$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1d5d6b1-7219-3240-97f0-d032cee77919.roa File: a1d5d6b1-7219-3240-97f0-d032cee77919.roa (raw, json) Hash identifier: GGqPw8p4zbhBfSyitLvzd9tSlismUMcDFaNsRK4tMiA= Subject key identifier: 17:52:E8:E1:92:BA:48:14:43:1D:EB:B6:44:B8:A6:38:A4:37:37:62 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B6D2CAB20BF2659F55ADE6840 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1d5d6b1-7219-3240-97f0-d032cee77919.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 10557 IP address blocks: 142.252.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:ab:20:bf:26:59:f5:5a:de:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=b21c3b09-2ad0-40a9-9328-8f8a07077022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:a8:2b:a7:c8:e4:ca:04:5e:ba:85:2e:45: af:83:96:08:e6:1d:a3:3b:09:ad:33:ef:3e:bd:70: 3b:29:d4:15:bf:3f:c4:eb:96:c3:82:f2:18:c0:ad: 94:d8:d1:0e:8f:32:15:c5:ad:7b:a2:01:3b:19:9b: 33:65:4d:62:58:04:27:cb:03:40:74:6c:a7:ec:35: c7:c1:b0:25:ac:06:43:d6:55:1d:3c:4f:7f:03:af: 97:a8:92:c2:a7:a5:6d:c9:22:03:8d:72:0a:da:e7: a8:63:79:f2:69:9e:8b:b2:12:68:65:e7:6d:24:e5: 6d:03:3c:de:0e:ed:07:14:23:44:7d:46:ba:c5:17: 4d:7c:03:0f:57:05:c2:21:be:d6:dc:cd:97:60:06: 27:97:06:a5:78:e8:b7:6b:00:6b:4d:1b:e6:7e:e3: c4:f7:0f:bd:c0:5c:5c:4f:5b:64:47:c9:75:23:0d: e5:62:8d:ae:84:f4:54:88:b8:3e:95:d7:f8:e2:50: f5:72:7b:45:48:af:a0:cf:f9:e2:c7:16:91:cb:0b: fa:88:90:4e:88:3d:59:58:9a:01:0a:bf:40:3e:c0: 78:8d:1d:54:e4:0f:ad:43:dc:91:b0:e1:70:b1:34: ef:3c:44:30:7b:68:98:7e:ec:cf:b1:3a:b6:99:42: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:52:E8:E1:92:BA:48:14:43:1D:EB:B6:44:B8:A6:38:A4:37:37:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a1d5d6b1-7219-3240-97f0-d032cee77919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:be:10:cd:6a:4a:87:e9:1a:db:47:9c:0b:b8:57:93:df:3f: db:24:92:cb:09:4c:0b:54:1b:49:6a:5b:03:de:e4:ff:f0:70: b7:ad:90:01:ec:f4:aa:5d:11:41:5a:46:b9:84:7e:c5:d3:28: 50:f4:8e:ce:95:c2:50:98:43:44:8a:8e:80:13:8c:69:ab:5d: 38:cb:ae:9e:36:5f:ef:9b:30:60:38:7a:71:b2:ab:b9:b8:f0: 0b:46:67:bf:fa:b5:e7:fa:c8:7c:58:2f:74:5c:52:33:1c:d8: 7a:d0:92:a7:3f:94:9a:6b:be:c5:70:4e:05:44:a5:e3:be:39: 29:30:03:4d:e0:bc:8f:7f:27:06:61:14:f0:4e:84:69:8a:88: a8:90:c1:de:43:62:3e:f9:fc:55:35:03:c0:39:be:e3:df:09: 7a:5f:dd:26:2c:6b:05:2e:77:ff:83:0e:8f:5d:94:cb:a4:76: 92:ae:14:da:14:6e:f3:a7:cc:61:dc:df:84:b6:f9:99:3b:2c: c1:4a:ee:de:5d:ec:88:c8:96:b1:42:7b:57:24:96:95:be:1a: 7f:4d:90:1d:0e:35:b1:c1:29:3f:4c:e3:b6:85:72:11:0b:b5: ff:8e:6c:a9:6a:e8:dc:b0:80:d6:15:d7:2a:1d:28:30:54:f2: 68:73:2d:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKsgvyZZ9VreaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YjIxYzNiMDktMmFkMC00MGE5LTkzMjgtOGY4YTA3MDc3MDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP6oK6fI5MoEXrqFLkWvg5YI5h2jOwmtM+8+ vXA7KdQVvz/E65bDgvIYwK2U2NEOjzIVxa17ogE7GZszZU1iWAQnywNAdGyn7DXH wbAlrAZD1lUdPE9/A6+XqJLCp6VtySIDjXIK2ueoY3nyaZ6LshJoZedtJOVtAzze Du0HFCNEfUa6xRdNfAMPVwXCIb7W3M2XYAYnlwaleOi3awBrTRvmfuPE9w+9wFxc T1tkR8l1Iw3lYo2uhPRUiLg+ldf44lD1cntFSK+gz/nixxaRywv6iJBOiD1ZWJoB Cr9APsB4jR1U5A+tQ9yRsOFwsTTvPEQwe2iYfuzPsTq2mUICCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdS6OGSukgUQx3rtkS4pjikNzdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTFkNWQ2YjEtNzIxOS0z MjQwLTk3ZjAtZDAzMmNlZTc3OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq+EM1qSofpGttHnAu4V5PfP9skkssJTAtUG0lqWwPe5P/wcLetkAHs 9KpdEUFaRrmEfsXTKFD0js6VwlCYQ0SKjoATjGmrXTjLrp42X++bMGA4enGyq7m4 8AtGZ7/6tef6yHxYL3RcUjMc2HrQkqc/lJprvsVwTgVEpeO+OSkwA03gvI9/JwZh FPBOhGmKiKiQwd5DYj75/FU1A8A5vuPfCXpf3SYsawUud/+DDo9dlMukdpKuFNoU bvOnzGHc34S2+Zk7LMFK7t5d7IjIlrFCe1cklpW+Gn9NkB0ONbHBKT9M47aFchEL tf+ObKlq6NywgNYV1yodKDBU8mhzLYE= -----END CERTIFICATE-----Generated at Sat Oct 11 11:15:07 2025 by rpki-client