$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa File: ac769227-e328-3ef7-a7d7-099e129a190c.roa (raw, json) Hash identifier: Ow7QAporodlZcF5l+wR5D+Gh7VpWDhFbjr8HH44VazA= Subject key identifier: 8E:96:1C:76:40:90:BB:27:E7:96:40:01:12:FB:E5:8D:A9:FF:AB:06 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A94D0E302105713846D85F6A0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 212238 IP address blocks: 172.121.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:e3:02:10:57:13:84:6d:85:f6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=a3380ece-fa48-4f4c-96d9-39f05beb1335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:32:66:40:ce:8d:40:86:ab:fa:b2:6b:17: d6:6d:9a:fb:e2:f8:65:73:94:2e:0d:56:74:f8:2e: a6:33:3d:2c:08:c2:65:83:23:e8:f1:78:64:1b:bd: 56:ef:0e:9e:1c:9a:08:d5:ee:20:7e:d2:15:fe:9a: 27:81:06:15:44:41:d0:8e:66:e0:04:ae:28:5a:35: 56:94:e2:6e:f1:64:8e:f2:c3:47:7f:14:0a:91:7a: 84:a7:bf:0f:a6:1a:be:b2:b7:c5:1d:56:98:a9:02: 9c:c3:d4:a0:4a:13:d0:11:d4:04:cf:5b:85:13:af: d3:a5:e3:3c:31:f3:13:24:01:8a:c9:72:3b:0f:d9: 82:02:7c:ea:3e:65:f1:7d:68:b7:84:79:34:37:48: 32:8e:5b:76:97:16:0b:dd:7e:c5:f3:00:33:ae:bf: b6:6e:cd:49:fb:d4:55:90:30:b5:1b:8b:03:1e:54: 28:a1:9e:6d:ee:59:b0:b2:b4:e7:0f:98:2d:12:9a: d1:d4:7d:d4:ed:5b:d9:95:17:f8:53:a5:cb:a3:77: 22:6d:36:57:15:f1:fa:36:7f:e6:d5:1a:04:d1:c3: 16:3d:62:bb:bd:1d:25:15:e7:63:c3:ed:ca:6d:82: 4e:dd:57:e8:3c:6e:69:86:20:24:58:bc:98:49:5b: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:96:1C:76:40:90:BB:27:E7:96:40:01:12:FB:E5:8D:A9:FF:AB:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac769227-e328-3ef7-a7d7-099e129a190c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b7:e9:2f:bc:c5:0a:90:d1:14:26:42:21:e1:68:de:93:4d: a0:bb:06:1a:b4:84:94:a0:cd:e2:2e:02:cf:68:b0:ec:3c:47: 3b:97:e4:10:d7:6f:2d:55:b0:95:b4:99:44:92:c6:21:66:88: a5:df:ce:e0:33:7e:d3:fc:8e:7a:b5:e6:90:15:8f:34:e1:22: a0:99:64:73:5f:7e:ae:53:c6:4e:54:eb:9a:53:71:dd:93:a5: 49:bf:c6:37:4e:f8:0d:48:7b:eb:5a:06:cd:f5:c1:80:31:94: 7c:74:96:68:97:d6:05:93:70:b8:cf:5a:b0:92:07:86:ae:b7: 10:b4:90:a2:f6:4d:fb:da:28:c4:57:2c:62:ec:6d:ff:ce:3d: 98:b2:ec:d8:95:2b:55:1f:0c:7c:23:da:80:18:1c:5e:a4:e8: 5b:55:67:2b:e1:e3:2d:b4:e4:1d:98:4d:9c:98:db:6a:3d:0d: 52:02:f6:00:03:97:fa:6a:80:a3:cd:a5:8d:ac:89:78:f2:8a: 1b:05:a0:35:b4:f6:5b:55:53:11:7f:b9:f9:cf:6e:d0:a8:08: 76:46:80:de:a6:d7:f1:dd:56:52:4e:19:47:66:dd:4a:b8:ab: e1:02:85:54:52:8f:93:e7:c5:94:91:be:82:fb:5b:a5:a5:15: 98:25:e5:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0OMCEFcThG2F9qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk YTMzODBlY2UtZmE0OC00ZjRjLTk2ZDktMzlmMDViZWIxMzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeoyZkDOjUCGq/qyaxfWbZr74vhlc5QuDVZ0 +C6mMz0sCMJlgyPo8XhkG71W7w6eHJoI1e4gftIV/pongQYVREHQjmbgBK4oWjVW lOJu8WSO8sNHfxQKkXqEp78Pphq+srfFHVaYqQKcw9SgShPQEdQEz1uFE6/TpeM8 MfMTJAGKyXI7D9mCAnzqPmXxfWi3hHk0N0gyjlt2lxYL3X7F8wAzrr+2bs1J+9RV kDC1G4sDHlQooZ5t7lmwsrTnD5gtEprR1H3U7VvZlRf4U6XLo3cibTZXFfH6Nn/m 1RoE0cMWPWK7vR0lFedjw+3KbYJO3VfoPG5phiAkWLyYSVuJMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6WHHZAkLsn55ZAARL75Y2p/6sGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWM3NjkyMjctZTMyOC0z ZWY3LWE3ZDctMDk5ZTEyOWExOTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD636S+8xQqQ0RQmQiHhaN6TTaC7Bhq0hJSgzeIuAs9osOw8RzuX5BDX by1VsJW0mUSSxiFmiKXfzuAzftP8jnq15pAVjzThIqCZZHNffq5Txk5U65pTcd2T pUm/xjdO+A1Ie+taBs31wYAxlHx0lmiX1gWTcLjPWrCSB4autxC0kKL2TfvaKMRX LGLsbf/OPZiy7NiVK1UfDHwj2oAYHF6k6FtVZyvh4y205B2YTZyY22o9DVIC9gAD l/pqgKPNpY2siXjyihsFoDW09ltVUxF/ufnPbtCoCHZGgN6m1/HdVlJOGUdm3Uq4 q+EChVRSj5PnxZSRvoL7W6WlFZgl5bc= -----END CERTIFICATE-----Generated at Mon Aug 4 08:17:53 2025 by rpki-client