$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d974661-4e9a-3d14-b0ff-1bc1f6038f2e.roa File: 2d974661-4e9a-3d14-b0ff-1bc1f6038f2e.roa (raw, json) Hash identifier: XJeAp2Yps0LJ3R4gBePN2NQe5vkOffB6bZIjNPz/ahQ= Subject key identifier: 55:28:62:C6:B0:6F:17:73:85:AF:D9:E3:8E:2F:28:35:09:23:7A:44 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B36BC5836DE6E7AC304EA79B0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d974661-4e9a-3d14-b0ff-1bc1f6038f2e.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 59711 IP address blocks: 104.252.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:58:36:de:6e:7a:c3:04:ea:79:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=0ec2c89d-0ba2-487f-9a86-1ea5667f00d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:70:73:19:2d:e2:4c:5a:a9:fb:ad:1f:f8: a1:cb:5c:12:4b:82:74:5c:61:7f:cd:33:e0:22:96: 9e:f5:72:2c:0f:46:53:c2:ca:7e:a4:4a:87:22:ee: 8f:19:37:75:80:14:99:9f:d2:2c:0d:92:32:35:ca: b0:86:71:27:0d:16:9c:90:75:12:9c:55:6a:ff:8b: bb:8e:a4:2e:b1:a8:bf:8e:58:9f:0f:62:07:61:df: cc:19:79:6d:8b:b9:8b:22:75:2c:a9:44:d5:ba:a1: a1:ee:10:1b:43:d4:52:3e:bf:ad:96:10:fc:7f:5f: 4b:01:83:b2:6c:fa:6b:87:49:be:c8:84:5f:cd:de: e5:4d:b9:ab:71:09:13:62:1d:18:42:b7:2c:c2:2f: 45:49:11:f0:33:ab:81:81:8c:3f:54:4d:a8:32:93: 2b:3e:72:30:94:a2:1e:f6:c9:f0:e8:76:f7:39:2b: 68:19:74:c8:18:fd:17:41:fc:c4:02:ed:c9:18:ce: 42:02:02:83:a2:cf:ac:a7:c0:cb:ac:67:b0:14:c8: 2c:5b:89:4a:b6:e6:55:f9:5d:28:2e:fc:15:44:c7: 61:9d:fb:81:b7:3e:db:49:90:4a:5e:bf:95:d9:b7: 8a:71:20:46:98:59:d9:b2:31:1c:8c:9d:26:6a:e9: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:28:62:C6:B0:6F:17:73:85:AF:D9:E3:8E:2F:28:35:09:23:7A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d974661-4e9a-3d14-b0ff-1bc1f6038f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.252.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:38:a4:a6:0f:2b:62:bf:7c:38:9d:58:5a:97:4e:17:b6:17: 8d:b7:16:3e:f1:09:26:74:50:33:55:b1:59:de:d7:38:90:ea: 59:e3:5e:3d:9f:5f:73:2e:ac:8a:b0:0c:6b:59:a7:ad:28:fb: 17:8d:1c:06:3b:ad:a1:30:3c:46:9e:97:a3:13:a8:47:17:ad: 2d:cf:79:12:00:10:cf:46:dd:96:0c:b2:ac:71:9c:f7:a9:66: 6b:9e:0d:62:8d:bd:4e:e7:e4:66:af:c7:db:a2:a0:e0:c2:7c: b5:19:39:9e:0a:33:eb:6c:f4:ba:32:a6:3f:80:ad:a5:4c:99: 40:36:55:45:76:ae:a9:b0:58:54:b8:e6:3e:05:1c:43:e2:07: c3:4d:d1:94:ac:d9:ad:50:83:38:1e:0a:c4:ec:2b:54:d1:bd: 03:bc:89:41:5d:da:21:ac:8d:90:3a:7e:ea:28:c4:25:d0:00: e0:d6:25:82:14:bf:21:4b:8d:c4:01:e4:d6:ba:04:f3:15:9e: 20:8d:f0:b0:b7:1a:58:22:7b:00:cb:fb:55:45:cb:99:91:b3: d0:d3:51:80:ff:71:a1:06:f7:26:11:7a:c2:e4:93:36:f2:6b: 72:ab:51:40:88:f1:03:6c:2a:c6:04:65:28:0f:b2:d0:91:d9: c0:f1:85:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vFg23m56wwTqebAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk MGVjMmM4OWQtMGJhMi00ODdmLTlhODYtMWVhNTY2N2YwMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvftwcxkt4kxaqfutH/ihy1wSS4J0XGF/zTPg Ipae9XIsD0ZTwsp+pEqHIu6PGTd1gBSZn9IsDZIyNcqwhnEnDRackHUSnFVq/4u7 jqQusai/jlifD2IHYd/MGXlti7mLInUsqUTVuqGh7hAbQ9RSPr+tlhD8f19LAYOy bPprh0m+yIRfzd7lTbmrcQkTYh0YQrcswi9FSRHwM6uBgYw/VE2oMpMrPnIwlKIe 9snw6Hb3OStoGXTIGP0XQfzEAu3JGM5CAgKDos+sp8DLrGewFMgsW4lKtuZV+V0o LvwVRMdhnfuBtz7bSZBKXr+V2beKcSBGmFnZsjEcjJ0maumcZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUoYsawbxdzha/Z444vKDUJI3pEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmQ5NzQ2NjEtNGU5YS0z ZDE0LWIwZmYtMWJjMWY2MDM4ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo4pKYPK2K/fDidWFqXThe2F423Fj7xCSZ0UDNVsVne1ziQ6lnjXj2f X3MurIqwDGtZp60o+xeNHAY7raEwPEael6MTqEcXrS3PeRIAEM9G3ZYMsqxxnPep ZmueDWKNvU7n5Gavx9uioODCfLUZOZ4KM+ts9Loypj+AraVMmUA2VUV2rqmwWFS4 5j4FHEPiB8NN0ZSs2a1QgzgeCsTsK1TRvQO8iUFd2iGsjZA6fuooxCXQAODWJYIU vyFLjcQB5Na6BPMVniCN8LC3GlgiewDL+1VFy5mRs9DTUYD/caEG9yYResLkkzby a3KrUUCI8QNsKsYEZSgPstCR2cDxhdo= -----END CERTIFICATE-----Generated at Sat Oct 11 11:08:59 2025 by rpki-client