$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34c7668f-1a86-364c-89fb-0307997df1c2.roa File: 34c7668f-1a86-364c-89fb-0307997df1c2.roa (raw, json) Hash identifier: TFmoT2w86kkq+jZwNRGbJcNPn7mkw8SxII6B8xyaEPQ= Subject key identifier: 2D:5B:D5:3F:F5:CF:36:58:46:7A:70:00:E5:C7:C5:14:EF:3E:7C:CA Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B6D2CCCCFF825B6D77B6ADC80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34c7668f-1a86-364c-89fb-0307997df1c2.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 6939 IP address blocks: 172.252.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:cc:cf:f8:25:b6:d7:7b:6a:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=0852227b-1e29-4d95-baed-4694b9251a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:e2:36:73:8b:13:55:fb:d2:59:ad:19:63: 6e:18:c5:2b:ad:da:20:9d:e5:56:ca:5f:6b:fc:10: 00:6a:1d:b3:d9:11:36:f9:17:63:34:05:b8:32:f3: a7:40:d7:3a:fe:53:b0:1a:9b:db:64:b7:71:c5:20: 38:84:c7:80:0d:03:cc:d2:52:a3:a1:5b:01:75:ec: 4d:f7:3e:de:da:b4:27:01:a3:dc:c7:a2:72:27:26: 0e:a0:6b:be:32:84:0b:10:41:93:0d:1d:a0:f8:13: 4a:15:b7:55:63:5c:fa:c8:ac:d3:d8:91:71:1f:e1: fd:46:04:29:83:c6:0d:6b:c3:56:34:13:f5:c7:ac: 69:4f:a8:da:a4:26:c3:29:f6:ff:6e:13:64:b0:20: af:25:c5:f1:a3:cb:d7:76:c6:da:04:08:66:cb:38: c0:9c:67:0b:30:7b:57:24:96:94:6b:50:3b:25:fb: 58:b9:36:03:3a:d1:fa:4c:58:2f:9c:ff:df:1b:4c: 64:39:28:11:81:58:90:e8:15:cd:95:39:a7:8b:cd: b6:c0:1d:e9:dc:65:d5:03:87:ee:e1:73:8f:14:ae: 9c:e6:5b:f1:f2:70:c7:8e:75:da:a9:34:a2:a4:5f: eb:da:fd:05:96:5a:b5:4a:de:0a:6b:52:53:b4:43: de:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5B:D5:3F:F5:CF:36:58:46:7A:70:00:E5:C7:C5:14:EF:3E:7C:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34c7668f-1a86-364c-89fb-0307997df1c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2d:d9:ac:b0:5d:af:12:3f:2b:9a:86:c9:84:08:be:d5:81: 2a:af:9e:16:5e:45:ac:de:e5:20:e5:83:84:8c:54:27:a2:b9: d3:5d:f0:6a:e3:12:67:d9:0c:99:3a:4c:5e:46:66:c2:22:0e: 90:7a:05:99:93:5d:51:bb:0a:d8:9e:fc:f2:7c:af:13:32:2e: 74:0a:10:96:bd:cf:4d:95:9b:b1:55:b6:8a:c4:94:68:87:36: 25:7e:d3:42:22:41:b6:31:6e:88:93:f7:f0:b2:28:6b:fc:81: b5:be:69:e8:29:45:e8:cd:f0:1a:98:4c:4b:31:37:89:d9:a6: 24:53:d6:f1:3b:86:c7:3a:e7:9d:5d:34:16:ef:65:1f:5b:ee: 51:01:84:ae:62:d9:ee:d9:4d:3b:54:31:28:4e:e2:62:24:4e: e3:49:18:f3:b2:90:4c:ba:02:fc:a5:13:1f:ec:c7:1a:48:20: 1b:bf:f9:84:0b:bf:ab:24:7d:8a:bd:79:02:87:ba:c6:40:25: 69:67:15:01:8a:74:62:ef:cb:52:d5:c3:68:5c:c1:0f:91:92: 69:48:7c:c7:9a:79:3d:6f:68:dd:63:18:5f:dc:e1:59:9d:23: 70:49:b2:71:e2:3f:bb:55:67:15:f8:54:c4:1a:e4:19:35:c5: c3:4b:fd:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLMzP+CW213tq3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MDg1MjIyN2ItMWUyOS00ZDk1LWJhZWQtNDY5NGI5MjUxYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjPiNnOLE1X70lmtGWNuGMUrrdogneVWyl9r /BAAah2z2RE2+RdjNAW4MvOnQNc6/lOwGpvbZLdxxSA4hMeADQPM0lKjoVsBdexN 9z7e2rQnAaPcx6JyJyYOoGu+MoQLEEGTDR2g+BNKFbdVY1z6yKzT2JFxH+H9RgQp g8YNa8NWNBP1x6xpT6japCbDKfb/bhNksCCvJcXxo8vXdsbaBAhmyzjAnGcLMHtX JJaUa1A7JftYuTYDOtH6TFgvnP/fG0xkOSgRgViQ6BXNlTmni822wB3p3GXVA4fu 4XOPFK6c5lvx8nDHjnXaqTSipF/r2v0Fllq1St4Ka1JTtEPejwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1b1T/1zzZYRnpwAOXHxRTvPnzKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzRjNzY2OGYtMWE4Ni0z NjRjLTg5ZmItMDMwNzk5N2RmMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgt2aywXa8SPyuahsmECL7VgSqvnhZeRaze5SDlg4SMVCeiudNd8Grj EmfZDJk6TF5GZsIiDpB6BZmTXVG7Ctie/PJ8rxMyLnQKEJa9z02Vm7FVtorElGiH NiV+00IiQbYxboiT9/CyKGv8gbW+aegpRejN8BqYTEsxN4nZpiRT1vE7hsc6551d NBbvZR9b7lEBhK5i2e7ZTTtUMShO4mIkTuNJGPOykEy6AvylEx/sxxpIIBu/+YQL v6skfYq9eQKHusZAJWlnFQGKdGLvy1LVw2hcwQ+RkmlIfMeaeT1vaN1jGF/c4Vmd I3BJsnHiP7tVZxX4VMQa5Bk1xcNL/dg= -----END CERTIFICATE-----Generated at Sat Oct 11 11:17:36 2025 by rpki-client