$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df22234d-8114-3a66-9c62-76365fa61f95.roa File: df22234d-8114-3a66-9c62-76365fa61f95.roa (raw, json) Hash identifier: yRMWNtSASkx6W5fFplR/wVZSBb1D+mMwCOR58IuXWXY= Subject key identifier: 1D:C2:14:50:42:01:47:F3:97:21:84:C7:F1:7D:29:23:1A:20:B6:2A Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AA9C0DDEC5851376D94C90E80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df22234d-8114-3a66-9c62-76365fa61f95.roa Signing time: Mon 28 Jul 2025 01:00:51 +0000 ROA not before: Mon 28 Jul 2025 01:00:51 +0000 ROA not after: Sun 26 Oct 2025 01:00:51 +0000 asID: 55201 IP address blocks: 172.121.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:c0:dd:ec:58:51:37:6d:94:c9:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 28 01:00:51 2025 GMT Not After : Oct 26 01:00:51 2025 GMT Subject: CN=fb8546e1-09a1-4231-a995-1df58ab01527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:db:95:70:83:15:19:96:a2:83:ac:ad:77: c9:ca:1d:9f:6e:c4:31:98:ef:9a:ef:2c:94:08:0a: 3c:7c:ba:b5:3b:92:c3:ba:e4:11:63:5d:c9:83:ae: 80:09:d5:17:fb:62:2a:76:ce:c1:cf:ba:a8:9b:b6: 34:76:a0:ef:a9:72:e6:ba:90:0f:4f:ef:63:4e:04: a3:d0:41:e2:0c:0d:c7:22:5d:34:95:64:a1:db:65: 1f:4c:d9:ab:8c:4e:0e:7d:c1:a7:b3:b0:ce:d0:66: 88:34:e9:7c:c1:13:40:b2:76:69:19:ab:b0:98:93: fd:d1:ab:61:c5:33:cb:e4:1a:2a:c2:7d:03:12:97: 43:2f:f6:24:c7:25:31:dd:c9:d5:8c:0f:93:70:0d: 2a:f7:3c:c8:f1:77:e2:0a:4c:60:e2:91:53:49:32: 78:ba:26:d1:cb:a9:13:90:f8:8a:1f:8b:10:2e:16: 03:8d:c5:48:5d:0a:5c:56:2f:0c:9c:3f:4e:2f:f7: b3:99:46:d0:46:a0:b8:a7:72:8d:a5:2f:b7:dc:73: 9b:fe:1d:b6:72:ab:03:3c:29:8a:3f:15:cf:2b:d1: e7:be:c0:0a:c9:a9:e7:46:9a:51:27:fa:0a:0c:d7: aa:c5:25:2b:1f:55:64:0d:d3:12:6a:76:85:a2:67: 56:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C2:14:50:42:01:47:F3:97:21:84:C7:F1:7D:29:23:1A:20:B6:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df22234d-8114-3a66-9c62-76365fa61f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:42:27:e0:bd:95:d6:f8:f8:a6:9b:b4:66:15:90:60:01:fa: 2e:76:a6:71:b4:60:ca:fd:12:f9:db:30:99:89:de:a7:2b:ed: fa:15:dc:2a:ca:6d:e8:57:09:bb:f3:76:d2:b5:bd:f1:b5:c7: f9:12:f3:d8:c4:6e:dd:b6:2f:bb:41:8b:dd:a2:d0:74:80:86: ce:bd:65:d3:87:39:bf:a6:6d:65:4a:00:40:da:fd:14:ca:a8: 45:d3:09:d6:84:80:95:ee:4b:d2:14:e2:2f:79:a9:42:42:8a: ed:81:2e:72:08:ba:20:8f:df:7b:dc:ec:88:18:17:6e:aa:95: b2:1c:fe:4a:a7:93:3d:b4:50:ee:dc:cb:ad:1f:f7:67:b3:83: 5f:84:cf:0d:51:76:67:49:a2:f5:3b:93:b6:bc:0b:3f:b8:7c: 94:8e:af:eb:59:f6:4e:9f:01:58:eb:3d:7d:79:bb:e2:b9:15: 51:ec:d6:58:3f:40:a8:d1:71:90:e2:bb:b7:69:ed:0b:a3:fe: cb:d7:1e:d7:72:03:58:b2:da:0e:d2:f2:74:2d:ed:34:b6:e0: 58:60:1f:1e:e9:d5:94:60:14:16:99:d5:39:2f:ff:5a:f4:ac: 4d:ac:4a:36:97:93:53:58:26:52:f6:09:08:00:db:a4:cd:6d: 4b:bf:fe:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqpwN3sWFE3bZTJDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcyODAxMDA1MVoXDTI1MTAyNjAxMDA1MVowLzEtMCsGA1UEAxMk ZmI4NTQ2ZTEtMDlhMS00MjMxLWE5OTUtMWRmNThhYjAxNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxjblXCDFRmWooOsrXfJyh2fbsQxmO+a7yyU CAo8fLq1O5LDuuQRY13Jg66ACdUX+2Iqds7Bz7qom7Y0dqDvqXLmupAPT+9jTgSj 0EHiDA3HIl00lWSh22UfTNmrjE4OfcGns7DO0GaINOl8wRNAsnZpGauwmJP90ath xTPL5Boqwn0DEpdDL/YkxyUx3cnVjA+TcA0q9zzI8XfiCkxg4pFTSTJ4uibRy6kT kPiKH4sQLhYDjcVIXQpcVi8MnD9OL/ezmUbQRqC4p3KNpS+33HOb/h22cqsDPCmK PxXPK9HnvsAKyannRppRJ/oKDNeqxSUrH1VkDdMSanaFomdWEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3CFFBCAUfzlyGEx/F9KSMaILYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGYyMjIzNGQtODExNC0z YTY2LTljNjItNzYzNjVmYTYxZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINCJ+C9ldb4+KabtGYVkGAB+i52pnG0YMr9EvnbMJmJ3qcr7foV3CrK behXCbvzdtK1vfG1x/kS89jEbt22L7tBi92i0HSAhs69ZdOHOb+mbWVKAEDa/RTK qEXTCdaEgJXuS9IU4i95qUJCiu2BLnIIuiCP33vc7IgYF26qlbIc/kqnkz20UO7c y60f92ezg1+Ezw1RdmdJovU7k7a8Cz+4fJSOr+tZ9k6fAVjrPX15u+K5FVHs1lg/ QKjRcZDiu7dp7Quj/svXHtdyA1iy2g7S8nQt7TS24FhgHx7p1ZRgFBaZ1Tkv/1r0 rE2sSjaXk1NYJlL2CQgA26TNbUu//uI= -----END CERTIFICATE-----Generated at Fri Aug 8 20:54:49 2025 by rpki-client