3f:e2:14:1a:5f:f3:ef:d1: bf:5a:48:8e:5f:00:5f:ff:bd:94:65:2b:23:8a:76:72:0d:80: 42:b3:9a:7b:d9:ce:29:d4:02:76:dd:3e:e0:90:1e:4b:f7:26: b0:37:2d:36:41:99:8e:2f:65:61:15:09:ff:9e:96:5d:4b:0b: ad:01:b4:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8S9ppRH3BZIJHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OWUxMzQ2Y2QtZjdjOS00NmIxLTlkOGMtNDYxNmM2MmMyODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDnewzTXCmrxDgV+bUNRPN6u+AkIcUy4XMTi GTRRb7xs7J1HwopTrtQatEUw6yEdYj9K9QeUBwUmsl5o+z3+RGdpSQ6aGo+mIZKz v3Jy96y2A2ThpLJnQfrbO4U/cfn3EY0yG23U07dk4dFRbBMPATNsy/MLeOiXaojq 0obBK+UOvwue8MwtXTdBig/p0OfIBCgbkhnJJIm8j3d8PIS8P/9ES9rsDbrPGfIn vBUncFYpMiRtFTIY6OToCV74NKO8jPmEH7XAWlHGTamuDIDnT2wFlTB00e1c6B17 F0MZGv7SUwDE5kENRxnkT3WTAee0ITGOYGZNMNNlSxufLKrgUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4a07AydcekHtXkvJ2o4Ty5IXAdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNmQ5MGVlOGUtYTlhMi0z OTM2LWI4YzEtMmMyOTAyMzdmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+iTOSlCEw/x8EDy07acs9WG0QNwvrQRjOEbT1Jo/JoefItWW29w4A1 ZxF0GvDNOrxt56xF7g8T4VjP2+tIt36b4RzASuaQyNtja0NnDYR/daZNf7N5qyYd J5lfoarNNSdYx65st7rQjg40sDn2uZSrdqy/e1Oo7mtCYSwMR6iR6vGguoYWL3f1 MmbUVcrQe7zA7VDH+mB3O6Vlzv/UtwPsqciSpy2q8Wo7lXr7FbaY9ZQwjdvUcLcf E4jZWPo/4hQaX/Pv0b9aSI5fAF//vZRlKyOKdnINgEKzmnvZzinUAnbdPuCQHkv3 JrA3LTZBmY4vZWEVCf+ell1LC60BtHE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:22:00 2025 by rpki-client