$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a5c432a-e5f2-3d56-9e23-bcee3ef08379.roa File: 4a5c432a-e5f2-3d56-9e23-bcee3ef08379.roa (raw, json) Hash identifier: WjitAvnLcshACCCHtb0WeT79RkouT/K+U9zbU24da4s= Subject key identifier: 0A:F8:87:9A:98:A2:25:F2:5D:BF:3F:5C:AD:95:14:FF:20:E3:63:C5 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4E7706AF3AE6994067B900C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a5c432a-e5f2-3d56-9e23-bcee3ef08379.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 62610 IP address blocks: 172.252.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:06:af:3a:e6:99:40:67:b9:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=494e8f0a-ecb9-4cb5-95f8-9013dec522d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:11:5d:4a:51:f5:1f:e4:94:62:7e:a3:1b:e0: 4a:88:b1:b8:9e:3c:bf:f0:53:64:21:33:0b:d4:92: b2:fd:a5:96:d4:19:4e:fa:29:c3:60:7d:23:68:2d: 25:75:43:d8:73:62:4a:de:ec:79:15:a9:26:d3:21: fb:90:cc:1d:03:52:83:ce:81:6e:1b:f8:bb:5e:f9: df:73:01:da:03:7a:62:6f:9c:b7:2f:c4:df:06:64: 83:8e:c2:d3:53:02:ab:b1:3d:00:c4:6b:3d:6b:4d: 27:b5:3f:94:35:38:3f:63:99:de:3a:80:94:0d:93: 30:c9:02:38:b1:fc:5d:bb:30:52:c6:8e:7b:78:f1: be:ab:cb:4b:5f:4c:30:ad:8e:ba:95:9e:3a:7a:4a: 23:cd:ab:ec:10:74:40:a3:b7:a5:11:03:90:15:c5: 6b:ec:c3:db:ea:4d:53:28:a8:af:bf:c2:41:c6:a3: 91:09:66:32:f2:b4:95:86:be:57:07:b2:cc:92:58: 78:b3:e3:a3:09:54:61:79:45:5c:a0:8a:13:8c:ee: e8:71:b4:8a:f5:74:98:c5:82:f3:a5:fb:14:e6:3f: e9:85:7a:95:3e:2d:18:a5:a8:12:2f:a8:c1:86:67: 8b:e7:ca:c1:e8:2e:da:99:f2:d8:17:33:91:3d:5a: f9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F8:87:9A:98:A2:25:F2:5D:BF:3F:5C:AD:95:14:FF:20:E3:63:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a5c432a-e5f2-3d56-9e23-bcee3ef08379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:86:82:f4:d5:17:0c:e7:e9:19:1b:71:4d:34:76:b6:f6:73: 68:7e:d4:14:2a:03:9b:d0:89:a9:31:17:5e:0e:30:cd:7a:a4: fe:52:6c:1a:52:db:3f:31:50:61:20:96:24:b5:5a:c8:22:7b: d0:88:32:ed:3c:6a:c2:60:8d:5f:a7:d7:3a:47:c8:3a:a9:b0: e8:54:99:f7:57:1f:a4:09:a3:d5:b5:76:02:d1:a9:d4:08:07: 4c:6d:41:26:2d:dd:f0:02:fd:25:bd:89:29:30:9e:4a:fe:2f: 4c:92:c0:c4:87:61:01:62:6e:22:32:67:47:4b:4e:f0:e6:ad: 51:0d:01:74:e8:f6:8e:cb:6d:56:44:ba:cc:5f:89:0a:5f:72: 1c:01:46:30:1a:f0:30:49:b4:b5:dc:df:f1:8b:94:ec:bf:2f: de:98:89:e4:7b:8d:9b:03:4a:2c:01:22:ee:35:1a:76:9d:58: 48:c5:b3:79:49:72:7a:3f:2f:d7:09:81:04:9d:88:fc:04:d7: f0:31:f6:07:1a:4e:78:41:5d:cf:c1:e4:e0:56:8e:90:40:fb: 1a:a4:c6:9e:cf:bd:16:b8:46:52:99:25:21:13:14:8a:f1:49: e2:d0:e8:d5:4e:53:c7:af:ed:4f:14:54:d9:11:8b:11:28:71: 4c:de:3c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdwavOuaZQGe5AMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NDk0ZThmMGEtZWNiOS00Y2I1LTk1ZjgtOTAxM2RlYzUyMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRFdSlH1H+SUYn6jG+BKiLG4njy/8FNkITML 1JKy/aWW1BlO+inDYH0jaC0ldUPYc2JK3ux5Fakm0yH7kMwdA1KDzoFuG/i7Xvnf cwHaA3pib5y3L8TfBmSDjsLTUwKrsT0AxGs9a00ntT+UNTg/Y5neOoCUDZMwyQI4 sfxduzBSxo57ePG+q8tLX0wwrY66lZ46ekojzavsEHRAo7elEQOQFcVr7MPb6k1T KKivv8JBxqORCWYy8rSVhr5XB7LMklh4s+OjCVRheUVcoIoTjO7ocbSK9XSYxYLz pfsU5j/phXqVPi0YpagSL6jBhmeL58rB6C7amfLYFzORPVr5CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAr4h5qYoiXyXb8/XK2VFP8g42PFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGE1YzQzMmEtZTVmMi0z ZDU2LTllMjMtYmNlZTNlZjA4Mzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaGgvTVFwzn6RkbcU00drb2c2h+1BQqA5vQiakxF14OMM16pP5SbBpS 2z8xUGEgliS1Wsgie9CIMu08asJgjV+n1zpHyDqpsOhUmfdXH6QJo9W1dgLRqdQI B0xtQSYt3fAC/SW9iSkwnkr+L0ySwMSHYQFibiIyZ0dLTvDmrVENAXTo9o7LbVZE usxfiQpfchwBRjAa8DBJtLXc3/GLlOy/L96YieR7jZsDSiwBIu41GnadWEjFs3lJ cno/L9cJgQSdiPwE1/Ax9gcaTnhBXc/B5OBWjpBA+xqkxp7PvRa4RlKZJSETFIrx SeLQ6NVOU8ev7U8UVNkRixEocUzePPQ= -----END CERTIFICATE-----Generated at Sat Oct 11 11:13:49 2025 by rpki-client