$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85c5d60f-cb74-34b6-8c98-38e7f45526d9.roa File: 85c5d60f-cb74-34b6-8c98-38e7f45526d9.roa (raw, json) Hash identifier: CHV2IfEIVMtwtkHfgJtgmz+vjElOKrRwGhrncQ3+jqw= Subject key identifier: 52:5F:AF:03:3A:AC:DD:9C:75:9C:BB:44:30:19:9B:30:95:05:4A:B8 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B1AD1B24EB8B2D4AB56CBCDE0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85c5d60f-cb74-34b6-8c98-38e7f45526d9.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 35554 IP address blocks: 142.252.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b2:4e:b8:b2:d4:ab:56:cb:cd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=30194910-aa53-4006-9770-bef6664d9263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:55:45:e1:f1:ae:9a:f8:3f:ce:d0:46:15: 38:7f:9f:fe:c8:e9:dd:9a:33:95:ff:88:e5:1b:34: 3a:05:04:ea:4e:42:52:d4:6e:48:e3:1f:b3:88:3b: 44:2b:7f:c5:e6:8a:3d:9c:42:f7:26:44:8b:e0:ae: 0c:ba:3d:a7:b8:30:55:c8:16:22:c7:f3:7b:b0:cd: c9:17:e3:c3:49:9b:0e:15:51:2f:da:dd:c9:27:4e: c9:d3:8b:2a:28:d9:ed:e3:92:2f:ff:90:1f:9a:2f: 0f:92:1e:e9:32:5a:7f:28:1c:0d:fa:b0:c6:dd:93: a3:9c:ca:9e:20:f1:66:9c:4d:ad:39:70:34:c4:70: 78:19:ea:1d:a4:bd:6e:96:2c:d3:1a:c9:7e:b5:1a: 50:87:77:52:43:78:fb:e5:f2:5b:f1:ab:8e:09:bb: ad:e1:17:af:b3:46:ae:7f:d0:75:f3:f0:5c:09:5f: 0e:88:0a:d5:84:25:e4:3e:09:42:b2:14:39:d3:15: c2:13:83:36:2d:b5:85:14:f5:5a:d0:da:aa:a7:3d: 83:f6:ba:fc:e4:ab:0c:f5:f7:e9:00:f2:27:26:3f: 00:e0:1f:95:e6:2e:b5:8c:a4:55:6d:b6:81:e4:40: fb:21:d5:ec:a7:57:86:d5:8e:c6:55:11:a8:e8:41: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5F:AF:03:3A:AC:DD:9C:75:9C:BB:44:30:19:9B:30:95:05:4A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85c5d60f-cb74-34b6-8c98-38e7f45526d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3b:c0:43:44:22:b0:07:98:95:87:ef:7c:5c:6f:34:06:7e: 4b:d0:1a:d1:b3:02:00:1f:c2:c4:f7:4b:3f:84:d7:1a:30:27: 06:f9:04:f5:e9:e3:4c:3e:8b:61:17:5f:ad:4b:34:39:dd:95: 14:10:14:dd:50:47:1d:59:71:0d:0c:e6:a1:ef:31:12:0f:1c: d0:78:e2:3d:38:d0:1e:76:c0:ec:32:25:83:c5:e8:c5:34:d9: ea:8e:ad:73:82:6a:c9:5b:50:1e:0c:2c:5a:35:63:e5:9f:78: a1:65:5a:f8:8e:53:07:be:a5:f3:a8:d4:fa:55:e6:03:81:b5: 00:92:e1:b2:e7:73:21:30:a0:05:57:94:1d:da:44:a2:f8:96: ad:42:35:61:69:af:08:40:55:f1:ab:51:c5:7b:95:68:4e:1c: 09:f7:e9:e6:32:f4:a4:87:74:ed:81:c7:85:1f:62:ff:f0:00: cf:1b:c5:f2:90:e4:ef:41:cb:e8:41:0b:99:61:b1:d2:55:41: 66:0b:5f:7e:5f:df:ec:d7:76:c5:bd:6f:3d:22:59:32:7f:68: 0c:30:eb:0c:5d:2c:20:68:80:bc:ae:2b:88:57:58:e2:30:87: 75:a5:07:95:70:d0:5c:89:3e:bc:26:34:dc:0a:76:cb:67:ba: d3:21:ad:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0bJOuLLUq1bLzeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MzAxOTQ5MTAtYWE1My00MDA2LTk3NzAtYmVmNjY2NGQ5MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0hVReHxrpr4P87QRhU4f5/+yOndmjOV/4jl GzQ6BQTqTkJS1G5I4x+ziDtEK3/F5oo9nEL3JkSL4K4Muj2nuDBVyBYix/N7sM3J F+PDSZsOFVEv2t3JJ07J04sqKNnt45Iv/5Afmi8Pkh7pMlp/KBwN+rDG3ZOjnMqe IPFmnE2tOXA0xHB4GeodpL1ulizTGsl+tRpQh3dSQ3j75fJb8auOCbut4Revs0au f9B18/BcCV8OiArVhCXkPglCshQ50xXCE4M2LbWFFPVa0Nqqpz2D9rr85KsM9ffp APInJj8A4B+V5i61jKRVbbaB5ED7IdXsp1eG1Y7GVRGo6EHuawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJfrwM6rN2cdZy7RDAZmzCVBUq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODVjNWQ2MGYtY2I3NC0z NGI2LThjOTgtMzhlN2Y0NTUyNmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU7wENEIrAHmJWH73xcbzQGfkvQGtGzAgAfwsT3Sz+E1xowJwb5BPXp 40w+i2EXX61LNDndlRQQFN1QRx1ZcQ0M5qHvMRIPHNB44j040B52wOwyJYPF6MU0 2eqOrXOCaslbUB4MLFo1Y+WfeKFlWviOUwe+pfOo1PpV5gOBtQCS4bLncyEwoAVX lB3aRKL4lq1CNWFprwhAVfGrUcV7lWhOHAn36eYy9KSHdO2Bx4UfYv/wAM8bxfKQ 5O9By+hBC5lhsdJVQWYLX35f3+zXdsW9bz0iWTJ/aAww6wxdLCBogLyuK4hXWOIw h3WlB5Vw0FyJPrwmNNwKdstnutMhrUQ= -----END CERTIFICATE-----Generated at Sat Oct 11 11:09:00 2025 by rpki-client