$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa File: fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa (raw, json) Hash identifier: dS8PFx7SNZStt9+RabW60hEsd/7WN1crA2BNmS4gbWI= Subject key identifier: E0:BA:03:0A:C3:A1:44:FE:97:64:E3:AE:E3:E9:ED:64:25:1B:B7:A7 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4A473209138E48578AF68900 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 18779 IP address blocks: 172.121.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:32:09:13:8e:48:57:8a:f6:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=ef2e171b-8491-4ffc-be9f-7f11a97512c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e8:cc:a8:cf:8c:91:63:80:af:ca:d0:de:17: 95:46:ae:dc:ae:34:de:8d:21:f0:b5:7d:83:79:a2: e1:6c:d2:ed:45:0e:56:ee:be:e9:1b:e6:10:da:88: 25:f8:0b:3c:47:75:97:ce:64:f7:6b:02:e3:ef:52: a3:83:0d:c6:d5:ae:df:ef:66:5a:d3:03:b0:09:92: f4:d5:14:1c:03:08:06:b9:63:9c:d3:a1:ad:08:b9: cb:22:f3:d5:0a:7b:86:4f:43:d4:31:4c:ce:98:c0: 40:1a:5e:0b:25:05:23:23:00:9b:79:ee:e9:85:8e: 32:3e:a6:8d:02:b3:ad:fc:64:eb:47:bf:7d:44:ce: 31:8c:7a:b0:f4:7f:7d:87:c1:35:90:79:10:bc:3e: 01:91:74:ef:f3:79:d8:df:0d:24:05:93:aa:d9:b4: a8:97:13:c9:46:93:dd:14:a9:3c:22:60:a1:8d:28: 84:ca:49:3b:ac:6d:f7:49:c0:c0:18:97:27:c9:34: b3:9c:08:48:ed:1d:ba:bf:d5:ec:a3:01:ae:44:2b: 0d:89:9d:07:7b:c6:86:fc:cf:6e:b1:4a:b8:37:c6: 16:73:dc:12:07:a5:bb:33:16:01:d7:15:60:88:92: 9f:d3:d2:bc:dc:27:82:db:e5:48:8e:e6:a0:88:b5: 24:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BA:03:0A:C3:A1:44:FE:97:64:E3:AE:E3:E9:ED:64:25:1B:B7:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fad1bf4a-3062-350a-830d-ca1bb0e9c9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1f:b6:73:30:34:04:ff:a6:13:e5:74:81:fe:15:bf:a4:2b: bc:4b:20:b4:c5:ad:a7:76:fa:ea:eb:7f:b1:82:21:b9:1e:a8: 3d:17:81:0f:cf:82:12:a2:31:80:e2:36:3f:2c:73:e3:16:15: c5:c4:e4:62:fc:8a:0e:81:78:22:38:5c:c3:88:6f:82:19:1b: ca:a9:25:85:19:d8:40:b8:e0:56:fe:e2:cb:46:a7:4c:41:48: ac:43:ae:d6:16:41:ea:19:f9:ab:cd:57:d9:6c:51:c3:fe:74: 9f:48:38:f0:65:1d:00:79:79:7e:fc:93:27:10:99:ce:15:c7: 90:e7:20:8b:01:47:bb:b5:e8:23:35:28:b0:bf:a5:9b:2e:b8: 3b:e8:da:bf:95:e4:e1:55:80:d9:ff:b7:ec:cd:c9:de:4e:bf: 89:fd:d6:ce:a1:1d:ae:08:cc:5a:72:7d:d3:a7:3e:61:ef:2e: 1a:7e:9c:1e:31:a1:92:35:74:05:b5:23:10:15:33:34:8a:95: 86:c7:44:33:5a:0e:e1:23:40:ab:a5:05:d3:f9:e9:44:79:9c: b5:a3:60:db:ce:9b:69:f5:62:f7:ec:ad:91:6f:85:f8:8f:ca: f1:46:21:bb:45:71:8b:05:5d:69:1d:08:24:4b:b4:09:b6:77: c4:cb:dd:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzIJE45IV4r2iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZWYyZTE3MWItODQ5MS00ZmZjLWJlOWYtN2YxMWE5NzUxMmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOjMqM+MkWOAr8rQ3heVRq7crjTejSHwtX2D eaLhbNLtRQ5W7r7pG+YQ2ogl+As8R3WXzmT3awLj71Kjgw3G1a7f72Za0wOwCZL0 1RQcAwgGuWOc06GtCLnLIvPVCnuGT0PUMUzOmMBAGl4LJQUjIwCbee7phY4yPqaN ArOt/GTrR799RM4xjHqw9H99h8E1kHkQvD4BkXTv83nY3w0kBZOq2bSolxPJRpPd FKk8ImChjSiEykk7rG33ScDAGJcnyTSznAhI7R26v9XsowGuRCsNiZ0He8aG/M9u sUq4N8YWc9wSB6W7MxYB1xVgiJKf09K83CeC2+VIjuagiLUkVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC6AwrDoUT+l2TjruPp7WQlG7enMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmFkMWJmNGEtMzA2Mi0z NTBhLTgzMGQtY2ExYmIwZTljOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIftnMwNAT/phPldIH+Fb+kK7xLILTFrad2+urrf7GCIbkeqD0XgQ/P ghKiMYDiNj8sc+MWFcXE5GL8ig6BeCI4XMOIb4IZG8qpJYUZ2EC44Fb+4stGp0xB SKxDrtYWQeoZ+avNV9lsUcP+dJ9IOPBlHQB5eX78kycQmc4Vx5DnIIsBR7u16CM1 KLC/pZsuuDvo2r+V5OFVgNn/t+zNyd5Ov4n91s6hHa4IzFpyfdOnPmHvLhp+nB4x oZI1dAW1IxAVMzSKlYbHRDNaDuEjQKulBdP56UR5nLWjYNvOm2n1YvfsrZFvhfiP yvFGIbtFcYsFXWkdCCRLtAm2d8TL3Y4= -----END CERTIFICATE-----Generated at Wed Nov 5 06:30:06 2025 by rpki-client