$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43586f62-4558-3b19-9ec4-e5132af480cc.roa File: 43586f62-4558-3b19-9ec4-e5132af480cc.roa (raw, json) Hash identifier: MfIm6Oj4gF5LaZWCupfNTWRcMdAQTIAJ4VhfMLdadAE= Subject key identifier: 47:B9:B3:7C:09:65:2C:58:53:5D:F7:20:6F:B4:99:4B:A2:A2:EB:36 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A8946DCCCB254820EE3A91C40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43586f62-4558-3b19-9ec4-e5132af480cc.roa Signing time: Wed 16 Jul 2025 09:49:17 +0000 ROA not before: Wed 16 Jul 2025 09:49:17 +0000 ROA not after: Tue 14 Oct 2025 09:49:17 +0000 asID: 18779 IP address blocks: 172.252.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:46:dc:cc:b2:54:82:0e:e3:a9:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 16 09:49:17 2025 GMT Not After : Oct 14 09:49:17 2025 GMT Subject: CN=4715cace-ffd3-4f0e-b74e-3b321eed124b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:11:26:d0:12:fb:01:55:cf:c9:80:62:4a:a2: 3b:d5:de:b6:f4:a9:8c:9f:4d:93:47:d2:cc:d3:18: 20:2b:f5:7f:cf:6b:ed:9f:75:4e:42:85:51:d8:57: 4a:74:56:f5:5d:ef:b1:4b:a2:ab:70:b2:97:0b:1d: 59:f6:3f:04:8c:e3:44:2b:28:71:5a:d1:3e:05:cd: 30:b3:57:d6:cd:d3:af:ff:12:0e:07:1f:83:99:81: a0:35:e5:aa:40:5b:7c:5e:70:79:5c:a5:52:0e:ef: ba:87:49:aa:a0:d6:49:26:46:38:af:f4:5f:10:01: 26:4d:78:d0:58:6a:c7:9f:55:62:7b:60:2c:9b:b6: b1:de:4a:69:2b:ff:a6:05:e2:5a:f2:2b:d7:4e:b2: ad:d8:f8:0c:ce:2d:0c:9f:d3:5d:90:3d:e8:95:7b: de:ba:05:36:46:71:82:53:5f:da:0a:14:64:c7:ea: e6:0b:45:cd:59:ba:a6:ac:66:2a:35:b9:47:dc:8b: 46:3d:55:87:eb:a7:15:55:3e:90:1b:12:0c:35:45: e8:fa:2c:1c:2b:8b:a9:2f:b1:e9:77:d3:35:97:a2: 32:42:ed:de:8f:2e:57:e4:82:d0:7f:55:f2:66:3b: 2a:94:5b:a1:04:7d:f7:e6:dd:87:ff:d1:c6:09:18: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B9:B3:7C:09:65:2C:58:53:5D:F7:20:6F:B4:99:4B:A2:A2:EB:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/43586f62-4558-3b19-9ec4-e5132af480cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:75:d3:a0:e1:b4:b9:7c:78:89:aa:e3:5e:24:27:c9:28:e0: 46:0c:be:2a:c1:73:3b:8e:e1:00:dc:15:dd:12:db:a7:b7:20: 11:5a:4f:ac:4b:f5:18:93:8d:16:f8:95:a7:2f:67:3a:c2:5b: b6:29:2f:1b:06:14:47:9c:d4:16:eb:ec:8e:ca:42:ad:78:6b: 9d:f6:2a:c2:da:11:10:b0:b6:02:90:b3:78:7f:3e:af:a9:21: 6e:43:c8:a0:82:5e:9c:1b:52:fa:67:d9:b5:4f:f0:fc:37:f5: bb:11:c9:ae:07:6c:6a:31:6e:96:58:4a:0f:9a:bc:4c:ec:45: 3c:d4:76:6c:8a:ad:ca:5e:6a:35:30:7d:88:55:87:f1:cc:48: 1b:7a:37:ba:e6:fa:fa:1e:0c:fd:e1:1c:81:9d:5f:60:3f:26: 9f:eb:98:b3:7f:36:b4:c5:36:db:24:7a:cd:46:76:47:83:b2: 1d:a3:31:98:0f:6d:46:2e:d4:91:11:75:c1:f9:1e:cf:fd:50: 71:4a:ae:a2:a2:0b:0e:b6:e2:c0:f4:24:c6:bd:33:73:e9:7f: 88:0f:2e:3e:95:42:e4:53:cd:a5:07:6e:b8:75:1f:dd:0a:68: db:6a:c3:97:22:88:dd:4c:b5:45:ff:a7:fa:d7:c7:4a:72:0f: 34:5e:d5:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJRtzMslSCDuOpHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxNjA5NDkxN1oXDTI1MTAxNDA5NDkxN1owLzEtMCsGA1UEAxMk NDcxNWNhY2UtZmZkMy00ZjBlLWI3NGUtM2IzMjFlZWQxMjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhEm0BL7AVXPyYBiSqI71d629KmMn02TR9LM 0xggK/V/z2vtn3VOQoVR2FdKdFb1Xe+xS6KrcLKXCx1Z9j8EjONEKyhxWtE+Bc0w s1fWzdOv/xIOBx+DmYGgNeWqQFt8XnB5XKVSDu+6h0mqoNZJJkY4r/RfEAEmTXjQ WGrHn1Vie2Asm7ax3kppK/+mBeJa8ivXTrKt2PgMzi0Mn9NdkD3olXveugU2RnGC U1/aChRkx+rmC0XNWbqmrGYqNblH3ItGPVWH66cVVT6QGxIMNUXo+iwcK4upL7Hp d9M1l6IyQu3ejy5X5ILQf1XyZjsqlFuhBH335t2H/9HGCRjEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe5s3wJZSxYU133IG+0mUuious2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDM1ODZmNjItNDU1OC0z YjE5LTllYzQtZTUxMzJhZjQ4MGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIN106DhtLl8eImq414kJ8ko4EYMvirBczuO4QDcFd0S26e3IBFaT6xL 9RiTjRb4lacvZzrCW7YpLxsGFEec1Bbr7I7KQq14a532KsLaERCwtgKQs3h/Pq+p IW5DyKCCXpwbUvpn2bVP8Pw39bsRya4HbGoxbpZYSg+avEzsRTzUdmyKrcpeajUw fYhVh/HMSBt6N7rm+voeDP3hHIGdX2A/Jp/rmLN/NrTFNtskes1GdkeDsh2jMZgP bUYu1JERdcH5Hs/9UHFKrqKiCw624sD0JMa9M3Ppf4gPLj6VQuRTzaUHbrh1H90K aNtqw5ciiN1MtUX/p/rXx0pyDzRe1Zs= -----END CERTIFICATE-----Generated at Mon Jul 21 12:28:00 2025 by rpki-client