$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32c6cb76-0c50-3243-8c0a-3ab57887c81c.roa File: 32c6cb76-0c50-3243-8c0a-3ab57887c81c.roa (raw, json) Hash identifier: B0RBSuFv3ljRtrR0IcAY/ARsLD5O9QgW7NU9/flM6hY= Subject key identifier: 2B:B2:73:38:35:08:A8:4A:15:E9:12:B1:B8:7E:1A:04:E5:19:47:87 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AF0F14C208982E2E8840E4F80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32c6cb76-0c50-3243-8c0a-3ab57887c81c.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 104.253.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:4c:20:89:82:e2:e8:84:0e:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=bd6e658b-031e-4d51-8e1c-646fdcc053f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:1e:81:85:9d:a9:7b:dc:23:40:5d:a4:25: 4d:bb:97:52:b1:be:32:9d:95:2b:2c:df:be:ed:9a: 69:b0:a7:0c:fb:91:47:eb:7e:c9:98:b2:79:e7:67: d4:5d:2e:cc:97:9a:61:ef:29:67:ef:99:72:bd:f3: 20:12:0a:ee:f6:98:0d:08:3a:4e:a4:9a:63:89:90: 16:1a:96:5f:d5:76:24:50:5e:e7:89:c7:8d:a0:47: 45:8a:0c:59:96:c5:65:76:b6:dd:da:c4:51:e7:fa: 88:1a:c3:f0:9c:7c:d8:11:99:f2:ae:74:11:71:0f: 96:ed:40:89:23:44:20:c6:2b:cb:ad:0e:9c:ce:0c: 34:8d:e1:81:43:0a:43:06:89:5f:88:79:e6:24:1e: 22:c1:2c:d1:8a:b3:5d:1c:fc:3e:9b:a3:e0:c6:69: 4b:82:ac:73:81:d2:fe:25:72:7f:2e:a1:d7:72:56: c5:85:74:b3:fa:d7:79:72:8a:ec:6e:1b:34:53:8e: 6e:e3:65:cf:1d:d9:38:0e:f5:80:b3:85:40:c6:96: 51:3c:3a:6b:a5:01:bc:df:9e:bd:e7:81:ae:6d:39: dd:1d:9d:47:f0:43:5e:a2:7e:4d:9b:12:ea:66:3e: 46:74:1c:69:bf:22:1d:53:9e:cf:de:9c:e4:f8:a4: f7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B2:73:38:35:08:A8:4A:15:E9:12:B1:B8:7E:1A:04:E5:19:47:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32c6cb76-0c50-3243-8c0a-3ab57887c81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.253.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:58:76:26:8f:d3:39:fa:9f:37:9f:ad:6d:ff:43:8f:23:2e: 71:c4:e0:24:f5:17:5b:cf:34:b6:63:2f:5c:71:78:04:9c:3e: 50:fa:8a:02:a0:62:0b:34:f1:3b:dc:17:89:03:87:84:15:01: c1:eb:5d:16:7c:d4:c8:8c:c6:e8:2a:0a:a3:71:40:40:a8:95: 9e:6c:56:d1:d9:f4:af:2a:73:a4:02:19:f3:2e:e5:98:55:7d: 3e:78:83:89:9f:68:d1:1b:37:3a:bf:d0:64:af:a0:bf:9c:81: c2:1b:6a:16:4c:a0:ca:17:33:2b:df:7c:e0:ff:af:7a:6c:41: 88:b0:20:0b:f5:7d:28:76:33:92:c0:48:bd:82:8b:68:2f:74: 7d:2a:a4:cd:b5:98:b6:d3:6c:cf:f9:12:cf:85:e7:da:07:48: 33:f7:6e:f2:2e:ce:4d:15:c6:90:a4:7b:58:a0:a2:9d:01:66: ff:0e:ab:b9:d3:a4:94:00:8d:7a:3c:ed:0e:11:2b:07:7a:fd: e5:38:4d:34:2e:b8:38:7a:27:aa:be:69:a5:9a:24:38:2e:dc: 34:72:68:9a:22:16:ad:d2:1d:4d:b7:a9:89:ef:aa:17:8a:cb: b1:bc:c9:3a:54:79:46:b3:be:45:17:77:76:42:5c:0a:b7:f7: 34:03:07:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UwgiYLi6IQOT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YmQ2ZTY1OGItMDMxZS00ZDUxLThlMWMtNjQ2ZmRjYzA1M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDQegYWdqXvcI0BdpCVNu5dSsb4ynZUrLN++ 7ZppsKcM+5FH637JmLJ552fUXS7Ml5ph7yln75lyvfMgEgru9pgNCDpOpJpjiZAW GpZf1XYkUF7niceNoEdFigxZlsVldrbd2sRR5/qIGsPwnHzYEZnyrnQRcQ+W7UCJ I0QgxivLrQ6czgw0jeGBQwpDBolfiHnmJB4iwSzRirNdHPw+m6PgxmlLgqxzgdL+ JXJ/LqHXclbFhXSz+td5corsbhs0U45u42XPHdk4DvWAs4VAxpZRPDprpQG83569 54GubTndHZ1H8ENeon5NmxLqZj5GdBxpvyIdU57P3pzk+KT3swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuyczg1CKhKFekSsbh+GgTlGUeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzJjNmNiNzYtMGM1MC0z MjQzLThjMGEtM2FiNTc4ODdjODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtYdiaP0zn6nzefrW3/Q48jLnHE4CT1F1vPNLZjL1xxeAScPlD6igKg Ygs08TvcF4kDh4QVAcHrXRZ81MiMxugqCqNxQEColZ5sVtHZ9K8qc6QCGfMu5ZhV fT54g4mfaNEbNzq/0GSvoL+cgcIbahZMoMoXMyvffOD/r3psQYiwIAv1fSh2M5LA SL2Ci2gvdH0qpM21mLbTbM/5Es+F59oHSDP3bvIuzk0VxpCke1igop0BZv8Oq7nT pJQAjXo87Q4RKwd6/eU4TTQuuDh6J6q+aaWaJDgu3DRyaJoiFq3SHU23qYnvqheK y7G8yTpUeUazvkUXd3ZCXAq39zQDB7A= -----END CERTIFICATE-----Generated at Sat Aug 23 09:01:16 2025 by rpki-client