$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ba438e51-ecc1-3c58-878d-1bdf1f4da59c.roa File: ba438e51-ecc1-3c58-878d-1bdf1f4da59c.roa (raw, json) Hash identifier: x0i1w0GXeXyoQ49yXjDblgJMjSfiX3jATM4BV2tx87A= Subject key identifier: 50:78:BE:D8:36:EE:9A:45:2C:A3:B4:07:9D:03:50:FE:52:EF:13:8D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B153C230D6069BAAA1C733E20 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ba438e51-ecc1-3c58-878d-1bdf1f4da59c.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 5511 IP address blocks: 104.253.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:23:0d:60:69:ba:aa:1c:73:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=6af4d0ae-00e7-4193-890c-6b1ba1fd4f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ec:82:74:5c:9f:dc:0f:4e:e2:94:e6:0c:c6: b0:73:b0:24:94:d1:e4:82:75:ba:22:e3:e0:3d:8c: 02:23:5b:f4:2b:60:fd:ff:87:7d:db:49:7d:46:ce: 3f:f0:fa:bd:cf:0e:2b:f7:8b:bc:ea:e5:6c:7c:fb: 96:75:a7:ae:f1:69:d9:96:45:c7:50:29:d7:31:76: 94:e1:ea:73:ae:0f:cb:7e:b9:e7:65:7c:2f:b7:6c: a5:a0:9d:a5:73:75:31:dc:cc:59:08:27:02:c9:e0: b8:af:33:e9:8a:93:55:5a:d1:29:f1:44:25:0e:6d: 54:82:f6:8f:98:1e:2c:8e:37:00:e7:d2:a8:0e:2a: 06:a8:d0:ac:db:aa:8a:96:35:8d:28:68:d4:12:b1: 34:a7:30:66:aa:0b:51:43:e4:a3:5c:2f:93:93:8d: 0a:34:ad:44:87:0b:f8:5f:7c:d1:dc:cb:26:f4:70: 34:b8:d0:5d:b9:48:f8:31:56:d7:de:6d:ff:69:ee: dd:56:88:1a:59:3d:36:02:33:7b:d4:77:4c:d2:dd: e0:f3:a9:d7:93:a2:b0:ee:1c:00:fe:62:7c:be:80: 41:19:24:23:98:6a:06:f2:99:b3:37:59:a9:7b:c3: 09:b0:41:94:40:7f:77:1d:1f:26:65:76:96:9e:51: 8e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:78:BE:D8:36:EE:9A:45:2C:A3:B4:07:9D:03:50:FE:52:EF:13:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ba438e51-ecc1-3c58-878d-1bdf1f4da59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c4:05:45:32:2f:fa:d6:e4:5a:b9:03:6e:f4:c3:9e:1b:f9: 25:8b:86:68:ec:4a:46:b6:75:79:34:e1:21:ce:6b:dc:d1:25: 47:e4:b5:2a:7a:3d:4c:a6:08:be:51:63:c9:ad:f0:32:0c:eb: 20:58:6e:2c:ab:76:92:98:ac:65:97:13:77:54:48:18:97:77: b1:f5:56:3a:74:8e:b5:6d:3a:7c:11:c0:3f:6a:0a:21:d4:06: fa:58:de:a9:83:9f:2d:d9:26:a0:ea:eb:45:24:61:3d:aa:55: 7e:fd:75:14:c8:f7:60:68:6d:83:42:cf:4e:62:ec:ff:18:ee: 27:a6:90:f3:c1:4c:93:1b:31:ca:ef:be:01:58:61:1c:55:7f: a7:6c:0a:f8:be:f8:1c:0f:7b:35:5c:43:b0:19:8d:3c:38:76: bc:1d:3d:b3:3d:15:87:ec:88:b3:1a:78:73:ff:a5:03:3f:f5: 9e:15:22:85:0a:d8:54:41:e1:f7:e7:4b:9b:2d:a8:04:d4:ea: 9a:7c:12:52:d5:e6:74:11:00:2e:42:d0:8b:2f:e7:69:9c:6e: 40:34:14:95:56:23:08:93:61:71:09:e2:e8:51:80:4c:e9:60: 11:b4:22:32:f6:0b:ea:d7:a0:f2:2b:0d:03:61:ca:72:fe:bd: bc:53:9c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCMNYGm6qhxzPiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NmFmNGQwYWUtMDBlNy00MTkzLTg5MGMtNmIxYmExZmQ0ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+yCdFyf3A9O4pTmDMawc7AklNHkgnW6IuPg PYwCI1v0K2D9/4d920l9Rs4/8Pq9zw4r94u86uVsfPuWdaeu8WnZlkXHUCnXMXaU 4epzrg/LfrnnZXwvt2yloJ2lc3Ux3MxZCCcCyeC4rzPpipNVWtEp8UQlDm1UgvaP mB4sjjcA59KoDioGqNCs26qKljWNKGjUErE0pzBmqgtRQ+SjXC+Tk40KNK1Ehwv4 X3zR3Msm9HA0uNBduUj4MVbX3m3/ae7dVogaWT02AjN71HdM0t3g86nXk6Kw7hwA /mJ8voBBGSQjmGoG8pmzN1mpe8MJsEGUQH93HR8mZXaWnlGO5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB4vtg27ppFLKO0B50DUP5S7xONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmE0MzhlNTEtZWNjMS0z YzU4LTg3OGQtMWJkZjFmNGRhNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbEBUUyL/rW5Fq5A270w54b+SWLhmjsSka2dXk04SHOa9zRJUfktSp6 PUymCL5RY8mt8DIM6yBYbiyrdpKYrGWXE3dUSBiXd7H1Vjp0jrVtOnwRwD9qCiHU BvpY3qmDny3ZJqDq60UkYT2qVX79dRTI92BobYNCz05i7P8Y7iemkPPBTJMbMcrv vgFYYRxVf6dsCvi++BwPezVcQ7AZjTw4drwdPbM9FYfsiLMaeHP/pQM/9Z4VIoUK 2FRB4ffnS5stqATU6pp8ElLV5nQRAC5C0Isv52mcbkA0FJVWIwiTYXEJ4uhRgEzp YBG0IjL2C+rXoPIrDQNhynL+vbxTnFM= -----END CERTIFICATE-----Generated at Sat Oct 11 13:30:03 2025 by rpki-client