$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aade98c2-ca09-3a10-ae1b-63498086fb9f.roa File: aade98c2-ca09-3a10-ae1b-63498086fb9f.roa (raw, json) Hash identifier: gNjXz7DtoMqVZRXH7etBQrBBksVdmYnaeldjFp0oens= Subject key identifier: C2:C3:49:65:CF:BC:38:0C:4F:DA:52:8F:8E:7F:36:EC:0C:DE:3B:23 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB88D578712402070992C6F40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aade98c2-ca09-3a10-ae1b-63498086fb9f.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 214238 IP address blocks: 172.120.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:57:87:12:40:20:70:99:2c:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=c0c5b921-88e1-48cd-978a-59ee2e2a1084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:ad:52:69:66:e5:55:35:f6:fd:a5:19:7e: 84:6e:ad:85:45:24:1a:40:70:f4:a4:af:46:ed:18: 2a:0a:03:90:8b:8e:4e:75:11:fd:3f:2e:18:5e:90: 50:da:31:1d:5f:a6:ed:9f:8e:1a:03:ce:7a:d4:e5: 78:bf:f3:36:3f:1b:8b:40:b0:00:41:cd:4e:76:5a: fa:73:6a:26:25:2c:99:60:6c:f7:cf:3b:04:c7:e9: 95:1c:7c:40:c4:ff:67:4c:47:bf:3f:dc:b0:92:0b: e4:06:c0:2b:8a:a4:9d:4d:4e:f7:88:f6:bb:b5:54: 81:f2:38:6c:3e:1e:f9:a1:d4:1b:28:62:4c:9f:0b: c9:9c:21:63:04:b4:72:b2:5a:b7:df:08:69:c0:c1: 6f:0a:41:91:d0:57:05:53:37:b1:2d:88:75:40:65: 2e:bf:64:f7:6f:57:3e:a7:66:82:d6:62:47:74:66: 1d:31:22:0e:9a:85:c2:3b:0c:d0:93:db:20:54:fe: a7:25:4d:95:52:69:a5:f8:71:f0:72:c7:57:67:15: a5:32:e7:93:1a:7a:51:d4:ac:0a:1b:78:68:42:2f: 5b:14:83:d6:b4:35:15:02:40:7a:5a:3d:5d:ab:73: 01:05:30:ed:33:47:42:9e:78:41:ab:83:35:25:0d: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C3:49:65:CF:BC:38:0C:4F:DA:52:8F:8E:7F:36:EC:0C:DE:3B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aade98c2-ca09-3a10-ae1b-63498086fb9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a1:70:ce:ac:b0:42:62:7d:28:11:9c:78:8f:5b:a3:f1:68: 3f:94:29:6c:ca:45:0a:7e:35:65:cb:cc:06:10:66:a8:2c:e4: 1f:c0:bf:85:25:fa:69:20:ee:36:13:6c:1f:4d:24:78:74:f0: 85:d4:bd:74:90:b8:3a:07:26:4e:5e:7b:b8:af:3f:48:25:7d: be:a0:d4:10:f5:ec:84:84:27:6b:04:b7:04:3c:86:ed:6b:33: b5:0c:b0:5e:ba:a4:ff:d6:a2:c7:1b:97:6b:7b:3e:ca:d2:ed: 22:52:5b:34:85:99:a9:97:84:dc:a8:99:77:d9:df:a8:a6:be: bd:0b:3c:88:a8:74:98:fd:61:e3:4b:39:b4:37:22:57:c4:83: b6:4a:88:36:e3:16:77:5e:31:d7:ae:2f:ad:db:39:ca:91:f8: 03:1a:c2:92:b9:a8:51:f8:4c:4b:7b:04:dd:15:1f:66:f8:97: ad:98:e4:bc:12:ad:8f:63:89:c5:64:b3:d8:4a:e2:02:bb:1b: b9:52:aa:c0:78:a4:6a:8c:1f:05:54:80:92:fb:36:c5:3d:8c: 1c:8c:87:9b:4d:6e:eb:93:dd:aa:04:43:a4:8b:93:21:1f:6e: 4f:7f:89:fe:70:e6:93:e1:25:b2:aa:f8:f4:d0:6a:9b:ca:f9: d4:85:9f:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVeHEkAgcJksb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzBjNWI5MjEtODhlMS00OGNkLTk3OGEtNTllZTJlMmExMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZqtUmlm5VU19v2lGX6Ebq2FRSQaQHD0pK9G 7RgqCgOQi45OdRH9Py4YXpBQ2jEdX6btn44aA8561OV4v/M2PxuLQLAAQc1Odlr6 c2omJSyZYGz3zzsEx+mVHHxAxP9nTEe/P9ywkgvkBsAriqSdTU73iPa7tVSB8jhs Ph75odQbKGJMnwvJnCFjBLRyslq33whpwMFvCkGR0FcFUzexLYh1QGUuv2T3b1c+ p2aC1mJHdGYdMSIOmoXCOwzQk9sgVP6nJU2VUmml+HHwcsdXZxWlMueTGnpR1KwK G3hoQi9bFIPWtDUVAkB6Wj1dq3MBBTDtM0dCnnhBq4M1JQ2llQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLDSWXPvDgMT9pSj45/NuwM3jsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWFkZTk4YzItY2EwOS0z YTEwLWFlMWItNjM0OTgwODZmYjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAihcM6ssEJifSgRnHiPW6PxaD+UKWzKRQp+NWXLzAYQZqgs5B/Av4Ul +mkg7jYTbB9NJHh08IXUvXSQuDoHJk5ee7ivP0glfb6g1BD17ISEJ2sEtwQ8hu1r M7UMsF66pP/Woscbl2t7PsrS7SJSWzSFmamXhNyomXfZ36imvr0LPIiodJj9YeNL ObQ3IlfEg7ZKiDbjFndeMdeuL63bOcqR+AMawpK5qFH4TEt7BN0VH2b4l62Y5LwS rY9jicVks9hK4gK7G7lSqsB4pGqMHwVUgJL7NsU9jByMh5tNbuuT3aoEQ6SLkyEf bk9/if5w5pPhJbKq+PTQapvK+dSFn84= -----END CERTIFICATE-----Generated at Wed Nov 5 03:44:00 2025 by rpki-client