$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5ff0d31-5432-3b31-98e7-a2793707d05b.roa File: c5ff0d31-5432-3b31-98e7-a2793707d05b.roa (raw, json) Hash identifier: 2CiXdrHSLqyguqDAWMq4Uo9pCXMqrjSVlLJdjWDeVKM= Subject key identifier: 5F:45:1D:3C:AD:30:7D:5A:C7:71:DA:E7:2B:AF:AE:8C:7D:AF:C1:3D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F3E4802A62CC6D616A17EE940 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5ff0d31-5432-3b31-98e7-a2793707d05b.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 35554 IP address blocks: 142.252.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:02:a6:2c:c6:d6:16:a1:7e:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=14fb6768-1635-480e-aae8-cdfaf0b8427e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8b:fb:92:7a:17:b1:fa:d5:b2:f8:ff:4d:dd: 41:5d:86:98:02:43:a8:f2:e7:38:09:e3:53:5d:5d: 1c:37:28:34:15:b9:31:ae:77:fd:ca:bc:5d:86:c7: 01:81:74:04:1d:87:69:49:e7:5b:7e:f6:9d:bc:f2: 55:6a:88:c9:9e:9c:51:5c:95:79:9c:09:6f:55:74: f4:d9:93:c9:ab:e8:af:da:d1:8c:1d:72:10:32:fd: 6f:47:3e:8a:72:25:5b:d5:55:5b:dd:0d:24:4f:e1: 70:df:2e:98:e3:33:6f:a6:76:0b:ea:41:d7:73:d2: cf:07:0c:0e:f1:b2:58:c2:d8:e9:eb:00:43:cb:37: ee:d9:2e:a6:4f:af:b3:be:a4:86:df:21:95:89:0f: bd:4e:c0:f8:99:c7:0c:c5:1a:79:0d:d8:d2:f4:2e: b4:32:cd:6f:c4:f7:3d:c0:28:26:6c:91:0b:ac:d3: 37:b8:a5:56:63:7d:50:eb:78:f7:48:ad:6d:8e:b8: 54:ca:22:43:16:3e:6c:ad:5d:84:6b:0b:a8:1c:05: 41:79:fd:ec:54:a8:4c:a3:ca:2c:f3:6f:a0:11:cd: d0:41:dc:60:0b:7b:b6:c8:cf:f5:e3:6d:11:ce:13: 30:65:ad:31:49:68:40:d0:0c:fb:b9:68:f8:e5:42: 48:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:45:1D:3C:AD:30:7D:5A:C7:71:DA:E7:2B:AF:AE:8C:7D:AF:C1:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5ff0d31-5432-3b31-98e7-a2793707d05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:58:c4:7b:eb:97:f9:fd:a7:b2:47:cc:24:8b:30:9d:31:bc: 0d:89:6a:60:06:2a:ae:89:a8:08:94:c8:83:86:b2:4b:60:8e: 7a:85:ff:56:06:b0:31:a7:27:05:d7:c3:13:cb:84:7d:4e:dd: 8b:38:a4:47:bd:dc:d3:cf:0d:8c:7b:ce:46:6d:3e:e6:c5:4b: 6e:cb:4b:26:b7:e4:33:2b:66:ab:74:7c:a8:49:52:f1:d5:74: 05:51:cf:ab:49:b8:4d:d6:d5:e8:1c:71:0a:e0:c1:ee:92:26: 43:ee:bb:58:6a:50:09:8f:7b:df:40:68:86:8d:d4:74:1b:29: 69:9d:37:77:f7:fa:09:da:7c:97:5b:6b:49:65:9e:22:c7:d2: 27:8c:f6:38:ca:e8:2b:00:06:47:77:3a:b0:1c:e8:e9:fb:a9: 2d:8d:62:6f:29:61:c1:a8:96:f1:6c:38:9f:ac:e0:d4:08:3c: 8f:15:fb:e7:9c:55:7f:02:c9:49:09:1d:99:b8:37:b7:05:a4: 8e:40:e4:c8:66:3f:b8:81:67:87:eb:a9:33:33:e2:ee:6b:38: 69:c3:52:5c:b8:09:db:bb:f8:80:0c:3e:ba:a7:c6:45:ad:f6: 37:76:f4:e8:75:67:f9:fb:ff:cf:47:5a:b9:49:a7:96:69:33: 3e:c5:7f:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+SAKmLMbWFqF+6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MTRmYjY3NjgtMTYzNS00ODBlLWFhZTgtY2RmYWYwYjg0MjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYv7knoXsfrVsvj/Td1BXYaYAkOo8uc4CeNT XV0cNyg0Fbkxrnf9yrxdhscBgXQEHYdpSedbfvadvPJVaojJnpxRXJV5nAlvVXT0 2ZPJq+iv2tGMHXIQMv1vRz6KciVb1VVb3Q0kT+Fw3y6Y4zNvpnYL6kHXc9LPBwwO 8bJYwtjp6wBDyzfu2S6mT6+zvqSG3yGViQ+9TsD4mccMxRp5DdjS9C60Ms1vxPc9 wCgmbJELrNM3uKVWY31Q63j3SK1tjrhUyiJDFj5srV2EawuoHAVBef3sVKhMo8os 82+gEc3QQdxgC3u2yM/1420RzhMwZa0xSWhA0Az7uWj45UJI5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9FHTytMH1ax3Ha5yuvrox9r8E9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzVmZjBkMzEtNTQzMi0z YjMxLTk4ZTctYTI3OTM3MDdkMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvzOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtYxHvrl/n9p7JHzCSLMJ0xvA2JamAGKq6JqAiUyIOGsktgjnqF/1YG sDGnJwXXwxPLhH1O3Ys4pEe93NPPDYx7zkZtPubFS27LSya35DMrZqt0fKhJUvHV dAVRz6tJuE3W1egccQrgwe6SJkPuu1hqUAmPe99AaIaN1HQbKWmdN3f3+gnafJdb a0llniLH0ieM9jjK6CsABkd3OrAc6On7qS2NYm8pYcGolvFsOJ+s4NQIPI8V++ec VX8CyUkJHZm4N7cFpI5A5MhmP7iBZ4frqTMz4u5rOGnDUly4Cdu7+IAMPrqnxkWt 9jd29Oh1Z/n7/89HWrlJp5ZpMz7FfyM= -----END CERTIFICATE-----Generated at Sun Oct 11 08:48:36 2026 by rpki-client