$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c490184a-2bf1-31fb-afab-1aa55a247f9c.roa File: c490184a-2bf1-31fb-afab-1aa55a247f9c.roa (raw, json) Hash identifier: DeoXpsD2vF4+k2TnxtfktZjvnfXzzoUKCmMOMYtbXcM= Subject key identifier: 44:E2:63:95:B2:78:1B:3F:B5:F4:52:89:47:50:D5:4E:4F:2D:9C:57 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AD0D66CFA3B1E1B80FD4C7780 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c490184a-2bf1-31fb-afab-1aa55a247f9c.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 25893 IP address blocks: 172.252.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:6c:fa:3b:1e:1b:80:fd:4c:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=b30d6d54-7245-48f2-b712-a039f2b38b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:73:14:7a:1e:ca:0f:db:8d:9c:71:3c:ba:bb: 45:be:e1:96:8f:0e:d2:1d:77:90:38:06:f4:90:99: 90:5b:bf:95:c3:53:a2:8e:bb:b4:53:7f:59:61:be: be:b8:1d:1b:59:68:83:aa:20:e5:12:a9:97:c2:5b: a9:ec:c4:fa:09:79:78:58:03:91:f2:ce:fa:92:4e: ec:79:b5:5a:fc:9b:76:bd:4f:45:05:ce:4a:87:95: 85:c0:9c:da:64:82:0c:00:27:a4:4c:cf:20:b4:74: bc:5a:2b:4b:01:18:1c:a4:67:1f:7e:db:8b:0f:be: 62:d8:21:bf:8f:fe:16:6f:b5:6c:67:22:ca:4b:f6: 50:65:de:46:46:3d:21:d9:ca:64:60:20:3b:5f:70: 05:1b:ff:f4:91:da:c4:78:cc:24:0e:cc:cc:af:ac: eb:56:26:07:00:cb:03:50:c3:bc:51:4b:5a:3c:e5: e6:34:0d:dd:2c:50:b6:e3:29:12:8a:55:6b:51:7e: 59:f1:66:4e:2a:57:42:9b:44:d9:f0:3b:13:ea:22: 20:13:7d:ec:ec:26:c0:18:3f:bd:45:df:a1:03:39: 0a:df:9d:ce:58:b7:8e:7a:5f:e0:a8:4c:3f:57:a9: a3:f1:3e:68:29:84:45:c0:46:5c:8a:29:d5:b5:d6: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E2:63:95:B2:78:1B:3F:B5:F4:52:89:47:50:D5:4E:4F:2D:9C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c490184a-2bf1-31fb-afab-1aa55a247f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4f:c4:8a:88:e2:90:e7:8b:6c:14:0c:f1:65:d7:90:84:08: 3e:24:a8:e8:a4:a2:a7:d5:e9:2b:5b:58:22:9e:aa:0f:2c:4a: ca:fa:1c:71:53:ed:34:9c:68:54:db:f0:3b:ec:94:0f:44:b5: 0d:c1:69:ee:fa:b9:9c:8e:41:cf:9c:4b:f4:77:2f:3a:ca:a8: 72:3f:8b:c4:30:d7:a2:1e:56:34:f5:9d:7d:d8:12:dd:77:26: c1:40:fe:9c:2d:5b:52:c9:01:8e:00:eb:33:ea:c3:06:f0:b6: 64:db:d9:1b:a3:79:de:d4:91:ae:04:12:ee:5a:ac:f9:e6:12: 38:af:0f:db:e8:86:3a:4b:f5:08:42:9b:58:c4:f0:cf:e5:69: 2d:47:91:60:4a:77:03:83:d5:4a:ba:bf:ed:78:17:69:54:48: 19:2c:fb:42:2e:f7:32:c3:fe:6d:12:2d:bf:85:b6:40:58:aa: 45:57:c9:b6:90:14:96:ed:a7:a3:95:43:c5:87:8a:4b:48:5e: a6:8d:e1:dd:ba:e7:ea:6d:95:5a:9a:ce:80:34:a1:94:ac:79: 5e:cd:50:b7:67:ef:57:81:45:a0:b4:c2:5a:b5:d1:10:bb:f7: 7b:43:e2:19:60:51:00:12:fc:a3:18:98:39:11:5a:44:b3:77: 9c:ea:8e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mz6Ox4bgP1Md4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YjMwZDZkNTQtNzI0NS00OGYyLWI3MTItYTAzOWYyYjM4YjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nMUeh7KD9uNnHE8urtFvuGWjw7SHXeQOAb0 kJmQW7+Vw1Oijru0U39ZYb6+uB0bWWiDqiDlEqmXwlup7MT6CXl4WAOR8s76kk7s ebVa/Jt2vU9FBc5Kh5WFwJzaZIIMACekTM8gtHS8WitLARgcpGcfftuLD75i2CG/ j/4Wb7VsZyLKS/ZQZd5GRj0h2cpkYCA7X3AFG//0kdrEeMwkDszMr6zrViYHAMsD UMO8UUtaPOXmNA3dLFC24ykSilVrUX5Z8WZOKldCm0TZ8DsT6iIgE33s7CbAGD+9 Rd+hAzkK353OWLeOel/gqEw/V6mj8T5oKYRFwEZciinVtdYj5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETiY5WyeBs/tfRSiUdQ1U5PLZxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzQ5MDE4NGEtMmJmMS0z MWZiLWFmYWItMWFhNTVhMjQ3ZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxPxIqI4pDni2wUDPFl15CECD4kqOikoqfV6StbWCKeqg8sSsr6HHFT 7TScaFTb8DvslA9EtQ3Bae76uZyOQc+cS/R3LzrKqHI/i8Qw16IeVjT1nX3YEt13 JsFA/pwtW1LJAY4A6zPqwwbwtmTb2Rujed7Uka4EEu5arPnmEjivD9vohjpL9QhC m1jE8M/laS1HkWBKdwOD1Uq6v+14F2lUSBks+0Iu9zLD/m0SLb+FtkBYqkVXybaQ FJbtp6OVQ8WHiktIXqaN4d265+ptlVqazoA0oZSseV7NULdn71eBRaC0wlq10RC7 93tD4hlgUQAS/KMYmDkRWkSzd5zqjpE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:17:18 2025 by rpki-client