$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab14df4d-a9b5-3319-b03d-e7b73f7d2547.roa File: ab14df4d-a9b5-3319-b03d-e7b73f7d2547.roa (raw, json) Hash identifier: fAj0hRZEhFV5P5jacLQqIsHrO0PEY7VXD3sYoXFKkWE= Subject key identifier: EA:43:91:90:EC:88:C2:50:A4:68:9F:CE:6A:CB:F3:7F:EB:51:A3:F3 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B74610ADBFF816D1FAF8BE700 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab14df4d-a9b5-3319-b03d-e7b73f7d2547.roa Signing time: Wed 08 Oct 2025 14:57:00 +0000 ROA not before: Wed 08 Oct 2025 14:57:00 +0000 ROA not after: Tue 06 Jan 2026 15:57:00 +0000 asID: 54500 IP address blocks: 172.252.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:61:0a:db:ff:81:6d:1f:af:8b:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 8 14:57:00 2025 GMT Not After : Jan 6 15:57:00 2026 GMT Subject: CN=446682da-5e61-45fc-822f-ae7fcba79e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:cb:a7:3f:f5:59:03:99:45:0f:e7:17:f6: 4c:ee:c1:8c:90:bf:66:f9:8e:39:d1:0f:71:5f:66: 1d:30:7d:87:11:ee:ff:54:cd:4b:eb:cc:7d:9a:4a: fa:0b:c0:17:18:cc:42:06:df:18:eb:78:41:6d:7a: 0a:a8:db:d7:f0:40:21:ed:0c:50:e4:0f:f4:24:6a: 61:d0:cd:38:df:50:f9:7f:e8:b9:35:61:52:b5:32: 10:b1:25:1c:d2:94:33:8c:33:51:c3:dd:39:08:46: a3:38:a5:5e:6f:27:2e:4c:fa:05:79:55:a1:71:cb: 68:79:01:53:2d:05:d4:04:a0:62:f1:77:3d:92:65: d7:a8:0f:e6:b7:7b:f7:98:7c:15:75:f6:72:69:06: c7:ac:0b:66:ae:5d:d2:e5:34:91:3d:19:dd:dc:14: f2:ee:99:37:c3:14:a8:da:cc:c5:a9:ad:a0:ac:53: 30:6e:ee:d5:48:38:2e:59:27:8e:52:a5:a2:79:39: 48:6f:cf:ce:6f:fe:d1:ba:90:4f:d4:18:5c:17:e4: 74:73:00:f7:1b:77:97:00:99:21:56:d7:29:8b:c2: 53:8d:9a:b2:57:70:c7:69:b7:45:a4:b1:ab:d0:54: 6f:84:a7:d2:f0:59:61:4e:0f:39:31:95:91:64:cb: 8e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:43:91:90:EC:88:C2:50:A4:68:9F:CE:6A:CB:F3:7F:EB:51:A3:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab14df4d-a9b5-3319-b03d-e7b73f7d2547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5f:ce:81:1e:30:84:28:02:c1:75:91:5b:fd:36:e4:cb:c7: 6e:84:ff:0a:9b:74:da:02:ae:71:5a:bc:ff:39:59:e6:a7:dd: a5:65:09:44:74:5e:34:04:d9:be:d6:88:2b:c5:b3:e3:ec:96: 09:0c:3b:dc:4e:0e:a1:78:01:18:15:59:d9:70:94:78:18:2f: af:60:89:d1:e4:2f:06:45:6e:37:24:8f:31:f9:58:78:27:e3: ee:bc:d7:f2:1a:c1:e3:0c:7e:8e:52:fa:6d:e2:9e:78:50:bf: fa:1d:0a:6d:07:ff:46:a5:54:23:04:69:e7:bf:08:fd:e4:ca: 6e:bb:6f:26:33:2d:7a:5a:44:56:26:b5:60:46:6a:42:74:fe: 93:ea:31:4d:3d:69:c3:65:18:7c:fb:78:42:10:bb:fb:ee:67: 6f:d4:79:45:f8:81:04:46:d7:05:7e:c9:b2:f1:a8:a7:47:53: 02:5e:de:ac:24:17:c8:b2:17:58:c4:57:3f:1d:a5:01:cf:ae: d2:00:ba:3c:bf:81:39:19:9f:66:8c:ab:62:a3:0a:30:6f:bf: 53:9c:b1:a2:cc:d8:cf:60:83:32:91:e7:b2:73:e9:18:db:fb: 6b:76:7d:fd:3c:7d:79:9c:81:e5:a6:81:b8:62:6e:46:fe:d4: 68:7a:68:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0YQrb/4FtH6+L5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwODE0NTcwMFoXDTI2MDEwNjE1NTcwMFowLzEtMCsGA1UEAxMk NDQ2NjgyZGEtNWU2MS00NWZjLTgyMmYtYWU3ZmNiYTc5ZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntTLpz/1WQOZRQ/nF/ZM7sGMkL9m+Y450Q9x X2YdMH2HEe7/VM1L68x9mkr6C8AXGMxCBt8Y63hBbXoKqNvX8EAh7QxQ5A/0JGph 0M0431D5f+i5NWFStTIQsSUc0pQzjDNRw905CEajOKVebycuTPoFeVWhcctoeQFT LQXUBKBi8Xc9kmXXqA/mt3v3mHwVdfZyaQbHrAtmrl3S5TSRPRnd3BTy7pk3wxSo 2szFqa2grFMwbu7VSDguWSeOUqWieTlIb8/Ob/7RupBP1BhcF+R0cwD3G3eXAJkh Vtcpi8JTjZqyV3DHabdFpLGr0FRvhKfS8FlhTg85MZWRZMuOhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpDkZDsiMJQpGifzmrL83/rUaPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWIxNGRmNGQtYTliNS0z MzE5LWIwM2QtZTdiNzNmN2QyNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPznMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVfzoEeMIQoAsF1kVv9NuTLx26E/wqbdNoCrnFavP85Wean3aVlCUR0 XjQE2b7WiCvFs+PslgkMO9xODqF4ARgVWdlwlHgYL69gidHkLwZFbjckjzH5WHgn 4+681/IaweMMfo5S+m3innhQv/odCm0H/0alVCMEaee/CP3kym67byYzLXpaRFYm tWBGakJ0/pPqMU09acNlGHz7eEIQu/vuZ2/UeUX4gQRG1wV+ybLxqKdHUwJe3qwk F8iyF1jEVz8dpQHPrtIAujy/gTkZn2aMq2KjCjBvv1OcsaLM2M9ggzKR57Jz6Rjb +2t2ff08fXmcgeWmgbhibkb+1Gh6aOM= -----END CERTIFICATE-----Generated at Sat Oct 11 11:07:59 2025 by rpki-client