$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab691fb3-d172-34e8-87e2-b8e048cfeba8.roa File: ab691fb3-d172-34e8-87e2-b8e048cfeba8.roa (raw, json) Hash identifier: 6/940MlHDDqSAkOtUPUjZCRxlRsQDIKW7X9Vzuo2u0s= Subject key identifier: BE:1D:3E:5E:D1:48:23:1D:F2:9E:0B:DA:C7:45:38:25:56:1D:B8:44 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B715D109C7738DFDD614DA140 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab691fb3-d172-34e8-87e2-b8e048cfeba8.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 104.253.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:10:9c:77:38:df:dd:61:4d:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=510dd8a8-c992-4a30-a78d-fa682693488d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b0:9f:c6:b9:49:34:57:ac:37:9a:dc:f3:00: 0a:d1:35:39:bb:e7:63:35:6e:74:75:a7:3d:9f:07: c2:40:cd:b5:5b:a6:90:97:7e:31:0a:36:ae:11:ab: 6f:2a:c1:8f:b3:36:77:4a:5c:10:8b:20:ee:0a:15: 07:4a:36:ab:25:21:50:2f:c2:da:d4:79:40:68:a4: 38:be:c9:f4:6d:fd:89:4d:f2:53:03:6b:52:75:d1: 51:2d:88:31:a6:21:b9:4a:6d:55:f3:20:e2:d3:ed: d8:39:b0:0d:8e:a7:c8:b2:96:9d:df:03:e6:3e:e6: eb:59:52:31:e1:23:cf:a4:4b:cf:7b:c4:75:42:83: d1:e6:c6:be:2b:a5:93:9c:98:9d:a9:14:47:d2:e8: aa:2a:ec:86:02:61:70:1e:cc:5b:0f:35:2f:c3:cb: b5:f8:69:40:ca:ab:79:3f:69:91:9e:fe:07:cf:36: b2:89:7b:03:74:06:13:9f:6f:d6:58:02:c4:23:db: 8f:a9:94:6c:f5:c2:8c:40:c2:71:5a:83:96:6e:7c: 21:38:8c:cb:62:97:5c:60:7f:55:31:11:43:d4:2a: f6:c6:55:37:2a:a7:1d:08:01:0f:bf:b3:96:8e:36: f9:68:88:a0:f9:96:60:18:f0:78:7e:4a:41:93:7c: fe:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1D:3E:5E:D1:48:23:1D:F2:9E:0B:DA:C7:45:38:25:56:1D:B8:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab691fb3-d172-34e8-87e2-b8e048cfeba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:93:8a:39:19:86:48:e9:9f:51:23:67:3c:a1:a7:b6:63:d5: 9f:02:7e:12:8b:29:19:f0:ea:7a:74:1c:51:0b:b3:39:12:c1: ea:ad:09:3b:27:19:95:50:0f:a9:c6:e2:9b:06:d3:6a:86:7f: e0:20:79:5a:bf:a3:2f:a3:b7:4b:71:8b:41:11:c8:09:21:18: 8e:d3:22:bd:7e:3a:be:2f:0f:97:0e:31:b4:01:80:ed:a2:f1: 06:f8:46:50:1d:b7:53:76:b3:a0:cd:1e:37:01:1e:8a:8a:0b: 32:9f:62:ec:b7:d5:8a:a9:00:99:c7:51:ab:64:60:9c:4a:e5: fd:43:3d:32:53:70:43:a1:02:76:72:8e:c7:cc:e3:5a:c5:ca: 1b:b1:20:66:65:20:17:65:3f:e3:53:c6:ab:6d:b9:14:19:a1: ae:91:08:60:d2:a5:c5:2d:fe:22:f3:dd:b0:30:28:75:8d:71: 4e:62:c0:7d:73:8a:2e:ac:32:bd:59:4a:31:5f:41:a0:49:9c: 42:a4:10:6f:37:39:a7:fd:23:2b:0f:88:fc:53:09:bf:47:58: 84:32:43:1f:e5:98:35:e4:3a:27:b4:7b:c5:52:b7:aa:c2:1c: 8e:4a:43:a9:77:38:73:f1:28:54:97:98:3d:60:28:68:3e:ad: 9b:34:9f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXRCcdzjf3WFNoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTEwZGQ4YTgtYzk5Mi00YTMwLWE3OGQtZmE2ODI2OTM0ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbCfxrlJNFesN5rc8wAK0TU5u+djNW50dac9 nwfCQM21W6aQl34xCjauEatvKsGPszZ3SlwQiyDuChUHSjarJSFQL8La1HlAaKQ4 vsn0bf2JTfJTA2tSddFRLYgxpiG5Sm1V8yDi0+3YObANjqfIspad3wPmPubrWVIx 4SPPpEvPe8R1QoPR5sa+K6WTnJidqRRH0uiqKuyGAmFwHsxbDzUvw8u1+GlAyqt5 P2mRnv4HzzayiXsDdAYTn2/WWALEI9uPqZRs9cKMQMJxWoOWbnwhOIzLYpdcYH9V MRFD1Cr2xlU3KqcdCAEPv7OWjjb5aIig+ZZgGPB4fkpBk3z+9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4dPl7RSCMd8p4L2sdFOCVWHbhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWI2OTFmYjMtZDE3Mi0z NGU4LTg3ZTItYjhlMDQ4Y2ZlYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+TijkZhkjpn1EjZzyhp7Zj1Z8CfhKLKRnw6np0HFELszkSweqtCTsn GZVQD6nG4psG02qGf+AgeVq/oy+jt0txi0ERyAkhGI7TIr1+Or4vD5cOMbQBgO2i 8Qb4RlAdt1N2s6DNHjcBHoqKCzKfYuy31YqpAJnHUatkYJxK5f1DPTJTcEOhAnZy jsfM41rFyhuxIGZlIBdlP+NTxqttuRQZoa6RCGDSpcUt/iLz3bAwKHWNcU5iwH1z ii6sMr1ZSjFfQaBJnEKkEG83Oaf9IysPiPxTCb9HWIQyQx/lmDXkOie0e8VSt6rC HI5KQ6l3OHPxKFSXmD1gKGg+rZs0n1c= -----END CERTIFICATE-----Generated at Sat Oct 11 11:14:47 2025 by rpki-client