$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/961415a3-65de-3796-9c51-14a404dd0285.roa File: 961415a3-65de-3796-9c51-14a404dd0285.roa (raw, json) Hash identifier: Xe7W3qZwLxDNLC6HgKejLlkQbxfw3n8lHSQqVeJkSwU= Subject key identifier: 78:6D:D7:51:95:62:93:B9:D1:9E:F6:E5:E4:07:5C:1E:95:EE:F7:3F Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B6D2CC41CFF298B528D89C240 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/961415a3-65de-3796-9c51-14a404dd0285.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 6939 IP address blocks: 172.120.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:c4:1c:ff:29:8b:52:8d:89:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=da8f5b67-db11-4a43-bb95-a2d64304c499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:17:fb:9d:67:36:0c:24:a6:1c:28:e5:40: 08:21:bd:b4:a8:cf:b2:1f:3b:48:57:b7:cc:f4:fd: e2:f1:f4:05:ff:3b:b9:cd:cf:68:31:41:7b:cf:75: f1:32:e2:18:79:e7:63:4f:24:bc:a9:a1:b4:e1:65: 81:04:ef:f7:6f:84:79:31:4b:e2:91:9d:da:35:9d: 11:47:16:89:ff:e9:53:3f:ee:a1:9b:64:98:4c:f7: 87:29:fb:ee:2f:c0:fc:9d:e8:68:06:46:fb:fd:71: ad:49:e5:11:63:e0:fe:ec:e7:eb:3c:b1:96:d3:68: 51:31:1b:d2:04:c2:fa:a9:15:59:55:cf:ea:7d:9e: 5b:91:e6:00:aa:0b:64:d5:89:0e:fd:2f:fd:26:02: fb:da:b0:10:22:89:0b:e2:ff:73:b4:c9:8c:e3:40: ac:cb:87:01:0c:6f:3d:7f:a2:5c:32:7e:1e:65:c7: f9:a8:6b:6b:ae:6e:11:84:65:f4:d9:9a:cf:97:01: 58:64:83:8e:51:fe:2f:42:20:98:9f:d2:c1:1f:87: 09:f0:f3:90:cd:a2:e1:1a:5e:3f:e4:c4:ec:00:ea: 1b:e3:88:18:8c:31:e6:9d:b5:46:9f:4e:70:03:27: 2d:d3:46:a2:46:32:ba:4e:c8:eb:61:af:a7:7f:4f: 11:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6D:D7:51:95:62:93:B9:D1:9E:F6:E5:E4:07:5C:1E:95:EE:F7:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/961415a3-65de-3796-9c51-14a404dd0285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f7:67:85:a5:65:83:ed:8a:bd:29:99:c2:8e:b9:d3:99:ff: 57:22:4f:d3:1f:a7:1e:f5:21:d9:9c:6a:fc:19:5c:e0:d3:b6: d9:39:12:64:68:06:f7:16:15:54:d6:fd:a9:23:af:f0:94:7d: 74:28:e7:9b:10:a0:f2:d5:01:2f:26:64:f9:0f:0f:62:d2:a2: 21:02:c3:c2:80:73:6e:54:cc:4e:d5:a0:83:19:80:2c:69:a2: b3:12:97:71:c6:8d:3c:b6:fd:69:a3:9e:bd:62:53:68:41:f7: 95:d3:4b:d5:de:b7:f8:fb:67:9a:4a:47:10:fc:56:22:90:24: eb:5b:d7:68:c9:17:8e:b2:9f:8b:13:b9:d8:df:23:c3:79:34: 3e:86:92:d7:10:72:07:e8:a5:45:7d:ad:1b:1c:8b:34:08:8d: c8:8d:73:10:72:e2:1d:c3:9b:83:16:4b:13:70:ca:64:cf:a0: ac:fb:d6:e4:ef:d2:22:83:97:fe:09:11:63:3e:5d:7f:2a:96: 17:bf:4f:43:1a:2d:fe:72:00:ec:a8:63:11:8b:4b:e5:bc:98: 19:82:ac:41:fc:39:c0:a2:24:8f:10:e6:7d:29:08:de:80:2b: 12:e8:65:09:2a:49:24:07:ec:82:b7:0b:f9:9b:6c:f2:5a:e5: 65:fe:a1:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLMQc/ymLUo2JwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZGE4ZjViNjctZGIxMS00YTQzLWJiOTUtYTJkNjQzMDRjNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTYX+51nNgwkphwo5UAIIb20qM+yHztIV7fM 9P3i8fQF/zu5zc9oMUF7z3XxMuIYeedjTyS8qaG04WWBBO/3b4R5MUvikZ3aNZ0R RxaJ/+lTP+6hm2SYTPeHKfvuL8D8nehoBkb7/XGtSeURY+D+7OfrPLGW02hRMRvS BML6qRVZVc/qfZ5bkeYAqgtk1YkO/S/9JgL72rAQIokL4v9ztMmM40Csy4cBDG89 f6JcMn4eZcf5qGtrrm4RhGX02ZrPlwFYZIOOUf4vQiCYn9LBH4cJ8POQzaLhGl4/ 5MTsAOob44gYjDHmnbVGn05wAyct00aiRjK6TsjrYa+nf08RswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHht11GVYpO50Z725eQHXB6V7vc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTYxNDE1YTMtNjVkZS0z Nzk2LTljNTEtMTRhNDA0ZGQwMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJX3Z4WlZYPtir0pmcKOudOZ/1ciT9Mfpx71IdmcavwZXODTttk5EmRo BvcWFVTW/akjr/CUfXQo55sQoPLVAS8mZPkPD2LSoiECw8KAc25UzE7VoIMZgCxp orMSl3HGjTy2/Wmjnr1iU2hB95XTS9Xet/j7Z5pKRxD8ViKQJOtb12jJF46yn4sT udjfI8N5ND6GktcQcgfopUV9rRscizQIjciNcxBy4h3Dm4MWSxNwymTPoKz71uTv 0iKDl/4JEWM+XX8qlhe/T0MaLf5yAOyoYxGLS+W8mBmCrEH8OcCiJI8Q5n0pCN6A KxLoZQkqSSQH7IK3C/mbbPJa5WX+oTs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:54 2025 by rpki-client