$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32cca2ae-2a9d-3fe9-9b3c-de7ea79b3259.roa File: 32cca2ae-2a9d-3fe9-9b3c-de7ea79b3259.roa (raw, json) Hash identifier: Ed9i5KRxCCsFkwfFh6KUtefqk2m3tK7lmsFQbi7u8/E= Subject key identifier: 8E:FE:B2:D8:44:02:7E:4F:4C:F9:10:AC:90:D7:F9:AD:C6:5F:1D:74 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4F88E3E3B82BB02C210D08C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32cca2ae-2a9d-3fe9-9b3c-de7ea79b3259.roa Signing time: Thu 25 Sep 2025 10:12:23 +0000 ROA not before: Thu 25 Sep 2025 10:12:23 +0000 ROA not after: Wed 24 Dec 2025 11:12:23 +0000 asID: 214025 IP address blocks: 172.252.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:88:e3:e3:b8:2b:b0:2c:21:0d:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 10:12:23 2025 GMT Not After : Dec 24 11:12:23 2025 GMT Subject: CN=4d2a122a-8480-4e99-9fcf-84b1b9b94a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:9d:3f:ea:ce:d1:cb:a5:f9:ca:b4:bf:6a: f1:8e:3c:00:89:18:bb:f6:28:70:8a:8c:c3:e7:6c: 22:14:bc:5f:57:35:d5:84:9a:19:d0:8d:5d:56:a9: 43:8a:3e:53:99:e5:e3:44:28:71:49:c9:1a:c7:5f: 07:5e:58:ea:c5:bb:70:be:7e:2b:58:48:42:d2:84: 0f:3a:65:d4:ec:1c:54:49:1c:e9:58:92:ab:9a:ee: 26:81:9d:5c:de:72:a6:78:3c:0c:e2:b6:18:a4:2a: 5c:30:73:96:d3:b5:5a:5a:a5:bc:b5:c6:42:85:98: 9f:29:84:c6:ec:bd:3b:99:6a:d5:22:35:9f:dd:e6: 6b:1a:87:ee:2d:89:db:28:a6:fd:27:bc:4a:f7:6f: 5e:58:6f:4f:9a:47:f2:5f:c4:6f:79:0b:81:ce:ab: 0a:94:5e:b2:f7:4f:6c:6f:e1:7e:b1:67:c8:17:44: 24:86:68:4c:b2:b0:c5:30:1e:86:d4:22:4f:be:65: ee:0f:75:31:76:64:8f:20:b8:60:d0:6d:7a:a1:29: 79:09:84:e7:c8:dc:60:d0:59:48:10:cb:e8:57:0e: 85:8a:37:91:dd:c0:4c:70:7c:6d:0b:43:d0:cb:91: 89:08:2b:6d:5b:a8:90:67:fc:ff:c4:40:df:74:9a: 83:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FE:B2:D8:44:02:7E:4F:4C:F9:10:AC:90:D7:F9:AD:C6:5F:1D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32cca2ae-2a9d-3fe9-9b3c-de7ea79b3259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0e:b3:dd:c6:22:24:69:98:52:c0:56:0e:7b:be:41:a4:69: 8e:df:b6:99:98:f8:26:53:cc:04:f6:c7:c4:75:21:ce:a8:d1: 81:6a:5e:88:01:34:8e:fa:09:41:44:3b:ea:38:0c:81:36:cb: 9d:94:07:04:0f:a6:a0:7c:df:69:d8:43:1a:01:2a:b3:40:2c: 91:4d:dd:7e:dd:47:0c:52:29:5f:ef:c5:a4:c3:9d:94:34:52: 68:91:f8:41:11:72:d9:5a:5c:60:05:a6:f6:4f:50:b5:2d:64: e3:81:16:65:0f:d0:eb:ea:1f:c4:b7:c7:28:b0:b5:26:87:c2: 05:b2:e8:37:0d:0d:67:5b:cd:0b:0a:94:28:65:1c:6d:17:94: f7:68:2f:d9:6e:a8:cd:e0:f6:41:0e:3c:c1:90:b5:a5:69:51: ba:6f:90:77:48:0d:d4:97:fd:f4:da:32:ad:1c:70:c6:71:57: 96:22:5c:26:01:96:c4:c2:46:99:0f:32:e1:d4:ea:48:e7:4b: 74:6c:0d:69:e2:97:e4:c9:e0:51:92:96:b7:55:18:65:cd:2a: 37:d5:bb:b7:af:14:03:1e:99:f0:95:d1:52:9a:11:79:26:bf: 38:c0:c6:44:68:87:b6:69:c7:83:0d:bb:0e:51:57:3b:c0:36: 54:5d:9f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtPiOPjuCuwLCENCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyNTEwMTIyM1oXDTI1MTIyNDExMTIyM1owLzEtMCsGA1UEAxMk NGQyYTEyMmEtODQ4MC00ZTk5LTlmY2YtODRiMWI5Yjk0YTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwudP+rO0cul+cq0v2rxjjwAiRi79ihwiozD 52wiFLxfVzXVhJoZ0I1dVqlDij5TmeXjRChxSckax18HXljqxbtwvn4rWEhC0oQP OmXU7BxUSRzpWJKrmu4mgZ1c3nKmeDwM4rYYpCpcMHOW07VaWqW8tcZChZifKYTG 7L07mWrVIjWf3eZrGofuLYnbKKb9J7xK929eWG9PmkfyX8RveQuBzqsKlF6y909s b+F+sWfIF0QkhmhMsrDFMB6G1CJPvmXuD3UxdmSPILhg0G16oSl5CYTnyNxg0FlI EMvoVw6FijeR3cBMcHxtC0PQy5GJCCttW6iQZ/z/xEDfdJqD3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7+sthEAn5PTPkQrJDX+a3GXx10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzJjY2EyYWUtMmE5ZC0z ZmU5LTliM2MtZGU3ZWE3OWIzMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgOs93GIiRpmFLAVg57vkGkaY7ftpmY+CZTzAT2x8R1Ic6o0YFqXogB NI76CUFEO+o4DIE2y52UBwQPpqB832nYQxoBKrNALJFN3X7dRwxSKV/vxaTDnZQ0 UmiR+EERctlaXGAFpvZPULUtZOOBFmUP0OvqH8S3xyiwtSaHwgWy6DcNDWdbzQsK lChlHG0XlPdoL9luqM3g9kEOPMGQtaVpUbpvkHdIDdSX/fTaMq0ccMZxV5YiXCYB lsTCRpkPMuHU6kjnS3RsDWnil+TJ4FGSlrdVGGXNKjfVu7evFAMemfCV0VKaEXkm vzjAxkRoh7Zpx4MNuw5RVzvANlRdn4k= -----END CERTIFICATE-----Generated at Sat Oct 11 11:07:59 2025 by rpki-client