$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec5f5c85-ee9f-3b3c-a369-77d3faec96c8.roa File: ec5f5c85-ee9f-3b3c-a369-77d3faec96c8.roa (raw, json) Hash identifier: Q7rW6+JbNy4vCE2nlOUQA6i08dVpD3lEBPEl/KslPjU= Subject key identifier: C9:8F:B7:C5:30:A4:BF:D8:2F:8C:50:CF:A9:CC:00:ED:BA:C8:9D:86 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B5F374EBBFABC311BE4C5F600 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec5f5c85-ee9f-3b3c-a369-77d3faec96c8.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 3257 IP address blocks: 172.121.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:4e:bb:fa:bc:31:1b:e4:c5:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=f1aea58c-8de6-4551-a4d5-2f30fed32c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:df:50:0b:b4:20:21:d5:1d:16:45:73:cc: 1e:1f:aa:2d:a0:12:00:58:b7:2f:31:c7:dd:51:d4: fb:19:19:ec:d9:87:41:e9:d5:46:23:3b:c3:d4:6d: 9d:ad:99:08:fe:05:60:43:e0:74:b9:d6:77:92:26: 53:3e:6e:20:56:50:57:66:06:fa:92:3a:6f:11:9f: cb:fb:4c:d4:32:83:2b:02:a7:e7:02:45:aa:12:eb: 71:02:de:7e:0f:05:98:51:0d:c8:d2:28:62:d2:7b: c5:d8:8b:db:3c:56:7d:40:e9:75:a5:d6:18:92:6b: 67:9a:4a:eb:96:60:c6:27:b7:4e:e8:3f:54:e2:91: 4e:19:3f:54:62:92:c4:99:bb:6d:39:db:8c:48:2b: 1c:cb:ab:18:0c:27:09:f4:63:ef:f7:73:a5:ba:62: d5:78:1c:1d:7d:dc:61:2e:68:a5:ef:0c:6d:37:a3: 24:51:85:7c:58:84:94:a8:16:7b:38:79:93:29:af: e5:9d:89:c1:9f:ae:c3:34:de:8d:50:cd:54:cb:24: 1a:33:f2:93:0e:46:19:52:e5:5e:8d:3b:1c:54:ec: 73:69:eb:5b:f6:48:7b:96:3d:62:94:12:bd:f0:8d: 87:c8:7b:3e:0b:e1:95:c9:5c:8f:ef:fa:b0:14:66: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8F:B7:C5:30:A4:BF:D8:2F:8C:50:CF:A9:CC:00:ED:BA:C8:9D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec5f5c85-ee9f-3b3c-a369-77d3faec96c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:39:09:58:da:e4:72:bb:ce:01:c2:a2:47:5b:8f:e0:5f:c8: 45:16:a9:9d:06:dc:ea:10:88:f9:cb:1e:b5:b5:e4:e8:aa:17: 51:ad:84:31:9f:bd:57:0b:6f:0e:c7:fe:59:6a:6c:47:77:dd: 59:c8:0f:0f:cc:cf:b5:52:0d:1e:b1:c8:44:7a:d1:d8:59:20: bd:3c:46:8c:72:43:c1:fa:aa:97:3e:c7:d5:17:de:18:ac:d4: 93:77:ab:ee:ad:7a:ad:a4:a4:b6:79:3b:f5:9f:a7:53:26:f1: 44:ba:97:74:c4:7a:01:96:1d:30:c2:4f:b3:18:98:75:aa:84: bd:cf:41:3a:3f:d3:12:9d:d3:5e:ab:96:21:ed:ef:11:c1:15: 4c:b0:5d:1b:2d:df:99:59:b5:96:f3:8f:20:d6:d5:40:b6:e5: bd:25:a2:4e:20:d9:74:08:fc:31:0c:de:3e:ac:4a:e4:1f:dc: bb:58:3c:1e:38:ac:e2:74:01:06:b9:ac:ad:3f:ac:61:c9:62: 4d:a1:f7:71:9e:8e:90:0e:7e:ef:de:b2:f1:f5:2d:ce:a4:3b: 1d:a4:13:77:6b:45:16:50:dd:0a:49:3a:ed:7c:dd:ab:0a:07: 14:19:e8:da:0b:c1:17:0e:e0:a1:44:68:b0:3f:ca:17:74:bc: 93:ef:96:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN067+rwxG+TF9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZjFhZWE1OGMtOGRlNi00NTUxLWE0ZDUtMmYzMGZlZDMyYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopzfUAu0ICHVHRZFc8weH6otoBIAWLcvMcfd UdT7GRns2YdB6dVGIzvD1G2drZkI/gVgQ+B0udZ3kiZTPm4gVlBXZgb6kjpvEZ/L +0zUMoMrAqfnAkWqEutxAt5+DwWYUQ3I0ihi0nvF2IvbPFZ9QOl1pdYYkmtnmkrr lmDGJ7dO6D9U4pFOGT9UYpLEmbttOduMSCscy6sYDCcJ9GPv93OlumLVeBwdfdxh Lmil7wxtN6MkUYV8WISUqBZ7OHmTKa/lnYnBn67DNN6NUM1UyyQaM/KTDkYZUuVe jTscVOxzaetb9kh7lj1ilBK98I2HyHs+C+GVyVyP7/qwFGbb5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmPt8UwpL/YL4xQz6nMAO26yJ2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZWM1ZjVjODUtZWU5Zi0z YjNjLWEzNjktNzdkM2ZhZWM5NmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs5CVja5HK7zgHCokdbj+BfyEUWqZ0G3OoQiPnLHrW15OiqF1GthDGf vVcLbw7H/llqbEd33VnIDw/Mz7VSDR6xyER60dhZIL08RoxyQ8H6qpc+x9UX3his 1JN3q+6teq2kpLZ5O/Wfp1Mm8US6l3TEegGWHTDCT7MYmHWqhL3PQTo/0xKd016r liHt7xHBFUywXRst35lZtZbzjyDW1UC25b0lok4g2XQI/DEM3j6sSuQf3LtYPB44 rOJ0AQa5rK0/rGHJYk2h93GejpAOfu/esvH1Lc6kOx2kE3drRRZQ3QpJOu183asK BxQZ6NoLwRcO4KFEaLA/yhd0vJPvlps= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:33 2025 by rpki-client