$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3def5e65-e424-36b0-b3b6-ac200a798a88.roa File: 3def5e65-e424-36b0-b3b6-ac200a798a88.roa (raw, json) Hash identifier: rCKSeo9cdzNDtclaKHKtqDMFZTu+LP2JJfh01NNdtsw= Subject key identifier: BE:CF:A0:AA:21:B0:05:DB:85:CA:A9:76:00:6C:94:99:FE:49:94:99 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4A31C1064B6014C1EB0D716E Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3def5e65-e424-36b0-b3b6-ac200a798a88.roa Signing time: Tue 23 Sep 2025 12:17:46 +0000 ROA not before: Tue 23 Sep 2025 12:17:46 +0000 ROA not after: Mon 22 Dec 2025 13:17:46 +0000 asID: 9304 IP address blocks: 142.252.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:31:c1:06:4b:60:14:c1:eb:0d:71:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 23 12:17:46 2025 GMT Not After : Dec 22 13:17:46 2025 GMT Subject: CN=2d91621e-e177-42bd-bd7a-8539c7daf30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5c:d9:c9:2d:76:62:bf:20:17:ac:3c:b3:19: 33:64:6d:0b:cd:24:cd:be:f6:39:81:27:4e:a8:72: 40:ce:ce:e2:0f:eb:79:98:19:5a:79:30:e9:cc:9f: e4:0d:1e:4f:8b:3d:1c:c6:17:da:1e:4e:6a:6e:f2: a9:62:d3:f3:a8:ca:87:73:7e:a8:a9:77:cd:43:ef: 99:00:f2:42:2a:6f:cd:f7:ff:ac:49:12:c6:66:7b: 66:ed:8a:7c:65:a3:75:93:70:c3:d0:7a:b3:87:c1: 96:62:a2:02:41:76:97:ec:72:b5:2a:f4:7f:a7:be: 87:c7:8b:72:12:76:c3:a3:07:cd:d5:e4:d3:1e:30: 3f:6b:03:f1:3e:5f:60:c4:02:a9:68:bf:9b:67:34: 26:e3:6e:38:1f:f1:0c:e0:73:e2:0c:40:5c:7e:d4: f6:84:2c:cf:89:eb:20:20:dc:39:91:3d:cf:58:01: 12:f5:59:08:01:0c:b9:56:88:95:04:c2:da:6e:02: 39:28:da:1a:3c:9d:cd:f6:0d:dc:6f:ed:ec:61:96: 42:c8:5b:79:35:ba:27:51:35:21:48:4d:87:cd:9a: 82:dd:95:7d:de:ca:69:74:8b:a7:ce:a4:a5:31:16: 84:d5:75:b4:f6:3c:6a:c4:16:cf:c7:02:da:e8:e1: 5d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CF:A0:AA:21:B0:05:DB:85:CA:A9:76:00:6C:94:99:FE:49:94:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3def5e65-e424-36b0-b3b6-ac200a798a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:13:fb:9d:2b:4e:7a:08:a4:57:c2:a2:4b:6d:14:e8:69:20: bf:9f:a1:5f:65:0f:72:df:65:83:51:93:18:1a:bb:5a:83:00: d9:db:49:98:80:da:a4:19:60:8a:3d:8a:e5:3b:a6:fb:d9:5f: 3e:cd:3b:1f:00:07:2d:84:e7:5b:ee:13:70:a2:a3:bc:9a:3f: 0d:b8:46:ba:d5:2b:52:79:13:2a:d9:95:1e:75:f6:1a:52:2b: a5:ed:31:51:ad:c3:62:4c:d7:76:42:fc:e1:c9:6e:13:1e:6e: e0:0c:8b:91:ad:73:cd:17:72:80:3b:52:e4:20:05:5c:db:68: 92:8a:35:97:15:a5:e8:c6:21:d8:c4:35:80:ea:bb:b6:ad:d9: 5f:94:28:e6:41:e8:84:f5:92:f4:38:a7:87:ac:48:d9:a0:e7: 46:8f:88:1e:ec:31:0c:63:f2:ad:37:d6:de:3e:0b:24:94:af: b2:84:cd:25:51:69:23:ca:cd:41:0d:22:32:5c:c4:53:b7:c5: ec:c9:d4:04:13:07:52:f9:f4:45:86:ab:0b:79:c9:09:7e:1d: 32:24:f1:6a:91:4b:ee:ca:f1:33:fd:1c:14:94:9a:91:9b:a5: 16:29:72:af:bc:2c:ae:30:8b:55:26:50:e8:4d:e9:50:ba:14: 17:3d:53:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKMcEGS2AUwesNcW4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMzEyMTc0NloXDTI1MTIyMjEzMTc0NlowLzEtMCsGA1UEAxMk MmQ5MTYyMWUtZTE3Ny00MmJkLWJkN2EtODUzOWM3ZGFmMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlzZyS12Yr8gF6w8sxkzZG0LzSTNvvY5gSdO qHJAzs7iD+t5mBlaeTDpzJ/kDR5Piz0cxhfaHk5qbvKpYtPzqMqHc36oqXfNQ++Z APJCKm/N9/+sSRLGZntm7Yp8ZaN1k3DD0Hqzh8GWYqICQXaX7HK1KvR/p76Hx4ty EnbDowfN1eTTHjA/awPxPl9gxAKpaL+bZzQm4244H/EM4HPiDEBcftT2hCzPiesg INw5kT3PWAES9VkIAQy5VoiVBMLabgI5KNoaPJ3N9g3cb+3sYZZCyFt5NbonUTUh SE2HzZqC3ZV93sppdIunzqSlMRaE1XW09jxqxBbPxwLa6OFdBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7PoKohsAXbhcqpdgBslJn+SZSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2RlZjVlNjUtZTQyNC0z NmIwLWIzYjYtYWMyMDBhNzk4YTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoT+50rTnoIpFfCokttFOhpIL+foV9lD3LfZYNRkxgau1qDANnbSZiA 2qQZYIo9iuU7pvvZXz7NOx8ABy2E51vuE3Cio7yaPw24RrrVK1J5EyrZlR519hpS K6XtMVGtw2JM13ZC/OHJbhMebuAMi5Gtc80XcoA7UuQgBVzbaJKKNZcVpejGIdjE NYDqu7at2V+UKOZB6IT1kvQ4p4esSNmg50aPiB7sMQxj8q031t4+CySUr7KEzSVR aSPKzUENIjJcxFO3xezJ1AQTB1L59EWGqwt5yQl+HTIk8WqRS+7K8TP9HBSUmpGb pRYpcq+8LK4wi1UmUOhN6VC6FBc9U24= -----END CERTIFICATE-----Generated at Sat Oct 11 11:07:46 2025 by rpki-client