$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40ed9171-3384-3c36-984e-c2b3c72ae371.roa File: 40ed9171-3384-3c36-984e-c2b3c72ae371.roa (raw, json) Hash identifier: aRy88bPILgySxTE/gK66C1jZA+tkzfz84sv++p7v6yo= Subject key identifier: 35:FE:43:B0:1C:26:66:69:78:41:49:CA:B9:31:67:15:5D:BF:87:29 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4CC9DD2F7FD644A320670D00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40ed9171-3384-3c36-984e-c2b3c72ae371.roa Signing time: Wed 24 Sep 2025 10:35:52 +0000 ROA not before: Wed 24 Sep 2025 10:35:52 +0000 ROA not after: Tue 23 Dec 2025 11:35:52 +0000 asID: 212238 IP address blocks: 172.252.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4c:c9:dd:2f:7f:d6:44:a3:20:67:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 24 10:35:52 2025 GMT Not After : Dec 23 11:35:52 2025 GMT Subject: CN=facdc2db-13f9-4bbc-8ad4-03c1dbc2103a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:27:48:92:e0:80:d0:21:91:74:35:2f:52: 17:f3:eb:52:bb:e8:4b:4c:5a:a2:68:df:ef:80:6a: ce:57:89:05:52:28:e6:3f:d3:ce:3b:55:0b:47:cb: 13:6d:3b:19:9c:0f:e9:c0:9d:81:e0:47:b5:7b:c5: 51:97:40:ca:71:da:b3:45:18:fa:94:f8:35:38:e3: 2a:70:46:b0:68:e3:45:0b:83:5e:8d:58:85:93:a5: b0:c6:bf:3e:c5:ab:e7:7d:0e:ce:42:a3:d7:64:46: 99:13:6e:b5:05:b9:37:0a:19:32:37:89:21:e2:da: eb:2e:a5:d8:1b:90:5f:a9:1d:53:a5:18:d3:14:b1: 7e:db:83:79:ad:c5:f5:21:f1:ad:54:e6:ff:65:d5: ae:2c:aa:a4:ab:87:0d:ba:b9:cc:53:45:f0:12:66: eb:03:39:d0:95:30:f0:13:6e:7e:dd:85:b6:18:37: 28:6d:a4:d1:af:9d:a3:c1:56:d9:c6:58:78:96:73: a0:ae:f5:a4:31:8a:23:49:bc:87:e2:cb:11:12:1c: 6a:15:04:47:18:13:1a:c7:61:07:b6:30:4e:07:ff: 2b:6c:41:27:d5:0c:aa:e7:39:2b:ee:b5:86:de:f6: c6:46:4b:59:61:f0:e7:84:b3:9d:01:df:94:fb:04: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FE:43:B0:1C:26:66:69:78:41:49:CA:B9:31:67:15:5D:BF:87:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40ed9171-3384-3c36-984e-c2b3c72ae371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:88:bd:89:25:cb:6d:c2:db:23:42:9f:d5:a0:a3:bd:55:b1: 5a:ec:c8:34:ac:f6:fe:c1:e1:23:fa:96:84:da:3a:f1:95:80: fd:e9:56:5a:94:f9:64:d6:01:84:17:ea:a7:69:ed:27:ba:d9: 39:e8:c9:dc:33:0f:26:3d:82:fe:ff:c2:86:00:c0:58:e8:31: 9e:d8:3e:20:35:79:5b:09:d8:a0:2d:f3:79:16:be:dd:a1:0b: b3:7e:5b:c1:80:2a:09:b6:e1:a2:40:f5:a5:9d:cb:af:0e:5e: 9d:a4:ce:f7:33:dd:b7:35:9c:aa:9e:a3:6c:97:c5:b2:2d:a2: 66:6c:92:5d:1f:ef:bf:f3:be:a9:ad:6b:dd:29:62:15:ca:04: 5e:54:25:f7:a7:2e:0b:3f:5c:fe:01:77:29:e0:10:a7:30:33: af:28:02:2e:05:5e:7d:b3:a4:b2:ea:22:52:77:89:7f:66:f9: 4f:f4:cb:bf:0a:3a:d5:90:43:1a:65:ee:af:cd:6d:08:53:5c: a3:d3:6c:08:b3:c0:c0:e6:a2:48:4c:4d:55:82:14:f8:7a:6a: fd:52:09:d2:12:d4:ec:32:a5:ce:99:62:f2:db:05:22:d7:0f: 01:2a:89:5a:40:23:5e:a1:bf:b0:8c:74:c5:c3:03:bf:34:88: fb:d2:8c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtMyd0vf9ZEoyBnDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyNDEwMzU1MloXDTI1MTIyMzExMzU1MlowLzEtMCsGA1UEAxMk ZmFjZGMyZGItMTNmOS00YmJjLThhZDQtMDNjMWRiYzIxMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8knSJLggNAhkXQ1L1IX8+tSu+hLTFqiaN/v gGrOV4kFUijmP9POO1ULR8sTbTsZnA/pwJ2B4Ee1e8VRl0DKcdqzRRj6lPg1OOMq cEawaONFC4NejViFk6Wwxr8+xavnfQ7OQqPXZEaZE261Bbk3ChkyN4kh4trrLqXY G5BfqR1TpRjTFLF+24N5rcX1IfGtVOb/ZdWuLKqkq4cNurnMU0XwEmbrAznQlTDw E25+3YW2GDcobaTRr52jwVbZxlh4lnOgrvWkMYojSbyH4ssREhxqFQRHGBMax2EH tjBOB/8rbEEn1Qyq5zkr7rWG3vbGRktZYfDnhLOdAd+U+wSqjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX+Q7AcJmZpeEFJyrkxZxVdv4cpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDBlZDkxNzEtMzM4NC0z YzM2LTk4NGUtYzJiM2M3MmFlMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKIvYkly23C2yNCn9Wgo71VsVrsyDSs9v7B4SP6loTaOvGVgP3pVlqU +WTWAYQX6qdp7Se62TnoydwzDyY9gv7/woYAwFjoMZ7YPiA1eVsJ2KAt83kWvt2h C7N+W8GAKgm24aJA9aWdy68OXp2kzvcz3bc1nKqeo2yXxbItomZskl0f77/zvqmt a90pYhXKBF5UJfenLgs/XP4BdyngEKcwM68oAi4FXn2zpLLqIlJ3iX9m+U/0y78K OtWQQxpl7q/NbQhTXKPTbAizwMDmokhMTVWCFPh6av1SCdIS1Owypc6ZYvLbBSLX DwEqiVpAI16hv7CMdMXDA780iPvSjCw= -----END CERTIFICATE-----Generated at Sat Oct 11 11:07:42 2025 by rpki-client