$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf301a5e-6a13-3a91-bf53-dec6f3e4d893.roa File: cf301a5e-6a13-3a91-bf53-dec6f3e4d893.roa (raw, json) Hash identifier: 6BKzmy76jIGq7sXfzLGJYSzkk5d0xVRKmlylLgKO+BE= Subject key identifier: 91:B9:61:F0:68:7B:77:8F:BD:BE:1D:9F:09:09:4A:AB:D8:4B:59:84 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584ECA6C6AB1C11B745235745F60 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf301a5e-6a13-3a91-bf53-dec6f3e4d893.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 26666 IP address blocks: 142.252.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:6a:b1:c1:1b:74:52:35:74:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=8457a49b-16ed-472e-946d-76a8b035946d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:de:8b:d1:f4:72:17:8e:9e:c2:64:8d:8c:c1: 91:15:75:f0:44:1e:3e:c9:71:19:0e:38:5c:77:66: 2f:c5:ac:a4:9b:88:c7:12:4f:67:ef:71:17:e9:d9: 25:c3:75:e8:39:87:43:af:9b:6a:47:02:47:95:14: d7:5c:4d:f3:33:6d:21:29:40:c9:d3:08:87:7c:31: 23:ca:55:63:54:72:47:9a:74:fa:5d:b6:99:f6:1a: ba:93:39:1e:62:01:c6:3f:12:54:72:f9:83:44:c6: 7f:69:ba:d1:b2:1d:46:f5:2f:20:7b:af:1b:b5:2d: 42:64:d2:0f:62:6b:a3:48:93:b8:e0:7c:14:da:ce: e6:28:ad:a6:be:cf:c6:f0:5a:ed:8d:c7:29:29:18: 60:7d:3e:6a:d5:c7:d7:8d:17:8a:4d:ff:d3:72:4b: ab:bd:7f:d1:21:5a:3b:2a:36:80:6b:5e:53:d5:31: a3:09:53:45:b5:bb:be:be:a1:31:3c:47:26:04:4c: f5:bc:89:b7:2b:6c:e6:f5:55:0d:54:8a:86:cc:da: 2a:80:e8:22:73:d6:02:63:13:f9:4a:2a:f3:97:56: c9:eb:84:7c:81:33:81:6c:d9:a6:86:d3:14:6f:5a: 1e:ef:73:19:ce:e0:a6:f8:eb:27:71:62:54:22:aa: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B9:61:F0:68:7B:77:8F:BD:BE:1D:9F:09:09:4A:AB:D8:4B:59:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf301a5e-6a13-3a91-bf53-dec6f3e4d893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2d:73:ba:0b:d7:2a:49:23:32:4d:71:f9:90:32:7e:43:95: 0b:79:90:0d:64:67:9f:44:aa:60:06:7c:94:1a:05:b4:60:c9: 21:c4:2d:e5:94:f1:c4:f0:57:b7:a3:4e:98:51:77:6f:3c:9f: 40:30:a7:ee:1e:bd:3d:30:63:1c:1c:33:23:03:9a:e0:5e:3d: 66:98:99:63:df:66:80:c5:e8:06:48:a9:08:4a:f3:cb:59:fb: f5:32:72:82:4f:6f:6c:a9:b1:e6:3d:5b:a8:4f:7d:c8:d6:ce: 1c:c9:02:6c:99:5e:2f:aa:80:57:e6:5a:f0:da:6f:80:d9:84: c4:15:c1:f3:62:bc:24:fd:34:d1:8f:0e:15:1a:26:00:62:57: 08:2f:25:9a:61:57:b2:5e:b5:f9:6d:9a:af:ea:d2:29:21:e4: 2b:d2:5c:98:83:27:cd:e7:55:ce:4a:10:28:9b:23:eb:9c:27: 73:f5:bb:04:ed:f9:31:42:c5:69:54:84:db:75:7e:63:17:92: a5:ed:1b:a6:33:66:f2:d8:6e:a2:92:88:a5:88:56:b4:ae:ee: 16:ea:88:4d:81:32:cb:ad:ce:ad:2b:08:40:2c:bd:c1:30:0e: 7c:a4:37:16:6d:2d:09:2d:2b:d9:9a:e0:f2:d3:82:57:51:30: 4f:cf:35:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbGqxwRt0UjV0X2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk ODQ1N2E0OWItMTZlZC00NzJlLTk0NmQtNzZhOGIwMzU5NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi96L0fRyF46ewmSNjMGRFXXwRB4+yXEZDjhc d2Yvxaykm4jHEk9n73EX6dklw3XoOYdDr5tqRwJHlRTXXE3zM20hKUDJ0wiHfDEj ylVjVHJHmnT6XbaZ9hq6kzkeYgHGPxJUcvmDRMZ/abrRsh1G9S8ge68btS1CZNIP YmujSJO44HwU2s7mKK2mvs/G8FrtjccpKRhgfT5q1cfXjReKTf/TckurvX/RIVo7 KjaAa15T1TGjCVNFtbu+vqExPEcmBEz1vIm3K2zm9VUNVIqGzNoqgOgic9YCYxP5 Sirzl1bJ64R8gTOBbNmmhtMUb1oe73MZzuCm+OsncWJUIqr5zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG5YfBoe3ePvb4dnwkJSqvYS1mEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2YzMDFhNWUtNmExMy0z YTkxLWJmNTMtZGVjNmYzZTRkODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMtc7oL1ypJIzJNcfmQMn5DlQt5kA1kZ59EqmAGfJQaBbRgySHELeWU 8cTwV7ejTphRd288n0Awp+4evT0wYxwcMyMDmuBePWaYmWPfZoDF6AZIqQhK88tZ +/UycoJPb2ypseY9W6hPfcjWzhzJAmyZXi+qgFfmWvDab4DZhMQVwfNivCT9NNGP DhUaJgBiVwgvJZphV7Jetfltmq/q0ikh5CvSXJiDJ83nVc5KECibI+ucJ3P1uwTt +TFCxWlUhNt1fmMXkqXtG6YzZvLYbqKSiKWIVrSu7hbqiE2BMsutzq0rCEAsvcEw DnykNxZtLQktK9ma4PLTgldRME/PNZY= -----END CERTIFICATE-----Generated at Tue Aug 25 09:39:03 2026 by rpki-client