$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/595d24ed-46f3-3e2b-93db-a95fb2fe183b.roa File: 595d24ed-46f3-3e2b-93db-a95fb2fe183b.roa (raw, json) Hash identifier: b33xIxHmvwfKzgCurM1Hd4LQlvYUA1NHxKcBoTAELtc= Subject key identifier: C2:11:FD:16:41:30:CA:1B:5F:1D:B8:FE:91:9B:41:25:6F:64:2B:31 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B758CA692D34124F09170E280 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/595d24ed-46f3-3e2b-93db-a95fb2fe183b.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 397293 IP address blocks: 172.252.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:a6:92:d3:41:24:f0:91:70:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=0b7bacbe-eac8-4f9e-bf77-ce09508e373d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b9:3d:16:f4:98:a3:25:74:fe:74:b6:f0:aa: a0:44:7b:cc:24:6b:16:e9:56:32:4b:82:71:14:04: 10:6a:d8:2e:fb:58:63:8f:3f:5d:20:94:fc:bf:5b: 67:97:ab:37:16:9a:79:e7:02:44:b6:14:0f:6e:97: e4:c5:14:8c:5d:64:dd:b8:09:e1:13:c3:42:46:1d: d3:ee:13:cb:69:ae:e7:7e:94:87:92:e0:0b:17:fe: db:2f:7d:e1:69:16:dd:bf:59:5b:46:0a:fa:95:63: ab:2b:b1:66:fa:01:9c:e5:ac:ae:73:16:1c:1c:bd: 04:bc:d5:8a:61:78:43:b5:26:62:4c:66:0c:1d:be: 31:5e:7f:f0:5f:62:1c:af:1c:b1:c0:3c:98:0c:41: 81:cf:bc:a6:1b:f6:a0:3f:86:e8:98:f6:b8:b6:a6: 3a:e1:bb:17:9a:6c:da:c8:5e:18:ef:06:a2:a9:72: f5:f0:57:59:c5:7f:cf:d1:ba:04:0a:8e:d1:e3:a2: 97:bd:43:6e:b1:0c:5d:6e:53:7f:5f:61:06:21:e6: 50:29:81:5c:a6:12:c1:4d:eb:3c:ce:77:e1:87:08: 55:33:76:90:c1:02:58:7e:de:5a:0f:4f:46:25:be: 35:b2:df:e1:50:77:61:22:12:5f:d8:3b:14:1f:44: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:11:FD:16:41:30:CA:1B:5F:1D:B8:FE:91:9B:41:25:6F:64:2B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/595d24ed-46f3-3e2b-93db-a95fb2fe183b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:89:97:25:9d:44:f2:9b:0a:41:92:d9:f0:21:4d:28:2b:96: 06:0f:8a:d7:5d:37:89:c8:e4:bb:04:21:8d:fb:58:de:f5:07: 12:7d:5d:a5:b4:01:74:f5:f0:57:bd:fb:8e:e4:1a:ee:2f:3d: f7:97:0c:6f:58:39:57:5d:d6:ef:4d:55:3f:c1:fb:0c:16:90: 76:30:20:25:97:61:11:f0:ba:78:a4:98:a7:98:68:00:b0:e1: ab:b0:07:8d:c8:2f:a2:cc:5c:5c:52:92:a0:ac:68:92:6f:f2: 85:b3:c9:ce:a1:cc:e5:fd:30:47:69:7b:4d:81:83:be:ae:93: fb:66:2c:0a:07:e5:aa:64:1e:40:69:28:b5:b0:5a:d5:4b:77: d6:5f:7f:78:49:e5:9d:42:3a:bd:95:a8:f0:6f:63:b6:4b:08: 2c:0e:81:74:78:f4:b7:c6:28:48:3b:9c:11:40:b8:1a:27:3d: eb:92:d7:57:6c:16:a1:01:0a:24:76:63:96:09:05:ec:dc:0f: 9f:9a:00:cb:73:11:22:4c:ed:aa:e1:9b:74:52:e1:62:b3:19: 42:cd:25:e9:b4:88:b2:f3:10:55:55:e8:b5:9c:bc:0d:57:e8: 04:b0:30:6a:db:25:a9:42:78:8f:1d:c2:dc:87:ac:f4:43:eb: 80:01:5a:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jKaS00Ek8JFw4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk MGI3YmFjYmUtZWFjOC00ZjllLWJmNzctY2UwOTUwOGUzNzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbk9FvSYoyV0/nS28KqgRHvMJGsW6VYyS4Jx FAQQatgu+1hjjz9dIJT8v1tnl6s3Fpp55wJEthQPbpfkxRSMXWTduAnhE8NCRh3T 7hPLaa7nfpSHkuALF/7bL33haRbdv1lbRgr6lWOrK7Fm+gGc5ayucxYcHL0EvNWK YXhDtSZiTGYMHb4xXn/wX2IcrxyxwDyYDEGBz7ymG/agP4bomPa4tqY64bsXmmza yF4Y7waiqXL18FdZxX/P0boECo7R46KXvUNusQxdblN/X2EGIeZQKYFcphLBTes8 znfhhwhVM3aQwQJYft5aD09GJb41st/hUHdhIhJf2DsUH0TYvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIR/RZBMMobXx24/pGbQSVvZCsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTk1ZDI0ZWQtNDZmMy0z ZTJiLTkzZGItYTk1ZmIyZmUxODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOJlyWdRPKbCkGS2fAhTSgrlgYPitddN4nI5LsEIY37WN71BxJ9XaW0 AXT18Fe9+47kGu4vPfeXDG9YOVdd1u9NVT/B+wwWkHYwICWXYRHwunikmKeYaACw 4auwB43IL6LMXFxSkqCsaJJv8oWzyc6hzOX9MEdpe02Bg76uk/tmLAoH5apkHkBp KLWwWtVLd9Zff3hJ5Z1COr2VqPBvY7ZLCCwOgXR49LfGKEg7nBFAuBonPeuS11ds FqEBCiR2Y5YJBezcD5+aAMtzESJM7arhm3RS4WKzGULNJem0iLLzEFVV6LWcvA1X 6ASwMGrbJalCeI8dwtyHrPRD64ABWsU= -----END CERTIFICATE-----Generated at Sat Oct 11 11:17:46 2025 by rpki-client