$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ed0b423-6ef9-38d6-b786-3cd07c7409f2.roa File: 9ed0b423-6ef9-38d6-b786-3cd07c7409f2.roa (raw, json) Hash identifier: Zu0a4HqgvVCwNQV07szrgXsV/0apKE9QL4k2C1LsFg0= Subject key identifier: 05:40:D5:A7:E1:58:DA:EC:D4:13:38:25:74:4D:80:20:1C:BA:AA:F6 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AD0D66CD6F69B977ED9674DC0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ed0b423-6ef9-38d6-b786-3cd07c7409f2.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 25893 IP address blocks: 172.252.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:6c:d6:f6:9b:97:7e:d9:67:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=c6f0ac54-ea47-4bd1-96de-e53710f2d6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:89:fd:b1:7b:f9:79:eb:94:ad:23:00:e3: 81:89:fe:18:e7:7a:74:ae:fe:ac:c1:bb:ea:9e:3e: 4b:6f:89:2d:07:70:3c:12:ab:92:42:83:e2:31:3f: 37:c1:ce:8e:01:fc:0e:9c:d1:8b:a4:51:51:c6:89: 5f:25:fc:87:c8:16:c2:e6:c6:0a:40:be:10:0d:5b: 40:23:c5:19:6a:0d:d9:6e:0a:59:b0:ff:ea:ad:23: 58:08:48:0e:98:4b:5a:d8:0b:ec:2f:11:36:32:e3: 84:90:de:1f:43:ce:79:46:de:4f:4d:b7:1b:35:da: 48:10:cd:6c:cd:1c:86:96:6c:b3:f3:e8:06:f9:f8: 03:9d:88:18:5d:f1:68:0a:42:37:c9:36:05:8c:e9: a0:69:42:cc:cb:47:70:01:b5:80:d7:8a:5b:80:49: 6e:c1:11:23:f0:0c:fc:2f:88:d7:4f:ff:1c:3d:e2: 64:26:96:d2:56:66:e9:55:15:aa:72:2b:90:67:4f: 10:1f:1e:66:6d:81:91:92:9e:5d:96:77:eb:dc:11: a8:4e:63:d8:5d:fb:dc:27:13:26:56:d0:60:9d:30: 43:a5:9e:47:57:05:42:ea:e0:26:92:b0:1f:f0:b8: f3:50:8b:70:a8:35:c5:21:d4:06:a4:95:b0:f6:86: 7d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:40:D5:A7:E1:58:DA:EC:D4:13:38:25:74:4D:80:20:1C:BA:AA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ed0b423-6ef9-38d6-b786-3cd07c7409f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:68:8a:bf:8a:28:9e:33:67:4b:48:f9:73:9b:67:d9:8a:4e: 6d:c9:e1:0a:d5:fa:5b:ff:04:b4:9d:4d:d1:0a:38:cb:7b:a9: 30:ad:65:df:60:9e:17:53:ff:dc:8e:bd:b8:c8:e3:3c:4c:f0: 6a:66:24:23:3e:3c:91:5d:e4:a4:ea:a4:dd:43:1c:30:01:f6: f6:8a:2c:b6:83:e8:63:d6:cb:c8:1e:f0:4e:c3:19:39:e4:f0: 1b:7b:89:ba:5f:1a:1c:20:3a:3d:06:0f:e2:56:b4:5c:a4:d1: 10:03:73:12:8c:7c:ca:cc:0f:be:0d:a7:c7:38:16:35:67:46: a2:0e:7f:2f:ad:37:98:63:de:cc:c2:84:19:ad:ff:8c:88:54: 00:37:4b:91:70:6e:68:9d:bd:bd:cc:cc:b7:8a:0f:28:4e:a7: a7:b4:e5:14:4f:2f:63:b3:22:2f:02:25:10:a8:7a:41:f0:fb: 5a:45:e1:89:33:8f:9e:52:78:3a:9d:d1:b0:e4:6f:b5:bb:6a: d0:23:3b:07:47:2a:c1:8a:79:55:a5:f2:05:fc:66:44:fd:99: 20:3d:e0:b4:f6:00:f1:c6:ad:c7:97:9a:d9:27:45:81:47:61: 04:c6:15:df:5c:ba:23:95:ed:e0:08:0a:fe:2a:f1:5d:5a:d9: 99:82:67:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mzW9puXftlnTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YzZmMGFjNTQtZWE0Ny00YmQxLTk2ZGUtZTUzNzEwZjJkNmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdKJ/bF7+XnrlK0jAOOBif4Y53p0rv6swbvq nj5Lb4ktB3A8EquSQoPiMT83wc6OAfwOnNGLpFFRxolfJfyHyBbC5sYKQL4QDVtA I8UZag3ZbgpZsP/qrSNYCEgOmEta2AvsLxE2MuOEkN4fQ855Rt5PTbcbNdpIEM1s zRyGlmyz8+gG+fgDnYgYXfFoCkI3yTYFjOmgaULMy0dwAbWA14pbgEluwREj8Az8 L4jXT/8cPeJkJpbSVmbpVRWqciuQZ08QHx5mbYGRkp5dlnfr3BGoTmPYXfvcJxMm VtBgnTBDpZ5HVwVC6uAmkrAf8LjzUItwqDXFIdQGpJWw9oZ9LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVA1afhWNrs1BM4JXRNgCAcuqr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWVkMGI0MjMtNmVmOS0z OGQ2LWI3ODYtM2NkMDdjNzQwOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZoir+KKJ4zZ0tI+XObZ9mKTm3J4QrV+lv/BLSdTdEKOMt7qTCtZd9g nhdT/9yOvbjI4zxM8GpmJCM+PJFd5KTqpN1DHDAB9vaKLLaD6GPWy8ge8E7DGTnk 8Bt7ibpfGhwgOj0GD+JWtFyk0RADcxKMfMrMD74Np8c4FjVnRqIOfy+tN5hj3szC hBmt/4yIVAA3S5Fwbmidvb3MzLeKDyhOp6e05RRPL2OzIi8CJRCoekHw+1pF4Ykz j55SeDqd0bDkb7W7atAjOwdHKsGKeVWl8gX8ZkT9mSA94LT2APHGrceXmtknRYFH YQTGFd9cuiOV7eAICv4q8V1a2ZmCZ5M= -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:55 2025 by rpki-client