$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f8866f0-a189-337f-bc3b-33307db8114d.roa File: 9f8866f0-a189-337f-bc3b-33307db8114d.roa (raw, json) Hash identifier: XEcUYww3V12929qWOFRse0t6mCCAzj8QoZhTs+n4Yfk= Subject key identifier: 3B:71:1C:ED:2E:CB:F9:55:5C:96:06:1E:86:C8:B1:4A:C6:06:B1:89 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F0D6CF12C9001F0EF890C1200 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f8866f0-a189-337f-bc3b-33307db8114d.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 10557 IP address blocks: 142.252.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f1:2c:90:01:f0:ef:89:0c:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=4c7d367c-d9b4-47be-ad87-30c120ccab2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2f:c2:48:1f:e6:0e:b9:b7:37:94:7d:eb:ab: 04:8f:a0:ed:71:f1:14:98:6c:fd:44:e0:45:6a:aa: 2b:aa:40:ff:99:c1:dd:a2:8c:eb:bd:d5:a8:7f:5f: 75:ea:11:31:a8:89:fa:db:dc:3b:4d:8a:a0:26:de: 63:c4:62:d7:1d:1e:9a:23:1a:14:4e:a3:d8:c6:f9: 79:a8:57:74:85:0f:d7:c0:3c:71:2c:53:cd:5a:fe: 87:c8:5c:85:86:e5:7e:46:ab:fd:49:7e:6c:66:67: 78:20:ae:c9:3c:3c:ae:89:50:f1:d2:41:88:d1:03: 27:84:a3:2a:9b:f8:c0:e3:3e:a5:4e:18:11:0e:99: c4:9f:0f:27:d6:03:1b:17:6c:91:83:17:fb:08:d5: 1e:80:c2:35:d6:b3:fb:b5:91:e4:5c:5f:9e:cc:7e: f9:19:c1:4e:09:33:69:b8:d1:b4:d3:48:8e:e0:00: f2:46:22:8a:0e:c2:31:f3:a2:d0:16:28:fd:46:8a: 1c:af:0a:fe:21:6c:fd:f8:ba:54:11:2f:b8:d5:11: c7:be:b0:d2:e7:94:b0:da:0e:f3:d3:23:08:4d:45: 94:cd:d4:9d:86:68:4b:ad:e7:64:f8:75:70:6c:ae: 61:dd:9a:ec:b9:36:eb:70:94:17:31:42:09:0c:5e: 2b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:71:1C:ED:2E:CB:F9:55:5C:96:06:1E:86:C8:B1:4A:C6:06:B1:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f8866f0-a189-337f-bc3b-33307db8114d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:9f:5b:02:bd:58:18:0c:ef:dc:f2:07:79:1a:b4:bd:5a:a6: 0f:e0:6a:f6:53:17:33:b9:e3:a1:18:e5:50:d9:91:ff:36:3e: 5b:01:7e:ab:18:7c:39:d0:dd:93:30:a5:b7:41:47:f5:67:ef: 27:19:e6:0b:32:d8:f3:54:23:6e:06:90:c9:30:f0:eb:aa:1b: 98:74:15:0a:ff:55:01:19:56:2f:f3:13:3d:4f:85:f1:30:72: ad:a6:4f:74:69:33:eb:f6:9b:cf:4f:31:8f:7c:a2:4b:15:63: da:59:96:5e:c4:00:2c:3e:78:f8:3c:22:67:fe:9e:23:92:29: 48:f7:a3:d9:0f:d3:aa:49:4f:ea:72:c3:14:c0:ed:47:6b:6f: da:0c:c4:ae:4e:49:72:ca:49:f3:1d:9d:84:ac:dd:55:93:12: 76:01:42:60:5a:51:8e:58:05:c0:2e:6d:52:3d:1e:56:41:3f: 35:d5:1c:43:45:5e:d6:8b:59:93:7e:95:44:3a:e4:48:a5:56: 0a:cb:df:39:90:e3:ab:54:df:15:fa:82:8c:4f:77:ce:63:1b: 83:17:34:b3:8f:91:e8:6f:dd:ab:5f:e1:81:5d:ff:e0:2d:46: d2:43:05:82:57:9c:49:51:ea:d5:30:8e:5f:92:df:b2:0a:f1: 60:30:10:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPEskAHw74kMEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NGM3ZDM2N2MtZDliNC00N2JlLWFkODctMzBjMTIwY2NhYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC/CSB/mDrm3N5R966sEj6DtcfEUmGz9ROBF aqorqkD/mcHdoozrvdWof1916hExqIn629w7TYqgJt5jxGLXHR6aIxoUTqPYxvl5 qFd0hQ/XwDxxLFPNWv6HyFyFhuV+Rqv9SX5sZmd4IK7JPDyuiVDx0kGI0QMnhKMq m/jA4z6lThgRDpnEnw8n1gMbF2yRgxf7CNUegMI11rP7tZHkXF+ezH75GcFOCTNp uNG000iO4ADyRiKKDsIx86LQFij9Roocrwr+IWz9+LpUES+41RHHvrDS55Sw2g7z 0yMITUWUzdSdhmhLredk+HVwbK5h3ZrsuTbrcJQXMUIJDF4rDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtxHO0uy/lVXJYGHobIsUrGBrGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWY4ODY2ZjAtYTE4OS0z MzdmLWJjM2ItMzMzMDdkYjgxMTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvz5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWfWwK9WBgM79zyB3katL1apg/gavZTFzO546EY5VDZkf82PlsBfqsY fDnQ3ZMwpbdBR/Vn7ycZ5gsy2PNUI24GkMkw8OuqG5h0FQr/VQEZVi/zEz1PhfEw cq2mT3RpM+v2m89PMY98oksVY9pZll7EACw+ePg8Imf+niOSKUj3o9kP06pJT+py wxTA7Udrb9oMxK5OSXLKSfMdnYSs3VWTEnYBQmBaUY5YBcAubVI9HlZBPzXVHENF XtaLWZN+lUQ65EilVgrL3zmQ46tU3xX6goxPd85jG4MXNLOPkehv3atf4YFd/+At RtJDBYJXnElR6tUwjl+S37IK8WAwENU= -----END CERTIFICATE-----Generated at Thu Sep 10 14:54:57 2026 by rpki-client