$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f439eb67-a003-3bd6-a69a-fc8f40d7af4c.roa File: f439eb67-a003-3bd6-a69a-fc8f40d7af4c.roa (raw, json) Hash identifier: k1jtprhxf71+5B2Jj/c9S5zeJbETcYd/KaZqFPbQs2M= Subject key identifier: 89:5D:7F:49:5C:34:A5:FA:BA:28:A7:F0:23:E0:D5:5C:FC:31:9A:F3 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B601AEF6B121DDB8A80FB6460 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f439eb67-a003-3bd6-a69a-fc8f40d7af4c.roa Signing time: Wed 01 Oct 2025 08:39:34 +0000 ROA not before: Wed 01 Oct 2025 08:39:34 +0000 ROA not after: Tue 30 Dec 2025 09:39:34 +0000 asID: 18779 IP address blocks: 172.120.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:1a:ef:6b:12:1d:db:8a:80:fb:64:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 1 08:39:34 2025 GMT Not After : Dec 30 09:39:34 2025 GMT Subject: CN=d7f47ef3-425f-48b0-8421-0045a32a3a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cb:11:e9:d2:b1:dd:03:89:27:62:17:bf:bc: f6:cc:51:4a:08:72:e8:88:0d:85:b9:1f:06:61:81: 37:00:db:1c:99:d9:09:8d:51:c9:9e:52:af:d5:dd: 76:cd:90:09:c3:6f:70:06:ac:2b:62:7b:26:8f:1b: 41:d3:24:7e:89:01:e8:f5:74:28:d7:48:6b:b0:12: 22:73:0d:2d:24:c5:2a:a5:31:c1:7d:b1:c0:e0:dc: d4:d1:e3:50:05:74:07:f3:71:26:07:76:f8:04:26: b2:00:57:8f:b7:4e:24:12:c2:3f:10:3f:8c:46:3d: 5a:8c:29:81:f1:35:a7:ea:45:96:30:18:b8:77:91: 78:b8:ea:4d:fc:c1:10:0d:61:35:12:98:8c:d5:c1: bf:84:9c:24:ff:7e:02:bd:bb:96:85:ef:06:c7:06: b9:0e:47:95:dc:fd:70:f0:46:7d:ab:49:b8:f8:04: c0:ac:2f:1b:39:82:d8:27:2c:bc:f6:ab:df:32:b5: fc:68:3b:30:24:d3:1b:5d:60:39:11:43:fb:09:c6: 79:1a:50:e8:c2:d9:19:60:8c:81:29:2e:d4:d5:8e: 61:8b:b9:75:4c:76:42:26:69:8b:fb:d8:ed:c2:a7: 0e:f4:2a:fd:81:b3:7a:67:35:01:66:74:07:3e:8d: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5D:7F:49:5C:34:A5:FA:BA:28:A7:F0:23:E0:D5:5C:FC:31:9A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f439eb67-a003-3bd6-a69a-fc8f40d7af4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.120.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:23:0e:82:a7:ea:7c:52:b1:8b:c5:38:04:a5:c3:80:24:33: 27:42:d5:4b:d2:8e:74:02:48:23:84:6f:76:83:7e:99:23:4f: 12:87:bf:d1:b0:7f:e5:6c:2b:bd:41:4a:f7:2e:9a:0d:a4:c3: 36:67:3e:46:6b:5c:fa:bf:d2:db:91:7f:39:01:73:71:c7:82: 9b:ce:88:3e:81:18:25:0d:93:7b:d4:de:97:7a:38:23:ce:a5: b9:ef:77:81:e1:2a:03:ac:af:b5:30:03:37:5d:85:d5:6d:6d: 65:fb:c4:0b:64:6b:10:ac:0e:54:37:5d:c6:98:e2:d0:72:be: 38:54:88:a9:34:8c:1d:48:14:bf:dd:ee:c7:58:e6:4b:e1:99: 62:29:74:0e:8b:06:f5:77:a8:e9:a8:ff:a0:5f:51:8f:e2:03: ed:53:18:b9:fe:da:f4:eb:ad:40:59:45:86:04:61:b9:64:a6: 5d:aa:f9:6f:4d:ff:01:d7:a4:a1:57:fb:ab:83:ad:c6:8b:e2: 27:30:ec:58:9d:12:ce:68:7a:f7:74:47:41:5f:4a:f7:4a:5e: 25:1a:b2:4c:d8:78:a1:d6:31:46:07:92:2d:7e:93:5e:92:d7: 95:d1:ea:d6:21:3f:f1:e8:88:23:f5:36:6a:58:38:58:d2:44: dc:7c:6a:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgGu9rEh3bioD7ZGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwMTA4MzkzNFoXDTI1MTIzMDA5MzkzNFowLzEtMCsGA1UEAxMk ZDdmNDdlZjMtNDI1Zi00OGIwLTg0MjEtMDA0NWEzMmEzYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMsR6dKx3QOJJ2IXv7z2zFFKCHLoiA2FuR8G YYE3ANscmdkJjVHJnlKv1d12zZAJw29wBqwrYnsmjxtB0yR+iQHo9XQo10hrsBIi cw0tJMUqpTHBfbHA4NzU0eNQBXQH83EmB3b4BCayAFePt04kEsI/ED+MRj1ajCmB 8TWn6kWWMBi4d5F4uOpN/MEQDWE1EpiM1cG/hJwk/34CvbuWhe8Gxwa5DkeV3P1w 8EZ9q0m4+ATArC8bOYLYJyy89qvfMrX8aDswJNMbXWA5EUP7CcZ5GlDowtkZYIyB KS7U1Y5hi7l1THZCJmmL+9jtwqcO9Cr9gbN6ZzUBZnQHPo0SlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIldf0lcNKX6uiin8CPg1Vz8MZrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjQzOWViNjctYTAwMy0z YmQ2LWE2OWEtZmM4ZjQwZDdhZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHhjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMjDoKn6nxSsYvFOASlw4AkMydC1UvSjnQCSCOEb3aDfpkjTxKHv9Gw f+VsK71BSvcumg2kwzZnPkZrXPq/0tuRfzkBc3HHgpvOiD6BGCUNk3vU3pd6OCPO pbnvd4HhKgOsr7UwAzddhdVtbWX7xAtkaxCsDlQ3XcaY4tByvjhUiKk0jB1IFL/d 7sdY5kvhmWIpdA6LBvV3qOmo/6BfUY/iA+1TGLn+2vTrrUBZRYYEYblkpl2q+W9N /wHXpKFX+6uDrcaL4icw7FidEs5oevd0R0FfSvdKXiUaskzYeKHWMUYHki1+k16S 15XR6tYhP/HoiCP1NmpYOFjSRNx8al4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:26 2025 by rpki-client