$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/601eb9b7-a600-387a-b213-2e033e239937.roa File: 601eb9b7-a600-387a-b213-2e033e239937.roa (raw, json) Hash identifier: X+QYM/YBTN6v+Um0f/QnEpuzTbkOqvI4JTLGqLCu1P8= Subject key identifier: 99:04:61:CB:33:30:68:95:EE:97:06:52:04:56:61:31:9E:24:D9:54 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B715CED2788FA35C718DA7480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/601eb9b7-a600-387a-b213-2e033e239937.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 44893 IP address blocks: 142.252.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ed:27:88:fa:35:c7:18:da:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=7929dc14-bc60-4311-b76c-9644bbcb1a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:26:d7:0f:f0:c3:44:0a:44:88:3f:94:2b: 03:1c:9d:cf:79:8e:cb:34:1d:55:9a:d7:db:f4:db: 51:6b:81:33:f7:68:e6:45:1a:5c:34:74:3d:97:94: aa:24:97:00:33:f1:19:5a:43:ab:87:cf:51:73:32: e3:a0:c9:7d:d1:62:3e:c9:ca:be:15:49:9d:37:61: c2:87:ce:ae:54:6b:33:c4:a0:ea:85:90:64:41:28: 5d:a6:1f:b2:32:69:f7:ef:6e:6f:46:f2:41:bd:b1: 5b:a3:1c:f3:4f:a1:53:c0:97:3e:2c:f2:34:19:25: 84:cd:05:ea:70:ba:d0:3e:67:2f:07:ac:ca:b5:fa: 2a:a3:bb:d7:94:2b:5a:65:ca:6e:28:95:50:63:94: 11:54:d8:4e:73:3c:45:1a:02:a0:81:52:02:96:81: 7f:63:76:7e:b2:de:01:1f:0c:6a:f3:eb:d6:60:36: 44:32:71:65:e5:3a:3b:8c:b2:52:9d:f1:c4:9a:62: e6:c2:b3:de:07:35:20:9b:9e:56:d9:9a:c7:12:a5: 99:fa:d0:4a:71:f1:f4:1c:93:16:ec:1b:1d:dc:c3: bc:98:58:af:3b:c4:9b:f0:c0:bd:e1:d2:54:68:9f: 8e:b1:f9:a6:f2:cf:00:bb:c9:07:61:af:5d:54:68: 96:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:04:61:CB:33:30:68:95:EE:97:06:52:04:56:61:31:9E:24:D9:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/601eb9b7-a600-387a-b213-2e033e239937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:c7:eb:4b:ba:d7:b9:05:35:c6:a1:8a:65:3c:1d:1a:fd:9c: 5c:7a:0c:6c:44:b5:11:8c:e3:05:5b:1f:49:21:8c:76:e5:04: 0a:71:f4:f0:d1:8a:c9:a3:c9:cf:a9:df:87:9b:c8:ba:87:19: 6d:20:54:83:6a:10:9e:c7:1f:dc:4e:cf:55:85:3b:62:ec:a0: 5e:6f:f4:e7:82:6a:ce:c6:98:f1:2b:4f:6f:14:3e:d4:e3:96: 97:9e:03:12:92:72:b7:3b:55:94:a4:55:c0:01:94:6a:5b:1c: 79:1c:48:06:c1:51:7d:5c:69:c5:f4:a6:f6:9d:5c:aa:11:3e: c4:45:fa:fd:50:3f:0f:b8:9f:4f:de:d1:df:c7:4f:06:c8:6d: 57:2d:c2:6e:59:ad:6f:ca:60:27:34:06:c9:0c:4d:61:01:a2: d9:79:1a:39:c5:47:1d:0b:1d:0d:c2:33:a7:ce:ee:ec:d0:6d: ba:55:e6:8c:9e:fc:21:c8:ce:4e:9c:c5:c4:23:e7:6b:01:4b: c0:cb:97:f5:f3:11:41:7f:c4:72:96:24:6c:1f:6f:cd:b6:0e: 1a:6b:9a:02:c1:9d:17:6b:1e:aa:cb:92:17:de:5c:27:d6:96: e4:00:25:2e:a5:1b:91:64:6a:a8:c6:fc:4d:3d:a1:b3:2b:16: de:cf:14:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXO0niPo1xxjadIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzkyOWRjMTQtYmM2MC00MzExLWI3NmMtOTY0NGJiY2IxYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz10m1w/ww0QKRIg/lCsDHJ3PeY7LNB1Vmtfb 9NtRa4Ez92jmRRpcNHQ9l5SqJJcAM/EZWkOrh89RczLjoMl90WI+ycq+FUmdN2HC h86uVGszxKDqhZBkQShdph+yMmn3725vRvJBvbFboxzzT6FTwJc+LPI0GSWEzQXq cLrQPmcvB6zKtfoqo7vXlCtaZcpuKJVQY5QRVNhOczxFGgKggVICloF/Y3Z+st4B Hwxq8+vWYDZEMnFl5To7jLJSnfHEmmLmwrPeBzUgm55W2ZrHEqWZ+tBKcfH0HJMW 7Bsd3MO8mFivO8Sb8MC94dJUaJ+Osfmm8s8Au8kHYa9dVGiWWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkEYcszMGiV7pcGUgRWYTGeJNlUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjAxZWI5YjctYTYwMC0z ODdhLWIyMTMtMmUwMzNlMjM5OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXH60u617kFNcahimU8HRr9nFx6DGxEtRGM4wVbH0khjHblBApx9PDR ismjyc+p34ebyLqHGW0gVINqEJ7HH9xOz1WFO2LsoF5v9OeCas7GmPErT28UPtTj lpeeAxKScrc7VZSkVcABlGpbHHkcSAbBUX1cacX0pvadXKoRPsRF+v1QPw+4n0/e 0d/HTwbIbVctwm5ZrW/KYCc0BskMTWEBotl5GjnFRx0LHQ3CM6fO7uzQbbpV5oye /CHIzk6cxcQj52sBS8DLl/XzEUF/xHKWJGwfb822DhprmgLBnRdrHqrLkhfeXCfW luQAJS6lG5FkaqjG/E09obMrFt7PFCc= -----END CERTIFICATE-----Generated at Sat Oct 11 11:11:09 2025 by rpki-client