$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aab07657-018f-3da9-aa87-62f7bffff039.roa File: aab07657-018f-3da9-aa87-62f7bffff039.roa (raw, json) Hash identifier: iaKeERdGtMC9/4rHOIGxAAdN6anHtGKlxYpfZO8/R+0= Subject key identifier: 54:5C:57:EA:6E:89:5B:16:37:39:43:10:69:7E:BD:EE:88:AB:AA:42 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4A4714C64914C63CB98A24C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aab07657-018f-3da9-aa87-62f7bffff039.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 18779 IP address blocks: 172.121.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:14:c6:49:14:c6:3c:b9:8a:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=c401710c-6b5c-4537-8ee9-e46fa5e18c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5a:73:05:cc:ef:ae:a5:e0:83:a2:a4:f6:4c: b9:ad:66:5b:b6:c4:54:63:87:fd:1a:78:c4:3f:f2: 9a:40:7d:68:39:cf:ed:cf:b3:78:6c:f9:9b:4e:d1: 67:67:05:32:2a:ba:3a:bd:90:19:23:05:8e:fc:0b: 16:5b:57:0c:a9:80:e2:ee:2c:81:aa:9f:f4:9e:ee: 8d:08:b9:16:5e:32:1a:dc:58:9f:21:71:76:29:67: c8:9a:41:1d:f6:04:dc:32:db:2c:b0:2b:a8:49:7c: c3:23:95:e7:77:9a:49:fe:0d:f4:2d:08:3e:25:b8: d0:8d:27:5f:46:50:06:a9:86:ea:ab:e8:c9:d1:26: 2f:5f:da:e8:c0:31:ce:e2:53:27:c5:ef:01:1b:87: 97:d5:0f:7b:dd:e9:d7:a3:d8:4e:fb:c7:4c:be:35: 58:b5:22:78:30:26:dc:54:33:28:fe:14:c4:04:14: 64:5b:38:fc:41:83:55:11:4d:3d:8e:bc:28:10:ff: c5:7f:3d:74:b9:df:87:1a:09:2e:31:f9:f0:cf:4b: ae:fc:0d:89:5c:71:dc:ee:82:ae:17:59:0a:a0:53: 2d:3d:c7:7a:3b:60:c4:76:91:55:23:dc:73:58:aa: 10:ae:2d:6b:24:ac:e8:9b:be:d8:27:a9:3e:9e:7d: 21:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5C:57:EA:6E:89:5B:16:37:39:43:10:69:7E:BD:EE:88:AB:AA:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aab07657-018f-3da9-aa87-62f7bffff039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d3:b9:59:e7:c8:5f:7c:b3:f7:0d:3e:da:41:1e:ff:f9:56: 28:84:fc:92:8a:0d:66:82:d4:75:9c:17:ab:3f:aa:0b:0e:8e: 84:16:00:10:d8:ab:c9:92:37:b3:32:6f:27:a3:4e:5e:ca:7d: 05:cd:9b:16:f9:a9:11:c9:29:8e:0a:94:26:68:40:f8:dd:e2: af:ce:a1:c2:30:b1:45:ca:f7:55:2f:4b:89:80:be:2e:fd:64: e6:0b:a3:fe:b7:e3:69:3b:0e:ee:42:0d:03:f8:a4:9e:a9:13: e6:c6:a6:6a:fc:60:71:d1:13:1c:59:04:d1:6a:79:29:ed:3d: 7e:72:e8:dd:b0:83:c8:53:a5:14:10:3d:c1:33:fa:16:94:40: 6e:1f:02:b6:2c:4f:b9:56:50:77:80:d6:3e:4c:32:f0:3f:6d: 73:f7:68:8a:b3:ef:ef:2e:8b:42:75:aa:00:05:e3:f9:78:03: 57:61:ae:2e:fe:37:53:0e:87:c3:55:15:22:32:19:5e:e7:b3: a2:a5:41:01:66:35:eb:33:09:27:61:3e:69:e4:6d:7c:d9:bd: 0d:53:33:9d:35:87:db:e1:a1:a1:7e:64:8a:06:58:7c:68:9b: 03:24:0f:37:82:b3:ba:1e:78:74:a4:54:03:de:51:df:01:d3: 69:59:9b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxTGSRTGPLmKJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YzQwMTcxMGMtNmI1Yy00NTM3LThlZTktZTQ2ZmE1ZTE4YzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVpzBczvrqXgg6Kk9ky5rWZbtsRUY4f9GnjE P/KaQH1oOc/tz7N4bPmbTtFnZwUyKro6vZAZIwWO/AsWW1cMqYDi7iyBqp/0nu6N CLkWXjIa3FifIXF2KWfImkEd9gTcMtsssCuoSXzDI5Xnd5pJ/g30LQg+JbjQjSdf RlAGqYbqq+jJ0SYvX9rowDHO4lMnxe8BG4eX1Q973enXo9hO+8dMvjVYtSJ4MCbc VDMo/hTEBBRkWzj8QYNVEU09jrwoEP/Ffz10ud+HGgkuMfnwz0uu/A2JXHHc7oKu F1kKoFMtPcd6O2DEdpFVI9xzWKoQri1rJKzom77YJ6k+nn0hxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRcV+puiVsWNzlDEGl+ve6Iq6pCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWFiMDc2NTctMDE4Zi0z ZGE5LWFhODctNjJmN2JmZmZmMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7TuVnnyF98s/cNPtpBHv/5ViiE/JKKDWaC1HWcF6s/qgsOjoQWABDY q8mSN7MybyejTl7KfQXNmxb5qRHJKY4KlCZoQPjd4q/OocIwsUXK91UvS4mAvi79 ZOYLo/6342k7Du5CDQP4pJ6pE+bGpmr8YHHRExxZBNFqeSntPX5y6N2wg8hTpRQQ PcEz+haUQG4fArYsT7lWUHeA1j5MMvA/bXP3aIqz7+8ui0J1qgAF4/l4A1dhri7+ N1MOh8NVFSIyGV7ns6KlQQFmNeszCSdhPmnkbXzZvQ1TM501h9vhoaF+ZIoGWHxo mwMkDzeCs7oeeHSkVAPeUd8B02lZm/k= -----END CERTIFICATE-----Generated at Wed Nov 5 06:19:47 2025 by rpki-client