$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7cf620d5-35d6-3957-aa53-deb0d0d556e8.roa File: 7cf620d5-35d6-3957-aa53-deb0d0d556e8.roa (raw, json) Hash identifier: MBz+TkWIHT0axYYmJd7gcflXOR/N8KfawfuV+RwrXj8= Subject key identifier: 4B:5D:7A:48:D9:AA:45:23:A8:57:E1:24:10:EA:1C:A7:B9:70:05:E8 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B79BCB09BECC507A68447F2C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7cf620d5-35d6-3957-aa53-deb0d0d556e8.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 401688 IP address blocks: 172.252.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b0:9b:ec:c5:07:a6:84:47:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=9b0ba321-c287-47db-bd72-74c149a4be1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:27:13:a3:73:e6:11:c7:ed:d2:25:cc:59:53: 92:c1:58:ed:7e:e3:2f:41:24:55:82:6b:35:c9:2e: 55:f4:ce:82:13:db:9d:98:b2:d8:3b:f8:c7:c4:00: 8e:25:b3:f2:ff:5a:97:5a:f0:1a:fa:0f:a7:9d:25: 5d:67:5d:c4:da:fb:7c:d9:29:e6:e4:9c:9d:16:b2: d3:78:cb:5d:3e:99:1d:43:24:ae:a9:72:ed:56:94: 30:62:db:7e:91:5f:41:84:44:d8:b8:59:5c:3c:94: a4:a2:3a:db:b0:0c:88:1e:e6:ac:50:8d:b3:43:a5: d2:06:a3:1b:d4:0d:1f:e0:60:21:df:94:17:c5:eb: 57:8c:c4:87:7a:7c:89:8a:13:1a:7d:d0:d4:73:d3: 9c:08:ea:4d:62:e8:30:fa:c1:9d:ae:a4:fd:de:ea: 60:16:dd:b6:db:d3:7e:8b:3e:9e:a5:da:ec:a4:00: cf:06:ac:e0:96:a3:85:25:4e:72:cd:54:e7:11:75: 20:5c:ad:10:1b:4f:0e:a7:d7:ef:2c:a0:47:8d:cb: 22:04:d8:35:13:18:60:45:c2:4f:0a:6b:bb:7d:fe: 09:64:aa:3a:df:19:e6:fa:23:f1:6a:55:93:ef:df: 00:07:20:9a:1f:46:01:2a:5e:db:09:8f:27:c3:f3: db:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5D:7A:48:D9:AA:45:23:A8:57:E1:24:10:EA:1C:A7:B9:70:05:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7cf620d5-35d6-3957-aa53-deb0d0d556e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:22:7f:83:86:c0:07:35:8c:7b:d8:c6:33:bf:c3:96:c0:3e: f2:ca:87:78:ca:37:73:55:e0:9d:3a:00:d6:f5:c6:0b:40:38: e2:34:dd:f0:c6:54:38:69:95:bb:c8:08:2c:b8:2f:35:7e:b3: 74:15:ce:11:20:62:89:19:9a:55:03:96:43:36:5a:7e:0f:15: b5:1b:4b:78:a2:f4:e9:0c:0b:72:f3:5a:94:4e:13:b7:96:82: a9:c1:ad:be:a0:e3:06:26:f4:b7:14:59:7b:cf:44:98:fe:7a: 30:6d:59:7c:02:27:b3:74:f5:4e:c5:15:36:82:0d:79:b7:80: 97:26:be:84:34:5c:c6:2c:85:fb:4c:99:33:c3:78:93:33:6c: 4c:d5:b9:c8:6a:2b:26:eb:74:20:d3:1b:36:9c:e7:7b:59:d8: b0:f7:bf:5d:ed:40:03:3f:b0:fc:f8:21:b2:6f:e6:4e:75:5d: 12:76:d4:b8:4a:8f:46:32:05:20:b2:73:6e:a0:b4:95:ca:2e: e2:ac:a7:47:bd:02:fb:84:73:de:5c:3a:a1:cb:6e:c9:4c:e0: 09:5c:6c:9b:e4:99:60:84:ed:e3:60:59:44:ad:b5:62:6c:b0: ea:b7:8d:73:a2:4c:14:8b:08:50:ad:e8:cf:c8:00:e9:93:fd: be:ab:ad:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLCb7MUHpoRH8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OWIwYmEzMjEtYzI4Ny00N2RiLWJkNzItNzRjMTQ5YTRiZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkScTo3PmEcft0iXMWVOSwVjtfuMvQSRVgms1 yS5V9M6CE9udmLLYO/jHxACOJbPy/1qXWvAa+g+nnSVdZ13E2vt82Snm5JydFrLT eMtdPpkdQySuqXLtVpQwYtt+kV9BhETYuFlcPJSkojrbsAyIHuasUI2zQ6XSBqMb 1A0f4GAh35QXxetXjMSHenyJihMafdDUc9OcCOpNYugw+sGdrqT93upgFt2229N+ iz6epdrspADPBqzglqOFJU5yzVTnEXUgXK0QG08Op9fvLKBHjcsiBNg1ExhgRcJP Cmu7ff4JZKo63xnm+iPxalWT798AByCaH0YBKl7bCY8nw/PbEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtdekjZqkUjqFfhJBDqHKe5cAXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvN2NmNjIwZDUtMzVkNi0z OTU3LWFhNTMtZGViMGQwZDU1NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPw+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIif4OGwAc1jHvYxjO/w5bAPvLKh3jKN3NV4J06ANb1xgtAOOI03fDG VDhplbvICCy4LzV+s3QVzhEgYokZmlUDlkM2Wn4PFbUbS3ii9OkMC3LzWpROE7eW gqnBrb6g4wYm9LcUWXvPRJj+ejBtWXwCJ7N09U7FFTaCDXm3gJcmvoQ0XMYshftM mTPDeJMzbEzVuchqKybrdCDTGzac53tZ2LD3v13tQAM/sPz4IbJv5k51XRJ21LhK j0YyBSCyc26gtJXKLuKsp0e9AvuEc95cOqHLbslM4AlcbJvkmWCE7eNgWUSttWJs sOq3jXOiTBSLCFCt6M/IAOmT/b6rrcA= -----END CERTIFICATE-----Generated at Sat Oct 11 11:13:34 2025 by rpki-client