$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bb5bde05-9574-34a7-9b0b-daf3f2ae26fe.roa File: bb5bde05-9574-34a7-9b0b-daf3f2ae26fe.roa (raw, json) Hash identifier: kFgcYyZJ3u8pjeZgVykUpOW0f9T9ktsbsuqDnuYzI8k= Subject key identifier: 99:11:14:D8:1A:D0:0E:99:6D:91:AD:D5:03:E5:A0:A3:39:88:EC:3B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AA85B96C84CDCA96035FE7380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bb5bde05-9574-34a7-9b0b-daf3f2ae26fe.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 62610 IP address blocks: 172.121.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:96:c8:4c:dc:a9:60:35:fe:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=11c9abf5-edf3-4572-b654-c9a318cebf4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:eb:9b:90:be:41:07:04:cd:14:17:d9:04: 47:a3:59:5a:e4:eb:b4:b0:c8:8b:c8:27:a3:27:37: a5:f4:46:b3:04:e2:e4:6b:80:aa:0d:59:a7:5a:fe: a2:81:9c:00:00:16:1d:85:43:b4:b3:82:dc:05:dc: 10:b5:84:b5:09:05:46:a8:62:d5:d0:a7:67:59:f8: 01:37:6a:22:63:ea:f8:8a:c7:0c:b0:0f:5f:2b:04: d5:e2:8d:a0:00:d7:d3:95:8e:4f:38:4b:54:eb:ee: 5b:59:b5:e7:22:d1:99:4d:46:e8:e5:77:77:21:4a: c3:a9:d8:28:e0:8a:fd:3d:3d:ef:8f:c9:54:89:ac: 86:98:1e:3f:78:13:44:0d:70:45:4e:df:03:a7:83: 3a:ea:e8:f8:ee:11:fa:bb:00:5f:bc:71:8a:54:27: 74:22:5a:f3:c8:60:77:64:40:d7:ce:f3:f3:39:f6: 59:f6:17:ed:b4:93:b3:1f:34:73:93:e3:93:d3:36: b4:51:f0:c9:e7:4b:7b:d1:e0:d5:64:43:28:b2:a1: 30:e1:77:78:1e:77:4d:4e:09:f7:81:07:fd:1a:b0: e5:82:5c:f4:ff:71:ef:e5:d9:08:dc:6c:5f:54:6a: 9b:31:23:15:23:7a:b0:e7:bb:de:1e:a6:7a:e7:f0: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:11:14:D8:1A:D0:0E:99:6D:91:AD:D5:03:E5:A0:A3:39:88:EC:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bb5bde05-9574-34a7-9b0b-daf3f2ae26fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:33:8c:ba:9c:31:06:f8:53:bd:f2:e1:98:4c:6a:c8:20:72: d4:3f:69:18:64:b5:9c:35:fc:2a:11:e6:cc:e7:de:56:5c:ff: 75:33:cd:3b:39:8e:71:d9:35:27:d3:39:40:6e:45:f9:0d:36: 06:1c:76:ac:04:4e:ab:01:5f:6d:86:38:73:02:23:42:06:e7: 95:1b:e1:08:86:57:e0:b0:b7:3e:ff:2b:85:ba:a6:f1:f0:f3: 79:18:96:81:d2:2f:61:c9:23:b0:4a:21:4e:91:b3:31:94:ac: b3:a3:be:85:26:c6:5e:01:79:53:e9:01:d1:4b:e3:a8:fb:a6: 9b:d8:cb:be:84:5c:78:74:fb:b8:72:29:69:d9:d8:e2:fc:0e: 56:03:9f:6e:94:32:c1:54:61:ed:a5:26:d8:6a:5e:28:13:ad: fa:b6:fd:72:52:80:d0:47:95:94:74:68:28:c4:9c:f9:77:89: 77:d1:27:ce:4e:a4:ae:bb:05:cd:d3:88:51:8c:6e:23:01:87: fc:2a:4b:9d:0a:0e:e9:40:68:f8:68:d0:0f:4f:96:09:fa:8a: 8c:85:3d:1b:02:78:e4:a1:63:3e:e6:a0:d6:65:9d:88:ff:0a: 02:e4:b5:47:b2:cd:1f:24:0f:f6:79:09:ae:95:33:e6:e9:01: e2:7e:79:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW5bITNypYDX+c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MTFjOWFiZjUtZWRmMy00NTcyLWI2NTQtYzlhMzE4Y2ViZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoPrm5C+QQcEzRQX2QRHo1la5Ou0sMiLyCej Jzel9EazBOLka4CqDVmnWv6igZwAABYdhUO0s4LcBdwQtYS1CQVGqGLV0KdnWfgB N2oiY+r4iscMsA9fKwTV4o2gANfTlY5POEtU6+5bWbXnItGZTUbo5Xd3IUrDqdgo 4Ir9PT3vj8lUiayGmB4/eBNEDXBFTt8Dp4M66uj47hH6uwBfvHGKVCd0IlrzyGB3 ZEDXzvPzOfZZ9hfttJOzHzRzk+OT0za0UfDJ50t70eDVZEMosqEw4Xd4HndNTgn3 gQf9GrDlglz0/3Hv5dkI3GxfVGqbMSMVI3qw57veHqZ65/BY+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkRFNga0A6ZbZGt1QPloKM5iOw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmI1YmRlMDUtOTU3NC0z NGE3LTliMGItZGFmM2YyYWUyNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0zjLqcMQb4U73y4ZhMasggctQ/aRhktZw1/CoR5szn3lZc/3UzzTs5 jnHZNSfTOUBuRfkNNgYcdqwETqsBX22GOHMCI0IG55Ub4QiGV+Cwtz7/K4W6pvHw 83kYloHSL2HJI7BKIU6RszGUrLOjvoUmxl4BeVPpAdFL46j7ppvYy76EXHh0+7hy KWnZ2OL8DlYDn26UMsFUYe2lJthqXigTrfq2/XJSgNBHlZR0aCjEnPl3iXfRJ85O pK67Bc3TiFGMbiMBh/wqS50KDulAaPho0A9Plgn6ioyFPRsCeOShYz7moNZlnYj/ CgLktUeyzR8kD/Z5Ca6VM+bpAeJ+eTU= -----END CERTIFICATE-----Generated at Mon Aug 4 07:54:35 2025 by rpki-client