$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a33a404d-dc8b-348a-9902-d4a7596716e8.roa File: a33a404d-dc8b-348a-9902-d4a7596716e8.roa (raw, json) Hash identifier: uPhXZ0HRV4RlvfDhiQYr84lR6/HDhZlq9jpBlp3pAPQ= Subject key identifier: F7:DD:FE:02:29:FD:18:6C:C2:D9:09:64:AB:31:2A:F5:9D:34:80:19 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB88D1AAC2812203CD452F2A0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a33a404d-dc8b-348a-9902-d4a7596716e8.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 214238 IP address blocks: 172.120.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:1a:ac:28:12:20:3c:d4:52:f2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=7d9aeec9-1c6e-4886-815e-5fb579e6898c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:b6:c8:25:cc:db:68:e6:c9:ea:6e:3b:d5: 67:43:c7:0d:60:4c:53:ef:ce:bc:b1:4f:b3:32:3c: 58:79:dc:57:de:fd:5c:32:e7:db:05:ee:1b:33:f8: 8f:1d:2a:b8:3f:e9:ed:12:53:fd:d3:0a:79:21:4f: 48:ef:a7:96:7d:ec:29:ed:4b:5d:45:63:da:62:35: 98:5d:b7:7f:80:d0:dc:91:59:41:72:74:09:97:95: b3:be:0f:20:db:32:d4:5b:0c:e8:92:cc:80:0e:a8: 36:08:8f:a6:36:9b:e4:0a:24:15:60:e5:4a:71:f5: db:9e:b5:54:aa:e1:8f:aa:01:8c:d2:e0:02:f1:c5: 5b:a0:eb:7b:ad:1d:36:7e:32:0f:30:3b:bb:b5:47: 2e:8d:23:8a:b9:07:72:8d:a1:06:71:26:da:f4:d3: 1e:df:48:0b:11:ee:42:42:e2:ab:6c:06:5c:eb:e1: dc:90:fd:aa:36:24:84:f9:4d:f7:60:23:0c:80:1b: db:f0:45:a6:4a:16:25:41:98:c8:8f:2d:36:75:64: 40:61:de:af:dc:9e:07:05:77:cd:42:a8:5f:0b:72: 0d:fa:4f:4b:3d:4d:5a:e4:9c:5e:9d:34:44:a3:dd: d2:7b:4f:cc:bd:72:97:8b:d8:95:49:24:08:31:96: 32:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DD:FE:02:29:FD:18:6C:C2:D9:09:64:AB:31:2A:F5:9D:34:80:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a33a404d-dc8b-348a-9902-d4a7596716e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:44:0c:98:73:04:3b:6b:2a:c4:92:d4:77:7b:f1:d6:d2:54: c3:3a:36:fe:d2:4d:aa:85:8b:e0:81:0f:c3:1c:fc:49:0a:90: e3:5b:94:2d:da:ac:b9:b3:ec:18:eb:5a:d4:c0:7c:f3:6b:67: 40:e0:a2:95:ba:c1:20:1d:0c:c5:be:eb:da:bc:1a:79:1a:0b: d7:5a:35:93:5e:0e:30:ee:67:14:08:e7:43:2f:6d:d9:11:cd: a2:79:fe:03:e7:fa:1c:cf:3d:cc:53:aa:cb:8f:03:e1:4b:7a: e3:ac:56:3c:0b:d1:40:84:d1:92:d7:a4:6a:59:0c:bb:9d:20: c5:46:45:50:0c:f0:52:34:af:de:cf:f2:e4:0a:af:c1:f4:27: fd:a7:18:60:da:99:d0:ec:bb:45:b9:1a:71:41:c1:9e:92:0c: 66:8a:ac:e0:6f:9a:e1:62:1a:1a:d2:4c:52:41:e0:f0:08:1b: d4:50:ef:6a:1a:5c:88:2c:be:01:36:6d:af:07:7e:22:db:4a: 21:10:02:17:87:72:29:10:f5:a9:1c:79:df:c0:19:af:b3:7c: 8f:32:c7:d1:32:e4:05:98:a8:63:bb:76:dd:b0:28:ae:9b:f3: e6:2a:88:10:33:73:a4:00:1a:83:13:7d:83:2f:0b:8d:59:d5: bc:c3:17:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRqsKBIgPNRS8qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk N2Q5YWVlYzktMWM2ZS00ODg2LTgxNWUtNWZiNTc5ZTY4OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGi2yCXM22jmyepuO9VnQ8cNYExT7868sU+z MjxYedxX3v1cMufbBe4bM/iPHSq4P+ntElP90wp5IU9I76eWfewp7UtdRWPaYjWY Xbd/gNDckVlBcnQJl5Wzvg8g2zLUWwzoksyADqg2CI+mNpvkCiQVYOVKcfXbnrVU quGPqgGM0uAC8cVboOt7rR02fjIPMDu7tUcujSOKuQdyjaEGcSba9NMe30gLEe5C QuKrbAZc6+HckP2qNiSE+U33YCMMgBvb8EWmShYlQZjIjy02dWRAYd6v3J4HBXfN QqhfC3IN+k9LPU1a5JxenTREo93Se0/MvXKXi9iVSSQIMZYyJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfd/gIp/RhswtkJZKsxKvWdNIAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTMzYTQwNGQtZGM4Yi0z NDhhLTk5MDItZDRhNzU5NjcxNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpEDJhzBDtrKsSS1Hd78dbSVMM6Nv7STaqFi+CBD8Mc/EkKkONblC3a rLmz7BjrWtTAfPNrZ0DgopW6wSAdDMW+69q8GnkaC9daNZNeDjDuZxQI50MvbdkR zaJ5/gPn+hzPPcxTqsuPA+FLeuOsVjwL0UCE0ZLXpGpZDLudIMVGRVAM8FI0r97P 8uQKr8H0J/2nGGDamdDsu0W5GnFBwZ6SDGaKrOBvmuFiGhrSTFJB4PAIG9RQ72oa XIgsvgE2ba8HfiLbSiEQAheHcikQ9akced/AGa+zfI8yx9Ey5AWYqGO7dt2wKK6b 8+YqiBAzc6QAGoMTfYMvC41Z1bzDF/E= -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:57 2025 by rpki-client