$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4af6ddef-1fb3-3038-aa61-bde0410c0d10.roa File: 4af6ddef-1fb3-3038-aa61-bde0410c0d10.roa (raw, json) Hash identifier: Y+PZi6gG2P/XtZ12QcIoVPNBwygJlvvy7rzJQ40iGQA= Subject key identifier: E2:FB:AC:1D:12:4D:33:C2:06:BD:D6:C3:B7:EB:B0:14:D7:77:17:A9 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B5DD207354C913732F26A9080 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4af6ddef-1fb3-3038-aa61-bde0410c0d10.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 174 IP address blocks: 172.252.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:07:35:4c:91:37:32:f2:6a:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=3bf65f89-8b0a-4db0-ab4f-d87d79248094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:72:87:31:17:91:fd:aa:2f:c9:6e:a9:70: 10:85:5c:31:3c:53:21:f6:01:ed:35:83:84:5f:57: d5:61:0c:e4:08:10:03:2a:70:e0:a1:0f:02:52:9a: 26:12:94:0f:24:41:0d:d2:c6:0b:f4:9d:28:86:2a: 4b:f9:5d:70:1c:69:f1:18:07:ec:a1:6d:e0:2f:dd: 10:77:95:2f:af:27:97:4f:e9:4c:52:26:c3:d5:2f: 4e:8f:37:f2:87:01:d5:d0:09:f0:b5:38:db:fe:e6: 77:cc:aa:24:f9:7c:a6:bd:27:5e:52:26:1a:1c:9e: 61:b1:5a:f9:0c:38:b9:b5:cc:48:86:97:70:02:f3: ac:02:50:e5:54:41:4d:fb:4e:f1:6b:c0:0a:91:8f: f0:22:ec:bd:7c:63:65:8f:28:20:16:5b:51:cd:55: e7:72:a0:8d:b0:dd:e5:64:a0:46:4c:24:eb:1f:d2: 05:b4:4f:92:c5:18:ba:92:e2:a3:aa:35:7b:10:e3: 1e:0a:2b:0b:60:b4:ba:2f:2f:02:7a:46:46:27:c6: 8a:31:74:56:e2:00:1a:0a:63:17:f1:5b:60:81:dd: 78:c3:99:58:62:98:45:ce:33:3e:b9:b9:b3:75:85: a3:5b:ac:93:b1:e0:a0:0e:59:a2:36:0e:82:43:0a: 2b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FB:AC:1D:12:4D:33:C2:06:BD:D6:C3:B7:EB:B0:14:D7:77:17:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4af6ddef-1fb3-3038-aa61-bde0410c0d10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0b:32:ac:10:01:a4:53:12:a3:e8:83:b0:ff:81:9a:8d:b5: 54:54:49:21:a7:28:03:b6:fe:f2:a1:6a:f0:25:98:64:7a:b6: d1:69:9e:57:74:8f:f8:f8:ef:e5:43:8e:cf:63:ce:b9:d2:c9: 40:ab:fe:f8:00:e7:4d:57:4c:e1:65:9e:fb:22:f4:48:72:8f: 6f:1a:ff:d5:12:ae:7c:28:56:f2:41:b9:18:c7:86:5a:92:62: 3d:aa:37:14:06:46:20:17:c1:1b:88:01:11:ba:4c:df:98:2f: 10:43:07:e4:0b:32:52:ab:25:88:17:23:ec:2e:04:76:de:db: 2e:8e:9e:3a:c6:6f:a7:67:03:cb:18:75:fc:50:68:0e:44:f2: 8d:75:8b:19:72:9f:41:b3:74:d1:35:f8:55:15:c1:5a:0a:44: e1:8b:08:97:6e:f8:7d:c6:0b:ab:af:16:c6:e8:15:c6:bf:15: 05:a9:cf:10:43:41:41:71:4a:6c:e0:5e:9b:31:a9:0b:b5:a9: 5a:8c:57:b3:e2:95:45:5d:9b:92:ba:18:fe:fa:48:ec:5f:b5: 6c:6d:3a:63:76:1a:9b:a2:46:46:e5:5b:33:7e:9b:0c:fa:e9: 45:7a:92:28:49:38:20:16:c5:64:14:ab:88:3d:93:78:a0:05: 5b:cf:3a:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gc1TJE3MvJqkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk M2JmNjVmODktOGIwYS00ZGIwLWFiNGYtZDg3ZDc5MjQ4MDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWdyhzEXkf2qL8luqXAQhVwxPFMh9gHtNYOE X1fVYQzkCBADKnDgoQ8CUpomEpQPJEEN0sYL9J0ohipL+V1wHGnxGAfsoW3gL90Q d5UvryeXT+lMUibD1S9OjzfyhwHV0AnwtTjb/uZ3zKok+XymvSdeUiYaHJ5hsVr5 DDi5tcxIhpdwAvOsAlDlVEFN+07xa8AKkY/wIuy9fGNljyggFltRzVXncqCNsN3l ZKBGTCTrH9IFtE+SxRi6kuKjqjV7EOMeCisLYLS6Ly8CekZGJ8aKMXRW4gAaCmMX 8Vtggd14w5lYYphFzjM+ubmzdYWjW6yTseCgDlmiNg6CQworDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOL7rB0STTPCBr3Ww7frsBTXdxepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGFmNmRkZWYtMWZiMy0z MDM4LWFhNjEtYmRlMDQxMGMwZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMLMqwQAaRTEqPog7D/gZqNtVRUSSGnKAO2/vKhavAlmGR6ttFpnld0 j/j47+VDjs9jzrnSyUCr/vgA501XTOFlnvsi9Ehyj28a/9USrnwoVvJBuRjHhlqS Yj2qNxQGRiAXwRuIARG6TN+YLxBDB+QLMlKrJYgXI+wuBHbe2y6OnjrGb6dnA8sY dfxQaA5E8o11ixlyn0GzdNE1+FUVwVoKROGLCJdu+H3GC6uvFsboFca/FQWpzxBD QUFxSmzgXpsxqQu1qVqMV7PilUVdm5K6GP76SOxftWxtOmN2GpuiRkblWzN+mwz6 6UV6kihJOCAWxWQUq4g9k3igBVvPOhY= -----END CERTIFICATE-----Generated at Sat Oct 11 11:08:41 2025 by rpki-client