$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/296cea1f-06fb-3a0f-a7c7-47a39227c6ff.roa File: 296cea1f-06fb-3a0f-a7c7-47a39227c6ff.roa (raw, json) Hash identifier: eDNNW2JZn0/VhJ5JMyH+fUEpZjLONlfwgPMyLeAjGlY= Subject key identifier: DC:7C:C9:26:81:BE:1F:64:98:D0:17:3E:25:9B:50:74:81:02:99:7B Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A8492BCF607992929D7B69240 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/296cea1f-06fb-3a0f-a7c7-47a39227c6ff.roa Signing time: Mon 14 Jul 2025 17:23:07 +0000 ROA not before: Mon 14 Jul 2025 17:23:07 +0000 ROA not after: Sun 12 Oct 2025 17:23:07 +0000 asID: 44559 IP address blocks: 142.252.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:92:bc:f6:07:99:29:29:d7:b6:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 14 17:23:07 2025 GMT Not After : Oct 12 17:23:07 2025 GMT Subject: CN=5a9f66dc-a17e-405d-8e9f-e81a22d26525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a3:1c:9a:06:c3:d1:29:e7:36:08:8d:d5:a3: c0:0e:ff:99:f0:d8:c5:96:7d:30:a0:1f:aa:6a:9a: 4a:33:bb:37:c2:50:ee:cf:a7:e6:48:88:2e:ba:53: 2b:3f:04:9c:80:2a:8f:4c:73:e5:4c:20:ed:48:60: 18:c1:08:84:32:f6:77:f3:8e:53:f0:27:92:71:be: d1:5c:fb:5f:e4:d3:6c:6f:0c:1f:1c:7d:36:bd:ca: 86:c0:2e:ea:20:a7:2a:a1:ac:f9:88:a0:f8:8e:97: 91:ba:ba:f8:5f:8c:64:b5:7f:e1:f8:f8:9c:76:1c: 75:70:51:f3:7b:0f:a2:c1:79:8b:ed:55:d5:1e:0e: 45:80:03:18:92:f2:56:c5:7d:cb:2d:37:dd:f6:04: 4f:04:cb:b8:3a:a3:e7:d1:3d:ff:40:e7:d0:0d:94: 8a:ab:84:f6:70:e7:12:a5:fb:78:cb:06:58:dc:b8: c7:aa:9d:2f:93:10:9e:7a:ff:e9:65:fe:40:4a:34: 0e:1a:8f:a9:2a:8f:22:bf:97:f5:c9:bf:ed:cb:ca: ec:d1:82:fd:ca:be:4b:31:9d:2a:ae:74:1c:76:01: 32:c2:a8:9f:ac:3c:18:db:26:b6:2a:72:f1:70:23: 73:47:de:bb:bd:d9:f0:42:58:5a:e2:65:34:16:22: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7C:C9:26:81:BE:1F:64:98:D0:17:3E:25:9B:50:74:81:02:99:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/296cea1f-06fb-3a0f-a7c7-47a39227c6ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b8:b2:51:a6:be:10:bf:fb:dd:f4:c0:d9:ca:c5:dc:7a:de: 2d:f8:9a:7c:6b:94:0d:91:ae:4e:e0:eb:f8:2d:57:05:55:23: d3:53:26:b8:d5:0f:a1:89:76:e5:e6:89:18:e1:b8:74:00:68: 18:74:8b:c3:cd:c3:ba:6d:3d:48:1d:21:ab:43:c7:6b:8e:96: 99:5f:fe:66:10:28:c9:83:4c:e7:95:02:c9:72:8d:c8:04:21: 7a:e4:2e:c1:be:8f:b0:40:eb:74:0c:09:80:03:a7:ca:a6:bb: f4:a5:53:50:77:e9:f7:af:27:6f:70:3d:82:7c:95:09:79:3e: bc:6f:f4:26:d0:c1:ba:36:f5:58:58:e6:da:39:0a:f0:7d:90: 86:26:21:0e:4e:3a:0c:17:e9:9e:80:36:c9:3d:92:b1:69:63: 61:53:d3:a7:d5:ad:93:38:69:40:20:04:20:e0:4c:7c:a6:d6: 53:4b:0d:cc:1c:b1:5f:10:75:27:ef:15:36:d1:31:98:35:1f: 8a:55:a0:af:2d:65:03:d6:05:09:16:cd:a4:fa:d4:06:b6:5c: f4:71:0a:42:45:2c:1e:62:7c:6e:96:fb:a5:e2:27:2b:91:5d: 5d:e6:b8:27:61:a5:af:e9:0c:d7:53:c8:c3:c6:a4:5a:32:f1: 59:4b:d9:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEkrz2B5kpKde2kkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxNDE3MjMwN1oXDTI1MTAxMjE3MjMwN1owLzEtMCsGA1UEAxMk NWE5ZjY2ZGMtYTE3ZS00MDVkLThlOWYtZTgxYTIyZDI2NTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6McmgbD0SnnNgiN1aPADv+Z8NjFln0woB+q appKM7s3wlDuz6fmSIguulMrPwScgCqPTHPlTCDtSGAYwQiEMvZ3845T8CeScb7R XPtf5NNsbwwfHH02vcqGwC7qIKcqoaz5iKD4jpeRurr4X4xktX/h+Picdhx1cFHz ew+iwXmL7VXVHg5FgAMYkvJWxX3LLTfd9gRPBMu4OqPn0T3/QOfQDZSKq4T2cOcS pft4ywZY3LjHqp0vkxCeev/pZf5ASjQOGo+pKo8iv5f1yb/ty8rs0YL9yr5LMZ0q rnQcdgEywqifrDwY2ya2KnLxcCNzR967vdnwQlha4mU0FiJUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNx8ySaBvh9kmNAXPiWbUHSBApl7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjk2Y2VhMWYtMDZmYi0z YTBmLWE3YzctNDdhMzkyMjdjNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA24slGmvhC/+930wNnKxdx63i34mnxrlA2Rrk7g6/gtVwVVI9NTJrjV D6GJduXmiRjhuHQAaBh0i8PNw7ptPUgdIatDx2uOlplf/mYQKMmDTOeVAslyjcgE IXrkLsG+j7BA63QMCYADp8qmu/SlU1B36fevJ29wPYJ8lQl5Prxv9CbQwbo29VhY 5to5CvB9kIYmIQ5OOgwX6Z6ANsk9krFpY2FT06fVrZM4aUAgBCDgTHym1lNLDcwc sV8QdSfvFTbRMZg1H4pVoK8tZQPWBQkWzaT61Aa2XPRxCkJFLB5ifG6W+6XiJyuR XV3muCdhpa/pDNdTyMPGpFoy8VlL2T0= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:23 2025 by rpki-client