$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d23dbedd-8c9d-3273-9d00-d28fb411c342.roa File: d23dbedd-8c9d-3273-9d00-d28fb411c342.roa (raw, json) Hash identifier: 2ZPA33EexW4IX+By75AEd1p+fiU+CwSZyqWC3BfOs5Q= Subject key identifier: BA:03:52:D9:98:53:B0:73:E6:13:10:D2:25:F9:26:1E:25:65:E2:BD Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B8BE237E1C9D77A37CAC86D80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d23dbedd-8c9d-3273-9d00-d28fb411c342.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 50131 IP address blocks: 172.252.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:37:e1:c9:d7:7a:37:ca:c8:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=c358a6b0-538e-4a2d-87ff-7cf95351e313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1c:32:5a:81:5d:5f:ab:85:29:93:10:69:11: f0:12:cb:1d:c7:39:d9:02:33:9a:85:27:17:d5:c1: 4e:14:b2:ef:c2:86:ee:64:d9:88:c0:51:e8:7c:1e: 53:42:97:85:fa:ec:9e:22:5c:26:ef:2d:04:95:c1: 73:47:a6:8c:48:50:87:60:5a:17:4d:c2:39:bf:f2: 0c:cb:5d:2e:ef:3b:8c:d0:a6:0a:31:ac:5e:9d:a4: 5a:8c:89:e4:65:ff:30:20:47:14:60:31:f4:72:70: 41:4f:18:ed:f6:11:ff:27:8b:33:fc:c5:37:b1:d6: e5:cf:79:02:76:54:5c:e8:1f:40:09:81:1b:c8:49: 1b:bd:b7:b0:fb:a3:6e:50:f8:6f:58:49:b7:61:ab: bb:45:82:d1:ca:ec:87:40:c0:24:16:7a:56:4b:8b: d4:85:7d:30:05:54:fd:c9:19:fc:31:54:ac:f8:2f: 3d:b6:8e:76:57:93:24:2e:ff:2e:6a:2e:ca:d0:5e: 17:fb:17:b7:2c:75:36:9f:d8:24:a4:fd:d4:53:14: 19:33:72:8a:c8:d2:1a:18:8f:a6:38:94:b6:5c:fd: b5:e1:a7:45:2e:da:3d:f2:37:3e:a2:c6:ed:0e:34: 15:17:23:e1:29:bb:43:cf:c6:da:ef:7d:f7:6f:97: e2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:03:52:D9:98:53:B0:73:E6:13:10:D2:25:F9:26:1E:25:65:E2:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d23dbedd-8c9d-3273-9d00-d28fb411c342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:75:96:d6:53:be:d0:95:77:96:2b:7f:ae:ff:02:25:fa:80: 64:57:d0:65:02:82:02:7d:7b:37:18:2e:f5:56:9f:92:0b:24: 8f:f2:ee:11:8e:4e:78:23:2a:0e:8d:4b:00:31:6b:4c:02:83: 4f:b3:95:49:a6:c5:48:ce:ee:d2:01:7e:95:1f:50:f9:0c:fd: 3b:ca:77:b7:78:dd:e7:ba:c7:d3:9f:d6:48:31:89:ff:0c:04: e5:6f:6d:f5:e6:1b:e0:ce:5b:df:29:ad:d9:ae:59:f6:c5:72: 04:3a:11:9e:ba:3e:89:fc:c8:cd:56:54:1f:8e:99:1d:b8:57: 74:5c:7d:7a:6c:61:52:b5:31:fd:c0:62:99:ed:c2:4f:c1:0c: 40:41:d7:4f:65:85:3d:78:0a:61:b2:33:b5:91:cc:88:b7:7d: 90:60:f1:5c:e0:02:a3:16:22:6a:9b:5a:e8:9e:11:a0:e3:66: 32:4d:a2:68:d7:3d:f5:d6:5a:2c:c5:fe:34:37:00:5a:e8:08: bc:be:68:9e:10:7b:49:c2:80:53:29:24:d3:87:08:c4:28:83: 29:1f:5c:93:8f:27:6c:70:7d:88:6b:38:41:f8:1f:99:a7:5f: 38:b8:8f:4e:2d:52:af:6c:ff:6a:b2:a3:05:91:cd:44:f4:88: 72:78:28:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jfhydd6N8rIbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YzM1OGE2YjAtNTM4ZS00YTJkLTg3ZmYtN2NmOTUzNTFlMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRwyWoFdX6uFKZMQaRHwEssdxznZAjOahScX 1cFOFLLvwobuZNmIwFHofB5TQpeF+uyeIlwm7y0ElcFzR6aMSFCHYFoXTcI5v/IM y10u7zuM0KYKMaxenaRajInkZf8wIEcUYDH0cnBBTxjt9hH/J4sz/MU3sdblz3kC dlRc6B9ACYEbyEkbvbew+6NuUPhvWEm3Yau7RYLRyuyHQMAkFnpWS4vUhX0wBVT9 yRn8MVSs+C89to52V5MkLv8uai7K0F4X+xe3LHU2n9gkpP3UUxQZM3KKyNIaGI+m OJS2XP214adFLto98jc+osbtDjQVFyPhKbtDz8ba7333b5fiWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoDUtmYU7Bz5hMQ0iX5Jh4lZeK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDIzZGJlZGQtOGM5ZC0z MjczLTlkMDAtZDI4ZmI0MTFjMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl1ltZTvtCVd5Yrf67/AiX6gGRX0GUCggJ9ezcYLvVWn5ILJI/y7hGO TngjKg6NSwAxa0wCg0+zlUmmxUjO7tIBfpUfUPkM/TvKd7d43ee6x9Of1kgxif8M BOVvbfXmG+DOW98prdmuWfbFcgQ6EZ66Pon8yM1WVB+OmR24V3RcfXpsYVK1Mf3A Ypntwk/BDEBB109lhT14CmGyM7WRzIi3fZBg8VzgAqMWImqbWuieEaDjZjJNomjX PfXWWizF/jQ3AFroCLy+aJ4Qe0nCgFMpJNOHCMQogykfXJOPJ2xwfYhrOEH4H5mn Xzi4j04tUq9s/2qyowWRzUT0iHJ4KNQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:47:16 2025 by rpki-client