$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa File: 955f3a04-020b-3de3-a057-2ce2758a7a1e.roa (raw, json) Hash identifier: FXU9QmDdcyn0umia60D3Ak/8WdhnjzD2FcVPzcBCTL4= Subject key identifier: F3:82:3A:86:DA:FE:8A:84:55:09:01:04:66:FE:CE:FC:D2:5B:0B:85 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B41E72344D347C32A7AF2A6C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 18779 IP address blocks: 142.252.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:23:44:d3:47:c3:2a:7a:f2:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=e4f6fa4c-7f9f-405f-8997-701851a4956c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:3e:41:3c:4b:5c:5c:d6:96:69:15:2c:6c: 80:f2:dc:da:d6:59:ac:7d:33:42:1f:8c:0a:f5:d8: 2a:90:12:00:ec:3c:0c:6d:00:a1:e2:9c:8a:24:b5: ef:d2:5c:f6:52:40:28:19:3f:db:e8:db:0e:74:ca: 51:0a:6e:91:7a:6d:f1:f6:cd:64:de:19:a7:7c:0e: 0c:25:e8:ef:02:75:92:75:23:c4:7c:50:70:ff:80: ea:b6:d5:6b:26:ab:8c:ed:f4:b2:4c:67:58:c9:2b: 90:eb:5e:c8:06:77:9c:49:a9:dc:f8:30:bd:3c:49: 2a:ef:1c:0f:bf:88:82:c0:3e:89:db:55:91:3a:88: 89:6a:e4:b5:b5:54:77:5c:5f:b0:ef:c1:57:1c:e9: 5a:2b:d4:e1:5f:69:8f:bf:fc:c6:5f:64:0e:1e:39: 0a:ce:8b:96:23:9a:c3:19:9c:fe:8b:84:68:cf:f2: f4:49:22:d8:ee:0d:da:56:c3:52:a5:a3:ee:45:1e: 56:d9:b6:01:9b:b9:ac:d1:45:01:df:ba:95:e1:bf: 14:df:58:57:fb:20:37:08:17:f4:41:b9:c8:50:16: 6a:a6:bc:1b:1a:55:29:5f:d0:01:bb:6f:5e:9e:b6: d0:b7:75:ae:80:6a:25:a8:4c:8c:74:e0:08:17:a2: 2b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:82:3A:86:DA:FE:8A:84:55:09:01:04:66:FE:CE:FC:D2:5B:0B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0c:82:77:6e:a2:c6:c1:fa:a3:cc:1c:e6:d8:3c:e5:42:91: 7d:41:15:97:b6:b2:26:d0:46:84:0a:8b:51:e9:2e:35:e3:8b: 8e:02:22:a0:23:7b:80:42:1f:39:22:ca:0f:18:0b:aa:f0:c2: 4f:7d:fe:74:90:a9:77:11:d0:ae:99:b2:62:7f:e7:3e:ba:ce: b9:4b:ee:04:b8:d3:ea:b4:88:5a:0c:7a:f6:50:62:62:c6:4c: 1b:9b:85:e9:0a:cd:c0:aa:2d:43:8f:44:c8:01:3f:8c:73:32: 48:47:c1:8c:a3:4f:28:e6:26:ac:15:de:20:f2:09:57:31:14: 8b:4f:e7:a0:bc:a1:c2:34:df:48:57:31:b1:97:9b:9c:0d:94: cc:ea:9f:c7:21:a7:62:8d:20:8a:ec:63:b7:c0:c6:1c:dc:2a: fb:a5:f9:b6:1e:7f:4c:f8:00:09:5b:04:f7:13:87:5b:49:62: 5c:92:28:81:55:54:22:be:d9:98:9d:f5:d9:c9:81:c6:6f:a8: 76:ba:c7:bb:c4:e0:54:7c:09:04:d5:f3:53:6b:61:16:c7:9f: fc:3c:4f:fa:43:c3:f6:b2:97:16:b6:17:75:0d:f2:8d:a9:5c: 82:b7:88:7c:55:c2:5a:2f:f1:cb:81:13:ac:e8:ce:5c:b9:b7: 54:05:dc:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yNE00fDKnrypsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTRmNmZhNGMtN2Y5Zi00MDVmLTg5OTctNzAxODUxYTQ5NTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC0+QTxLXFzWlmkVLGyA8tza1lmsfTNCH4wK 9dgqkBIA7DwMbQCh4pyKJLXv0lz2UkAoGT/b6NsOdMpRCm6Rem3x9s1k3hmnfA4M JejvAnWSdSPEfFBw/4DqttVrJquM7fSyTGdYySuQ617IBnecSanc+DC9PEkq7xwP v4iCwD6J21WROoiJauS1tVR3XF+w78FXHOlaK9ThX2mPv/zGX2QOHjkKzouWI5rD GZz+i4Roz/L0SSLY7g3aVsNSpaPuRR5W2bYBm7ms0UUB37qV4b8U31hX+yA3CBf0 QbnIUBZqprwbGlUpX9ABu29enrbQt3WugGolqEyMdOAIF6IrkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOCOoba/oqEVQkBBGb+zvzSWwuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTU1ZjNhMDQtMDIwYi0z ZGUzLWEwNTctMmNlMjc1OGE3YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4MgnduosbB+qPMHObYPOVCkX1BFZe2sibQRoQKi1HpLjXji44CIqAj e4BCHzkiyg8YC6rwwk99/nSQqXcR0K6ZsmJ/5z66zrlL7gS40+q0iFoMevZQYmLG TBubhekKzcCqLUOPRMgBP4xzMkhHwYyjTyjmJqwV3iDyCVcxFItP56C8ocI030hX MbGXm5wNlMzqn8chp2KNIIrsY7fAxhzcKvul+bYef0z4AAlbBPcTh1tJYlySKIFV VCK+2Zid9dnJgcZvqHa6x7vE4FR8CQTV81NrYRbHn/w8T/pDw/aylxa2F3UN8o2p XIK3iHxVwlov8cuBE6zozly5t1QF3D0= -----END CERTIFICATE-----Generated at Sat Oct 11 13:04:53 2025 by rpki-client