$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa File: da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa (raw, json) Hash identifier: 2Obv8ezwH9jIeIVWSG6j49AyvEHjjeDJiR5he78UJQM= Subject key identifier: 8C:4A:F9:48:40:78:45:74:20:1E:DB:EB:02:AB:DB:FF:B5:5E:1F:41 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BB88D5524A90C39809660EDC0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 214238 IP address blocks: 172.120.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:55:24:a9:0c:39:80:96:60:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=71342293-1f50-475f-9701-591f7cfb156d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:3a:51:15:92:55:f4:df:02:b9:ba:c2:f3: 33:ed:a6:c6:d1:a5:40:ab:e6:9d:6a:fe:d8:19:5f: 73:e6:61:52:bc:f9:fc:c1:97:76:30:8e:f2:34:07: 56:f0:20:7d:40:10:c4:94:9f:f6:11:58:ad:4a:0a: a5:71:03:0d:97:5e:05:71:bb:8a:3d:b7:a0:f2:f8: 7b:9e:94:80:f0:d3:8b:fb:9b:0d:d3:93:43:c1:10: fc:9e:49:f7:f8:fb:cf:79:f9:49:6a:20:47:ee:a3: 53:a4:13:94:70:cf:89:44:c2:32:69:e7:be:73:f2: 5c:85:a6:71:83:12:cc:d7:6c:56:e6:a6:a4:b5:de: 9f:1c:ac:9c:e0:5c:10:37:ea:37:8a:fd:5d:b3:45: 9f:b9:d7:72:51:72:b1:45:5b:ee:b2:b8:14:68:ef: 28:70:98:76:3a:c4:fa:a2:1e:a3:45:76:20:9c:d4: ba:8c:55:11:02:cf:2e:9f:19:a3:4e:2d:38:8c:f1: a8:39:d4:ec:1a:31:f0:a3:86:40:6b:59:ee:f2:62: a4:b5:52:c0:e1:7a:48:66:84:a1:33:ae:71:e4:80: 03:48:d9:24:a0:ad:0b:df:d9:4f:c4:66:e8:c0:3b: 57:99:2f:5d:4b:8a:93:29:c8:62:4c:66:1a:50:10: 6b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4A:F9:48:40:78:45:74:20:1E:DB:EB:02:AB:DB:FF:B5:5E:1F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/da1cae6c-1e95-35b0-9a00-d2c5a46f1725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a2:b2:8e:ec:3b:6f:2b:c7:3f:89:03:06:03:f0:36:52:6f: 66:2d:b7:32:80:b9:0b:ef:b2:0c:f5:b0:50:3f:28:cf:a9:15: 65:99:8e:92:56:e8:4d:e8:39:2c:d9:7f:df:bf:13:fc:08:a5: 9a:de:52:c6:54:32:34:65:b9:05:86:88:9f:65:d4:c2:5d:4a: 1c:7e:b2:55:b3:5d:99:ee:2e:ab:27:41:07:93:ac:aa:ae:60: 26:4b:30:b5:1f:73:12:f8:3a:ea:03:66:6d:f1:ab:78:78:e6: 8d:cb:9a:42:3b:f6:20:9f:82:40:d0:02:81:6d:13:b7:26:92: e7:fc:b0:c1:fb:b9:d6:5e:60:66:d9:bf:42:77:95:79:0f:1f: fc:78:e0:88:8c:8e:7c:8f:8f:21:00:fc:22:a1:ff:0e:c1:b0: 1e:e9:1d:9e:58:cc:6f:de:31:17:ea:20:e9:23:8e:b4:01:06: b5:c8:a5:ff:65:10:94:d8:3a:6f:e9:14:c1:11:4d:70:9d:48: 44:eb:eb:48:01:a2:5e:20:fc:91:9e:55:e9:53:e4:73:72:4f: c4:49:02:f7:2f:1b:13:0c:1a:4d:c5:1c:2e:41:13:53:22:10: 9f:24:26:1b:b4:2d:d4:97:81:aa:5b:c0:b4:25:19:92:b0:ed: c5:db:d2:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVUkqQw5gJZg7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzEzNDIyOTMtMWY1MC00NzVmLTk3MDEtNTkxZjdjZmIxNTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMo6URWSVfTfArm6wvMz7abG0aVAq+adav7Y GV9z5mFSvPn8wZd2MI7yNAdW8CB9QBDElJ/2EVitSgqlcQMNl14FcbuKPbeg8vh7 npSA8NOL+5sN05NDwRD8nkn3+PvPeflJaiBH7qNTpBOUcM+JRMIyaee+c/JchaZx gxLM12xW5qaktd6fHKyc4FwQN+o3iv1ds0WfuddyUXKxRVvusrgUaO8ocJh2OsT6 oh6jRXYgnNS6jFURAs8unxmjTi04jPGoOdTsGjHwo4ZAa1nu8mKktVLA4XpIZoSh M65x5IADSNkkoK0L39lPxGbowDtXmS9dS4qTKchiTGYaUBBr6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxK+UhAeEV0IB7b6wKr2/+1Xh9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGExY2FlNmMtMWU5NS0z NWIwLTlhMDAtZDJjNWE0NmYxNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKiso7sO28rxz+JAwYD8DZSb2YttzKAuQvvsgz1sFA/KM+pFWWZjpJW 6E3oOSzZf9+/E/wIpZreUsZUMjRluQWGiJ9l1MJdShx+slWzXZnuLqsnQQeTrKqu YCZLMLUfcxL4OuoDZm3xq3h45o3LmkI79iCfgkDQAoFtE7cmkuf8sMH7udZeYGbZ v0J3lXkPH/x44IiMjnyPjyEA/CKh/w7BsB7pHZ5YzG/eMRfqIOkjjrQBBrXIpf9l EJTYOm/pFMERTXCdSETr60gBol4g/JGeVelT5HNyT8RJAvcvGxMMGk3FHC5BE1Mi EJ8kJhu0LdSXgapbwLQlGZKw7cXb0uU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:24:57 2025 by rpki-client