$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90be8572-412b-3715-a67d-071f53775e02.roa File: 90be8572-412b-3715-a67d-071f53775e02.roa (raw, json) Hash identifier: 7XnInOiTkDREBAiZePrJIIprWoSsFgqNfd+TlJZJ/Zs= Subject key identifier: 13:70:94:65:AC:97:92:1F:0E:DB:F0:DB:F0:01:C0:49:EE:05:B2:20 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A2C200C6F4C2B52F7A5C49B80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90be8572-412b-3715-a67d-071f53775e02.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 5065 IP address blocks: 172.121.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:0c:6f:4c:2b:52:f7:a5:c4:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=0785d14c-5355-440f-90be-4f12b4d88bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:79:93:db:49:af:23:3d:b9:86:7e:b7:0e:a7: 89:d2:68:3d:e2:f5:aa:70:d6:af:fd:6b:c3:c2:2a: 26:16:63:b0:46:ec:86:5c:f8:ff:a6:04:f4:50:a6: 27:98:90:2e:dd:85:5a:f4:e1:d7:1e:6b:a5:9a:f9: 40:ab:c9:3d:3d:18:c0:20:df:be:89:1d:c5:c8:59: dc:a8:bb:da:cc:c5:29:23:dd:7a:e3:8e:72:4d:72: a8:cc:9d:c2:0f:36:17:0f:35:fc:8e:c9:a1:71:cd: 2b:5c:7f:a4:cc:1b:6d:33:6d:26:b4:7c:55:10:ce: e0:07:52:b1:75:1a:b9:19:a0:b5:05:22:ec:7a:ba: bc:8c:98:f6:9d:59:21:8d:a3:af:e4:27:68:19:02: 72:e5:e6:3e:52:17:8b:42:04:5d:51:10:ad:7b:88: 40:2c:8d:f1:1f:1e:ca:f5:4f:cd:51:38:e0:87:4a: 83:36:ef:32:85:11:0e:41:9a:e7:fe:3d:c6:01:e2: 64:07:3b:80:2c:1a:a4:19:fc:1b:4d:4d:a5:0d:88: 6f:18:1e:75:13:02:54:1f:ef:2f:c5:0f:7c:28:95: eb:0d:fb:19:7f:cd:f1:c3:a4:a8:26:5f:2f:27:d1: 32:70:b3:c9:3f:64:e0:a3:5e:f7:c3:b2:e0:50:4c: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:70:94:65:AC:97:92:1F:0E:DB:F0:DB:F0:01:C0:49:EE:05:B2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90be8572-412b-3715-a67d-071f53775e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8b:9e:7f:33:00:70:8b:ba:c2:dd:fa:49:b4:3d:47:20:b1: 43:ca:2c:9f:15:b7:a9:72:0f:37:47:05:62:77:36:4d:46:f1: 5e:47:62:9d:94:cc:85:cc:fd:02:ee:8f:b6:ec:d8:b3:6f:f6: 8b:27:8e:9f:72:c2:40:28:51:e9:69:42:4f:6a:ee:c7:07:ca: ec:91:fa:57:ac:a6:00:f4:95:d3:12:0e:58:f2:f2:f7:84:f4: cd:e6:85:03:82:5c:2d:a3:50:67:9f:c7:08:88:9d:fa:f3:2b: 22:64:5b:9b:86:a5:86:71:48:1f:0f:43:f6:30:b4:03:74:d1: a4:9b:1d:f9:cd:21:6c:c2:f7:f5:30:59:51:41:dd:48:3d:ac: fe:68:1c:d2:fd:df:87:9a:2a:9f:46:3d:f4:f5:f6:d5:2d:e7: 42:33:55:9c:33:1b:0f:ed:c8:ae:92:e0:b5:1e:0a:fa:c8:0d: 35:22:64:5a:be:0b:84:a5:a9:5c:73:b0:e7:e2:e5:e1:a9:05: 31:69:97:7d:83:de:b7:dd:8f:92:b4:74:a5:c8:58:33:67:a3: 77:18:45:b6:28:74:90:74:4a:1c:f7:48:b4:ef:04:6b:8b:9a: b1:00:77:0c:9c:9e:c9:58:9e:08:c6:0f:ad:22:4c:16:aa:dd: a0:e6:c0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIAxvTCtS96XEm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MDc4NWQxNGMtNTM1NS00NDBmLTkwYmUtNGYxMmI0ZDg4YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3mT20mvIz25hn63DqeJ0mg94vWqcNav/WvD wiomFmOwRuyGXPj/pgT0UKYnmJAu3YVa9OHXHmulmvlAq8k9PRjAIN++iR3FyFnc qLvazMUpI916445yTXKozJ3CDzYXDzX8jsmhcc0rXH+kzBttM20mtHxVEM7gB1Kx dRq5GaC1BSLserq8jJj2nVkhjaOv5CdoGQJy5eY+UheLQgRdURCte4hALI3xHx7K 9U/NUTjgh0qDNu8yhREOQZrn/j3GAeJkBzuALBqkGfwbTU2lDYhvGB51EwJUH+8v xQ98KJXrDfsZf83xw6SoJl8vJ9EycLPJP2Tgo173w7LgUEyZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNwlGWsl5IfDtvw2/ABwEnuBbIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTBiZTg1NzItNDEyYi0z NzE1LWE2N2QtMDcxZjUzNzc1ZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuLnn8zAHCLusLd+km0PUcgsUPKLJ8Vt6lyDzdHBWJ3Nk1G8V5HYp2U zIXM/QLuj7bs2LNv9osnjp9ywkAoUelpQk9q7scHyuyR+lespgD0ldMSDljy8veE 9M3mhQOCXC2jUGefxwiInfrzKyJkW5uGpYZxSB8PQ/YwtAN00aSbHfnNIWzC9/Uw WVFB3Ug9rP5oHNL934eaKp9GPfT19tUt50IzVZwzGw/tyK6S4LUeCvrIDTUiZFq+ C4SlqVxzsOfi5eGpBTFpl32D3rfdj5K0dKXIWDNno3cYRbYodJB0Shz3SLTvBGuL mrEAdwycnslYngjGD60iTBaq3aDmwGo= -----END CERTIFICATE-----Generated at Mon Aug 4 08:30:27 2025 by rpki-client