$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/04bcf4a8-3e74-3849-8030-9956ffd3772a.roa File: 04bcf4a8-3e74-3849-8030-9956ffd3772a.roa (raw, json) Hash identifier: kfV4EGnfBwbmy23dWuLpada+eRA4pjElVzA2qAwgUB8= Subject key identifier: 68:FA:C8:C3:9D:B1:01:6E:35:90:31:F9:07:9A:87:00:F8:E9:B5:B9 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B9E07CFD872E14C42124B1940 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/04bcf4a8-3e74-3849-8030-9956ffd3772a.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 104.252.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cf:d8:72:e1:4c:42:12:4b:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=8d13a689-a734-4123-be55-ccc015434e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:a1:f7:f0:b6:6c:21:0b:a0:55:35:7b:33: 3c:54:a4:b1:5c:70:d9:5f:44:9a:ce:ac:cf:c2:43: 90:f2:13:91:d1:00:f4:c4:ff:03:18:ef:00:ee:ba: ee:e1:e0:f5:0f:7d:4f:8c:aa:f8:b1:39:92:74:78: 03:59:ca:92:5d:4e:e5:ec:7c:1a:9e:90:e0:5f:c6: 8b:c1:52:ab:e8:ef:a1:58:22:1c:87:4a:98:76:a4: 9b:b8:f9:4c:5b:94:ac:0c:d7:18:92:a0:ee:ec:85: 61:cc:96:3a:51:ce:2f:80:b8:3d:32:38:01:b7:4e: 31:11:65:d8:9a:a3:f7:b5:d5:e4:f7:2e:25:c1:0e: d7:08:a2:70:9d:89:4a:50:4c:85:1d:97:29:de:9e: 02:91:23:4c:ca:78:a8:5c:f5:0e:4d:d9:05:ba:ed: fe:1f:c8:38:7e:a6:fb:3c:92:a1:b8:d8:ad:e3:cf: 4a:03:c7:5c:54:f0:6f:42:52:83:4c:b0:d9:0b:53: 51:0c:e9:01:3f:8a:a1:68:3d:69:0e:3b:f8:a4:82: e7:a3:7d:51:22:c0:ba:1f:5c:22:63:25:5b:02:ed: a0:c3:62:4a:37:e7:8b:92:9c:65:1e:54:70:46:c2: b3:d4:58:49:f4:f5:e2:65:14:45:f1:c7:cb:20:78: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FA:C8:C3:9D:B1:01:6E:35:90:31:F9:07:9A:87:00:F8:E9:B5:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/04bcf4a8-3e74-3849-8030-9956ffd3772a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.252.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2b:9e:ce:1a:37:bc:85:59:0b:1a:42:a8:b0:ee:bd:ba:44: a0:dc:f2:8f:72:29:80:84:d4:75:c2:b6:04:22:c9:cf:a0:50: c0:dd:72:03:b3:fb:23:b6:61:25:52:3b:0b:74:b7:a2:af:cd: 23:cc:5a:aa:c6:ab:29:d5:a8:3b:08:03:20:13:f2:1a:0b:3d: 9a:c6:9e:aa:18:44:73:6b:72:32:2e:4f:f9:1d:6a:5a:45:fb: 18:0b:2f:9a:10:9c:de:0a:2c:c0:1c:9c:91:94:76:da:76:c7: a2:d7:f9:43:37:e7:1a:fe:43:e8:92:12:ea:82:59:22:98:9e: 3a:83:78:b1:03:d4:af:e2:19:19:f5:a1:73:e7:0c:f9:5f:ec: df:a1:15:3e:88:79:c0:5a:4f:23:60:d1:a7:a2:2a:0e:63:7e: b8:c8:71:c1:62:d2:7c:c4:e1:35:a6:a8:16:06:ea:f0:63:71: 47:54:6d:b4:22:2a:47:11:9a:dc:e7:90:4f:ee:c3:bb:16:0f: ca:e7:23:4e:74:78:6e:69:41:4a:62:dd:84:79:76:44:f6:09: 6f:d0:62:7a:3c:3b:38:32:82:e5:8e:37:30:a9:7b:d9:cd:68: c9:3b:ee:4b:a5:a0:22:56:2b:ab:ef:20:bb:61:78:ee:0c:e7: 07:94:cd:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8/YcuFMQhJLGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OGQxM2E2ODktYTczNC00MTIzLWJlNTUtY2NjMDE1NDM0ZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Ch9/C2bCELoFU1ezM8VKSxXHDZX0SazqzP wkOQ8hOR0QD0xP8DGO8A7rru4eD1D31PjKr4sTmSdHgDWcqSXU7l7HwanpDgX8aL wVKr6O+hWCIch0qYdqSbuPlMW5SsDNcYkqDu7IVhzJY6Uc4vgLg9MjgBt04xEWXY mqP3tdXk9y4lwQ7XCKJwnYlKUEyFHZcp3p4CkSNMynioXPUOTdkFuu3+H8g4fqb7 PJKhuNit489KA8dcVPBvQlKDTLDZC1NRDOkBP4qhaD1pDjv4pILno31RIsC6H1wi YyVbAu2gw2JKN+eLkpxlHlRwRsKz1FhJ9PXiZRRF8cfLIHjzMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj6yMOdsQFuNZAx+QeahwD46bW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDRiY2Y0YTgtM2U3NC0z ODQ5LTgwMzAtOTk1NmZmZDM3NzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPxMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIrns4aN7yFWQsaQqiw7r26RKDc8o9yKYCE1HXCtgQiyc+gUMDdcgOz +yO2YSVSOwt0t6KvzSPMWqrGqynVqDsIAyAT8hoLPZrGnqoYRHNrcjIuT/kdalpF +xgLL5oQnN4KLMAcnJGUdtp2x6LX+UM35xr+Q+iSEuqCWSKYnjqDeLED1K/iGRn1 oXPnDPlf7N+hFT6IecBaTyNg0aeiKg5jfrjIccFi0nzE4TWmqBYG6vBjcUdUbbQi KkcRmtznkE/uw7sWD8rnI050eG5pQUpi3YR5dkT2CW/QYno8OzgyguWONzCpe9nN aMk77kuloCJWK6vvILtheO4M5weUzWo= -----END CERTIFICATE-----Generated at Wed Nov 5 03:50:00 2025 by rpki-client