$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deccbecf-eccc-359e-a275-dd1a5ef0148e.roa File: deccbecf-eccc-359e-a275-dd1a5ef0148e.roa (raw, json) Hash identifier: cCjIPtWV0IxkymQRQAXSxJSZ5yGLUG0YRoCOVF6ajY4= Subject key identifier: 36:6C:F6:36:E4:44:3B:31:D1:2E:BE:D1:E1:41:3C:98:0B:47:CC:E6 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A7E7BA0DADF0FCD01755C3A80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deccbecf-eccc-359e-a275-dd1a5ef0148e.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 3257 IP address blocks: 172.121.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:a0:da:df:0f:cd:01:75:5c:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=3286f324-75c2-491f-a008-3b53f8331c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0e:a9:35:b6:12:0d:74:8b:dd:93:0f:9e:25: 9f:31:80:6f:60:31:71:94:9a:d5:14:c2:a8:7e:ba: 69:4a:35:13:0c:c1:67:05:32:cc:ee:60:db:ae:ff: ea:c9:f8:8e:2b:8a:20:d2:11:7b:e7:0d:b5:9f:a5: 23:01:1f:29:35:a1:35:cb:8c:d6:b2:a8:06:4f:f9: 29:6b:57:fa:76:b7:1e:fe:f5:4c:20:85:3a:7a:bb: b1:5e:20:a3:93:a2:1b:40:e6:f1:bf:29:22:ad:26: 55:20:d9:57:b9:72:ea:e5:a0:b7:6b:39:5c:65:55: 8b:02:f0:55:ff:d1:7b:de:23:7a:0d:83:38:5b:59: 4f:78:2f:eb:48:52:91:34:93:f6:4b:2c:3f:ca:de: b6:30:bf:2e:83:7d:de:19:5b:6a:ef:43:22:ab:de: c8:ec:e6:cd:77:19:a6:e7:16:68:11:e7:6c:a8:a4: 6c:3b:e1:5d:17:46:56:d1:68:4e:03:c2:1f:0c:5e: 05:04:7d:f2:20:51:8e:26:4e:1d:49:a3:0b:65:45: 80:f3:5c:66:1b:82:cd:69:59:5c:27:dd:0d:60:8d: b6:44:99:58:86:95:40:2b:04:6d:5c:5f:e5:54:f7: e1:35:87:f9:56:2a:04:30:ee:95:c0:df:ec:69:8e: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6C:F6:36:E4:44:3B:31:D1:2E:BE:D1:E1:41:3C:98:0B:47:CC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/deccbecf-eccc-359e-a275-dd1a5ef0148e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:97:00:ef:6a:87:16:b4:1f:70:57:ef:d9:52:59:45:c5:00: 00:3b:e0:a1:c9:93:33:61:92:ce:5a:57:67:7c:a0:3a:13:e0: 84:91:0a:4d:1d:63:ef:0a:70:5e:3a:b4:84:52:51:23:fe:af: 9d:61:e9:b5:a5:3c:c3:bf:a9:c8:1a:7b:6b:a6:2d:8b:d3:1b: a4:00:47:b7:b1:a9:e0:76:56:94:87:71:3a:6f:08:ed:ac:da: 97:ff:74:bb:33:65:ad:b3:36:32:12:a6:4c:8a:3c:c3:ff:19: 8e:b5:cc:eb:84:da:db:c8:1c:99:4e:ed:d1:ef:61:fb:03:e6: 92:2c:33:f6:69:c2:ff:10:f7:de:1a:bc:92:16:04:83:56:b2: 65:4c:2b:a8:23:da:14:7b:69:03:f3:e7:eb:ce:11:e0:cf:8b: c0:46:97:90:98:93:70:bb:eb:1d:66:d5:cf:98:d4:4f:9d:02: f0:35:0f:ea:20:ac:0c:75:57:e8:3f:65:26:08:1b:a7:84:ec: 3a:71:3b:fa:6b:bd:2b:5a:40:65:53:40:11:82:98:46:ef:8c: 76:54:23:e9:3c:50:ae:9f:14:37:85:0a:9b:4e:ff:b3:dd:42: 7c:a3:84:d3:31:da:c3:8d:9a:2d:a1:cc:6f:34:e2:fc:35:ab: 9e:d6:60:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e6Da3w/NAXVcOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MzI4NmYzMjQtNzVjMi00OTFmLWEwMDgtM2I1M2Y4MzMxYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w6pNbYSDXSL3ZMPniWfMYBvYDFxlJrVFMKo frppSjUTDMFnBTLM7mDbrv/qyfiOK4og0hF75w21n6UjAR8pNaE1y4zWsqgGT/kp a1f6drce/vVMIIU6eruxXiCjk6IbQObxvykirSZVINlXuXLq5aC3azlcZVWLAvBV /9F73iN6DYM4W1lPeC/rSFKRNJP2Syw/yt62ML8ug33eGVtq70Miq97I7ObNdxmm 5xZoEedsqKRsO+FdF0ZW0WhOA8IfDF4FBH3yIFGOJk4dSaMLZUWA81xmG4LNaVlc J90NYI22RJlYhpVAKwRtXF/lVPfhNYf5VioEMO6VwN/saY6UfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZs9jbkRDsx0S6+0eFBPJgLR8zmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGVjY2JlY2YtZWNjYy0z NTllLWEyNzUtZGQxYTVlZjAxNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOXAO9qhxa0H3BX79lSWUXFAAA74KHJkzNhks5aV2d8oDoT4ISRCk0d Y+8KcF46tIRSUSP+r51h6bWlPMO/qcgae2umLYvTG6QAR7exqeB2VpSHcTpvCO2s 2pf/dLszZa2zNjISpkyKPMP/GY61zOuE2tvIHJlO7dHvYfsD5pIsM/Zpwv8Q994a vJIWBINWsmVMK6gj2hR7aQPz5+vOEeDPi8BGl5CYk3C76x1m1c+Y1E+dAvA1D+og rAx1V+g/ZSYIG6eE7DpxO/prvStaQGVTQBGCmEbvjHZUI+k8UK6fFDeFCptO/7Pd QnyjhNMx2sONmi2hzG804vw1q57WYF8= -----END CERTIFICATE-----Generated at Mon Aug 4 08:17:49 2025 by rpki-client