$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9dfd0cab-97c9-3213-aedd-3a66a611b8ca.roa File: 9dfd0cab-97c9-3213-aedd-3a66a611b8ca.roa (raw, json) Hash identifier: DfrwVJ3iwgR7aGHyBEaNbeJ5pMoHsvo0OLizLG79Jx8= Subject key identifier: 4A:1E:EF:4B:CD:AE:92:E5:E7:65:9C:20:41:FE:61:7D:73:90:7C:36 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B38E0839E5E32CC483F218060 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9dfd0cab-97c9-3213-aedd-3a66a611b8ca.roa Signing time: Wed 17 Sep 2025 07:25:20 +0000 ROA not before: Wed 17 Sep 2025 07:25:20 +0000 ROA not after: Tue 16 Dec 2025 08:25:20 +0000 asID: 23511 IP address blocks: 172.252.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:e0:83:9e:5e:32:cc:48:3f:21:80:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 17 07:25:20 2025 GMT Not After : Dec 16 08:25:20 2025 GMT Subject: CN=a4e3c33c-9da8-4d60-8cb9-8c769cb93d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1e:5b:74:2c:9d:a0:a0:39:b5:b3:ff:da:62: b1:a0:38:cc:34:7d:67:9d:a4:69:6a:da:de:2b:a0: 3b:46:45:0b:ce:ec:be:74:b9:38:04:34:41:f5:b3: 37:86:d6:70:9a:9e:23:a5:c5:d2:29:39:da:09:c3: e4:72:73:14:3d:a0:2d:c8:1c:a5:09:c1:25:6f:34: aa:fa:13:bd:02:0a:ba:c0:75:13:02:e9:17:f1:58: 73:38:8d:37:d4:92:56:c5:79:a4:7c:df:3f:48:30: 8d:cf:fa:f9:6d:04:3e:78:cb:dd:58:03:70:d2:90: f4:01:00:52:e7:25:49:25:51:1d:a4:f3:4d:74:fc: f6:f7:64:ac:09:0a:38:96:d7:c1:12:7e:4e:6e:74: 86:8d:32:06:c3:de:51:bc:e6:4b:8d:05:ab:68:00: 70:dc:b9:e5:40:62:09:db:f5:d9:ce:12:f4:f3:00: 07:5d:ab:a5:f8:15:ec:42:14:06:51:70:09:da:ca: 4d:67:69:e9:ba:1e:53:31:77:2a:31:b2:e1:9d:ca: 8c:b1:47:fd:67:f0:78:ef:7d:16:5b:16:1e:dc:9c: 0f:ca:82:4f:94:06:f2:a8:4e:25:46:f4:1e:d2:d6: 2f:46:1b:6d:77:5d:70:e8:d1:8d:98:40:f8:44:fb: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1E:EF:4B:CD:AE:92:E5:E7:65:9C:20:41:FE:61:7D:73:90:7C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9dfd0cab-97c9-3213-aedd-3a66a611b8ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d1:9a:98:1b:ec:15:ae:66:e4:25:ec:a9:3b:65:2b:c9:5d: 44:62:a5:3c:d0:71:25:da:b2:23:77:be:aa:ce:7c:0f:cd:a0: 07:ca:49:a3:e0:f9:8f:ef:33:97:00:97:04:1a:e4:d6:b1:3e: 2d:10:ff:88:2c:5b:90:ef:5b:75:02:b0:8a:fa:b2:2c:4b:3d: d7:2d:eb:bf:bd:f8:2d:46:87:56:f0:f5:c2:36:54:d7:ca:fb: 41:93:8a:56:d8:a3:f5:8e:9f:e2:e6:7b:1e:09:dc:5f:ff:e1: 8c:86:24:fc:21:0f:2b:89:8e:67:b9:8a:32:b6:b9:33:d2:bc: a3:de:ef:0d:49:50:55:fb:27:e5:1a:7b:bc:1f:0e:c6:0a:ae: 22:c5:81:23:90:3b:ae:96:1e:83:ed:2b:2c:95:c0:e2:74:8e: bf:a9:16:26:8c:74:df:12:ff:8c:de:8a:cd:82:82:00:12:46: 76:ed:c0:b3:92:58:8f:43:4c:06:2b:0d:73:2f:07:d9:4f:56: 56:88:ea:b3:fd:5b:cc:8f:02:0b:7f:2b:16:de:ef:68:67:9d: f7:a5:18:34:ea:54:6a:e7:05:a9:5c:9a:95:10:12:59:48:93: 51:b4:ca:77:1b:e9:cb:d7:7e:3c:65:42:ff:76:22:51:00:7f: 30:78:e7:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs44IOeXjLMSD8hgGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkxNzA3MjUyMFoXDTI1MTIxNjA4MjUyMFowLzEtMCsGA1UEAxMk YTRlM2MzM2MtOWRhOC00ZDYwLThjYjktOGM3NjljYjkzZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB5bdCydoKA5tbP/2mKxoDjMNH1nnaRpatre K6A7RkULzuy+dLk4BDRB9bM3htZwmp4jpcXSKTnaCcPkcnMUPaAtyBylCcElbzSq +hO9Agq6wHUTAukX8VhzOI031JJWxXmkfN8/SDCNz/r5bQQ+eMvdWANw0pD0AQBS 5yVJJVEdpPNNdPz292SsCQo4ltfBEn5ObnSGjTIGw95RvOZLjQWraABw3LnlQGIJ 2/XZzhL08wAHXaul+BXsQhQGUXAJ2spNZ2npuh5TMXcqMbLhncqMsUf9Z/B4730W WxYe3JwPyoJPlAbyqE4lRvQe0tYvRhttd11w6NGNmED4RPt83wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoe70vNrpLl52WcIEH+YX1zkHw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWRmZDBjYWItOTdjOS0z MjEzLWFlZGQtM2E2NmE2MTFiOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrPy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXRmpgb7BWuZuQl7Kk7ZSvJXURipTzQcSXasiN3vqrOfA/NoAfKSaPg +Y/vM5cAlwQa5NaxPi0Q/4gsW5DvW3UCsIr6sixLPdct67+9+C1Gh1bw9cI2VNfK +0GTilbYo/WOn+Lmex4J3F//4YyGJPwhDyuJjme5ijK2uTPSvKPe7w1JUFX7J+Ua e7wfDsYKriLFgSOQO66WHoPtKyyVwOJ0jr+pFiaMdN8S/4zeis2CggASRnbtwLOS WI9DTAYrDXMvB9lPVlaI6rP9W8yPAgt/Kxbe72hnnfelGDTqVGrnBalcmpUQEllI k1G0yncb6cvXfjxlQv92IlEAfzB45wo= -----END CERTIFICATE-----Generated at Sat Oct 11 11:08:01 2025 by rpki-client