$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b099ed77-e77b-3f8e-bea2-d032593071e5.roa File: b099ed77-e77b-3f8e-bea2-d032593071e5.roa (raw, json) Hash identifier: G6tXI2TVOwpyMumYgulZb9nJ4E1NtmbsGIvjryW3dtQ= Subject key identifier: CB:4E:93:F8:A0:D2:32:6A:10:EC:C3:CD:B4:82:53:80:3B:E4:A7:04 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4A47383F97CC1183EE62FC80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b099ed77-e77b-3f8e-bea2-d032593071e5.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 18779 IP address blocks: 172.121.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:38:3f:97:cc:11:83:ee:62:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=48a21069-92e6-46e1-b950-4632e0e90bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:c6:6e:72:74:d4:d3:38:d4:f4:dd:0c:a0: 11:1e:93:24:1b:fa:7c:f7:03:7f:e5:aa:4e:9b:87: f9:18:40:65:c6:3e:0b:33:e4:46:95:44:b8:b9:a9: c8:85:72:27:a9:76:65:de:3b:9e:0f:c9:13:68:70: 1c:57:59:23:f1:f8:2d:61:e5:ab:c4:e5:06:a4:2a: a4:d1:32:ae:0a:7b:d5:cd:c3:1b:4d:37:d6:36:2d: 62:14:99:1a:68:42:d3:88:4c:20:af:cf:6a:09:a8: d4:9e:83:84:85:ee:06:e3:aa:ff:3c:7b:95:c8:ee: b9:ef:df:e2:9d:62:dc:ed:dc:64:7a:8f:a1:93:aa: 53:1f:3e:e7:bf:d7:71:53:00:7f:bc:82:e2:fe:3e: 02:2e:98:96:2a:ca:65:0f:65:53:7f:73:6d:0f:77: 16:63:26:84:3c:8f:52:39:af:a5:14:b6:2e:3e:7c: 44:4f:c7:2f:ab:33:e1:ae:93:3c:1a:cc:15:fa:0f: 4f:d1:d7:37:44:71:4e:3f:bf:77:dc:c6:e1:9d:10: 89:fa:8d:9c:a5:73:d7:78:d8:ec:2f:fa:7c:2f:be: 7e:15:c2:68:90:50:7e:54:6f:ae:18:fd:cd:53:5e: 6c:d8:75:2a:79:6e:ff:33:2c:3e:0d:8c:11:58:4e: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4E:93:F8:A0:D2:32:6A:10:EC:C3:CD:B4:82:53:80:3B:E4:A7:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b099ed77-e77b-3f8e-bea2-d032593071e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:3a:9d:d1:49:63:da:76:40:43:92:80:79:8d:c8:3c:fb:3f: 7f:24:01:6d:03:07:19:5b:bb:60:0d:af:81:8b:2e:e4:f6:c4: 25:52:b4:a2:22:5d:68:c5:c2:17:1d:b4:59:db:f6:38:91:ce: 63:2f:23:c6:3d:1b:ef:fb:c5:21:ac:78:21:73:12:b7:df:88: e9:68:5c:32:98:b1:28:1c:85:cc:b5:3e:36:bd:7f:5f:41:67: f8:f7:53:3b:ef:26:3c:80:a2:e0:35:d4:c3:e4:7b:7b:e5:a9: 10:10:36:9d:39:3c:e3:4d:f2:e3:3a:36:cf:ac:13:04:bb:e5: 94:86:d8:72:9b:9f:38:d5:8b:48:8f:3f:ec:7a:eb:89:8a:26: 09:b1:1d:ce:d0:62:40:81:dc:40:c2:78:53:84:d5:a7:28:41: db:63:3f:6a:f4:1c:57:a6:a7:8c:2a:91:a9:57:c7:b4:59:c7: 53:53:2e:c4:0d:80:38:bd:7a:f0:50:9d:45:a5:aa:e0:75:99: 4d:40:fb:44:b9:4e:9c:8a:40:1a:37:ba:ca:5f:35:66:05:56: 1c:e7:0f:9c:ac:87:b8:4e:53:f5:9e:4c:ce:1e:25:3e:f2:5b: 55:81:81:50:60:5d:29:c2:08:fa:23:e9:e0:28:94:33:95:6f: 92:ec:35:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzg/l8wRg+5i/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NDhhMjEwNjktOTJlNi00NmUxLWI5NTAtNDYzMmUwZTkwYmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraXGbnJ01NM41PTdDKARHpMkG/p89wN/5apO m4f5GEBlxj4LM+RGlUS4uanIhXInqXZl3jueD8kTaHAcV1kj8fgtYeWrxOUGpCqk 0TKuCnvVzcMbTTfWNi1iFJkaaELTiEwgr89qCajUnoOEhe4G46r/PHuVyO6579/i nWLc7dxkeo+hk6pTHz7nv9dxUwB/vILi/j4CLpiWKsplD2VTf3NtD3cWYyaEPI9S Oa+lFLYuPnxET8cvqzPhrpM8GswV+g9P0dc3RHFOP7933MbhnRCJ+o2cpXPXeNjs L/p8L75+FcJokFB+VG+uGP3NU15s2HUqeW7/Myw+DYwRWE4xLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtOk/ig0jJqEOzDzbSCU4A75KcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjA5OWVkNzctZTc3Yi0z ZjhlLWJlYTItZDAzMjU5MzA3MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrHlkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg6ndFJY9p2QEOSgHmNyDz7P38kAW0DBxlbu2ANr4GLLuT2xCVStKIi XWjFwhcdtFnb9jiRzmMvI8Y9G+/7xSGseCFzErffiOloXDKYsSgchcy1Pja9f19B Z/j3UzvvJjyAouA11MPke3vlqRAQNp05PONN8uM6Ns+sEwS75ZSG2HKbnzjVi0iP P+x664mKJgmxHc7QYkCB3EDCeFOE1acoQdtjP2r0HFemp4wqkalXx7RZx1NTLsQN gDi9evBQnUWlquB1mU1A+0S5TpyKQBo3uspfNWYFVhznD5ysh7hOU/WeTM4eJT7y W1WBgVBgXSnCCPoj6eAolDOVb5LsNS4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:29:28 2025 by rpki-client