$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67c9174b-e498-32f8-a077-d83c90681323.roa File: 67c9174b-e498-32f8-a077-d83c90681323.roa (raw, json) Hash identifier: asJ5uX3BHN3F7BKmE/p3m6QZp9iINnWADOGoaGZL5fA= Subject key identifier: DD:E1:B0:CF:DD:AC:A8:B8:F8:37:9B:DE:93:E8:76:67:BD:60:25:64 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584DBBA06D541BDAB258FC695200 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67c9174b-e498-32f8-a077-d83c90681323.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 35554 IP address blocks: 142.252.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:6d:54:1b:da:b2:58:fc:69:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=5892d63b-3192-4378-81b4-5dc7d44cae2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:85:f6:62:19:17:fc:42:da:3a:64:2c:ff:56: 8c:f4:cf:02:e2:ba:e8:90:98:a9:16:90:76:7a:d7: 4f:5a:ab:ac:8f:ab:86:21:14:60:3c:52:ce:5c:f4: 56:2a:e1:2b:45:4a:1e:18:f4:b0:63:96:22:b9:1b: 49:4e:01:3f:bc:7c:0e:e7:73:2d:d6:30:2f:dd:e8: b2:87:d7:33:95:ba:00:0b:86:26:95:42:32:ee:3e: 03:c5:e6:6b:4f:04:a3:e6:f6:e4:6f:e0:41:0d:64: 15:b6:7e:e0:6e:bb:54:db:d9:cd:51:a9:36:aa:9b: a8:a1:9b:aa:f0:6d:ba:86:38:ed:0e:ca:04:0d:b4: 73:5c:1a:f7:18:94:da:6f:75:97:eb:ea:b7:e2:11: b0:e6:bd:52:13:25:e7:ba:b9:e5:db:f6:d8:c8:72: 9a:f6:7d:e8:c5:50:ce:07:58:67:f0:ee:94:90:c4: 7a:10:ca:7d:d7:25:3c:d1:31:76:c6:39:9c:56:4e: 41:5c:e9:c4:7b:85:7b:35:cd:ef:cf:db:45:21:9e: 1c:d9:e8:cc:fe:45:5f:32:ae:e8:6f:ca:fe:36:cd: 14:41:fa:ee:bf:9c:5c:74:52:bf:10:33:ac:07:ad: c3:f3:c3:6b:b0:23:70:ec:fb:6b:6d:de:c2:f9:cd: 9b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E1:B0:CF:DD:AC:A8:B8:F8:37:9B:DE:93:E8:76:67:BD:60:25:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67c9174b-e498-32f8-a077-d83c90681323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:43:4e:bf:70:09:3a:00:58:30:c6:5a:cc:38:f8:51:f0:27: 65:be:d4:80:b6:09:12:e0:22:8d:f7:00:0f:60:6b:60:5e:c1: d6:e6:0f:2d:c3:20:5b:00:ec:83:13:e6:1c:c4:2c:5a:46:c1: 13:a9:dc:21:47:15:c3:25:5f:3d:55:62:4b:b2:e2:a7:88:54: 88:0e:ae:b9:fd:3b:c6:33:c8:dc:46:c2:d4:31:66:f6:53:03: 17:45:45:c0:1c:ab:70:cf:81:8a:25:f1:6c:c8:74:d6:bf:4c: 48:fb:27:ba:81:8a:19:f8:d5:7a:1d:af:12:14:c7:d0:ed:4f: 69:49:9b:7a:76:e9:6c:73:01:27:aa:d6:a3:ca:0a:62:e7:19: d0:d9:ea:93:5b:22:11:91:83:15:a6:4f:45:5d:f9:af:11:fd: 06:5f:d0:6d:11:c2:3e:84:ae:0a:28:a3:8c:80:a0:a7:98:d0: 51:63:c9:92:9c:a9:a3:51:4b:68:57:60:62:de:89:d8:e8:57: 42:1c:b2:95:ec:f8:d0:b0:28:6a:77:48:4d:07:96:ee:79:63: 2e:24:7a:29:c5:11:b4:8f:ef:24:56:da:2e:b0:53:e9:a7:7e: 99:f9:10:6b:54:d1:e4:84:af:19:b0:81:c0:a4:aa:56:0d:ef: 88:e7:8e:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oG1UG9qyWPxpUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk NTg5MmQ2M2ItMzE5Mi00Mzc4LTgxYjQtNWRjN2Q0NGNhZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4X2YhkX/ELaOmQs/1aM9M8C4rrokJipFpB2 etdPWqusj6uGIRRgPFLOXPRWKuErRUoeGPSwY5YiuRtJTgE/vHwO53Mt1jAv3eiy h9czlboAC4YmlUIy7j4DxeZrTwSj5vbkb+BBDWQVtn7gbrtU29nNUak2qpuooZuq 8G26hjjtDsoEDbRzXBr3GJTab3WX6+q34hGw5r1SEyXnurnl2/bYyHKa9n3oxVDO B1hn8O6UkMR6EMp91yU80TF2xjmcVk5BXOnEe4V7Nc3vz9tFIZ4c2ejM/kVfMq7o b8r+Ns0UQfruv5xcdFK/EDOsB63D88NrsCNw7Ptrbd7C+c2bYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3hsM/drKi4+Deb3pPodme9YCVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjdjOTE3NGItZTQ5OC0z MmY4LWEwNzctZDgzYzkwNjgxMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvylMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9DTr9wCToAWDDGWsw4+FHwJ2W+1IC2CRLgIo33AA9ga2BewdbmDy3D IFsA7IMT5hzELFpGwROp3CFHFcMlXz1VYkuy4qeIVIgOrrn9O8YzyNxGwtQxZvZT AxdFRcAcq3DPgYol8WzIdNa/TEj7J7qBihn41XodrxIUx9DtT2lJm3p26WxzASeq 1qPKCmLnGdDZ6pNbIhGRgxWmT0Vd+a8R/QZf0G0Rwj6Ergooo4yAoKeY0FFjyZKc qaNRS2hXYGLeidjoV0IcspXs+NCwKGp3SE0Hlu55Yy4keinFEbSP7yRW2i6wU+mn fpn5EGtU0eSErxmwgcCkqlYN74jnjhc= -----END CERTIFICATE-----Generated at Wed May 13 13:37:03 2026 by rpki-client