$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0bbcfec3-9f9d-3aba-95f0-b5d85b06c591.roa File: 0bbcfec3-9f9d-3aba-95f0-b5d85b06c591.roa (raw, json) Hash identifier: lZveLyK3em6ry9ImesDNptluhOH76yaGrIG54w8GEnY= Subject key identifier: 65:27:7B:71:30:ED:B6:70:34:FC:5F:D1:4A:4E:85:14:50:38:76:52 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BABFCFB7C723FFC65A6D46C80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0bbcfec3-9f9d-3aba-95f0-b5d85b06c591.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 174 IP address blocks: 172.252.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fb:7c:72:3f:fc:65:a6:d4:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=3d5abc20-dac3-498b-b8a4-074bd512c077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:d4:9d:7c:0d:26:76:89:50:72:db:5a:48: 99:53:4d:90:00:6e:5b:38:3d:25:83:8b:78:9f:92: 53:11:29:7e:cd:4a:90:fb:3f:e4:ea:33:22:11:72: ef:79:6d:0a:25:4d:01:38:7b:ce:68:de:8f:e4:84: 4a:f2:38:ef:0b:c0:1b:93:dd:5f:0e:62:fe:1d:1f: f1:36:60:ef:f1:42:99:eb:fa:37:9a:2a:cf:5b:79: f0:e9:58:9a:28:7f:55:68:f6:06:62:af:a4:d6:59: 07:0d:61:ba:b2:83:e1:08:07:a8:6c:96:38:b1:b4: 3f:f3:36:5c:ba:15:6c:f9:e7:37:38:07:d8:b0:da: 86:01:fc:96:20:d0:48:cf:9b:ca:3b:15:69:75:38: ba:38:bf:22:41:a9:2d:b5:13:2f:f9:d0:e1:fa:e8: 9f:1c:66:71:08:b4:e1:06:34:ae:63:aa:5a:ab:ec: fe:16:18:ae:d3:e5:25:ea:85:4c:6d:96:e0:17:f0: 74:75:1f:b2:14:72:6f:9e:2f:dc:3d:d4:88:6b:4d: 09:29:d6:de:e1:0c:2f:3a:16:b4:95:c5:39:b5:8e: 74:05:a7:a9:c7:7d:ae:c2:b7:39:dc:7d:f7:5b:c1: e9:d5:fb:39:9f:60:33:5b:f1:fe:60:22:29:7e:0b: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:27:7B:71:30:ED:B6:70:34:FC:5F:D1:4A:4E:85:14:50:38:76:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0bbcfec3-9f9d-3aba-95f0-b5d85b06c591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4e:22:f5:ab:ce:72:cb:db:11:af:be:6d:15:55:43:1d:37: 03:d6:08:97:76:87:e1:c2:72:10:54:20:b5:5b:f9:43:0a:52: 08:22:34:6c:ef:ca:7b:17:b8:13:8c:47:8b:a2:e3:8f:bb:8e: 99:8f:5b:a8:ac:cd:64:eb:3d:8a:c7:b1:c4:20:2d:3c:8f:d2: 90:ad:4d:02:30:75:2e:49:29:ac:8d:8f:98:0d:3f:1f:f8:91: a6:f0:60:89:95:31:13:93:08:35:bb:e4:06:da:74:50:4e:17: c6:0f:89:28:41:26:6b:4b:b0:f9:0e:ef:0d:11:40:a4:19:a9: 30:4a:b5:52:46:f7:fc:47:d8:8c:58:96:c2:c6:bc:0e:7b:a8: 57:48:71:7d:44:c5:d9:80:13:75:d8:01:b9:36:36:0a:99:26: 38:a4:87:68:c5:4b:ee:12:31:d0:85:5c:c3:d9:94:bc:a4:b0: e2:a5:b0:9b:70:08:45:93:f1:7a:48:cb:f4:43:37:40:ca:99: 4d:66:6d:57:11:6f:38:03:67:1b:74:fc:2f:b1:db:eb:56:70: 50:84:ad:3e:88:67:8d:bc:aa:60:a9:76:2f:cf:7b:d5:5f:e1: 3d:8e:ee:83:d6:04:28:3e:00:86:c7:0d:6e:51:da:2e:24:51: f2:1a:29:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Pt8cj/8ZabUbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk M2Q1YWJjMjAtZGFjMy00OThiLWI4YTQtMDc0YmQ1MTJjMDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqrUnXwNJnaJUHLbWkiZU02QAG5bOD0lg4t4 n5JTESl+zUqQ+z/k6jMiEXLveW0KJU0BOHvOaN6P5IRK8jjvC8Abk91fDmL+HR/x NmDv8UKZ6/o3mirPW3nw6ViaKH9VaPYGYq+k1lkHDWG6soPhCAeobJY4sbQ/8zZc uhVs+ec3OAfYsNqGAfyWINBIz5vKOxVpdTi6OL8iQakttRMv+dDh+uifHGZxCLTh BjSuY6paq+z+Fhiu0+Ul6oVMbZbgF/B0dR+yFHJvni/cPdSIa00JKdbe4QwvOha0 lcU5tY50Baepx32uwrc53H33W8Hp1fs5n2AzW/H+YCIpfgui6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUne3Ew7bZwNPxf0UpOhRRQOHZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGJiY2ZlYzMtOWY5ZC0z YWJhLTk1ZjAtYjVkODViMDZjNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZOIvWrznLL2xGvvm0VVUMdNwPWCJd2h+HCchBUILVb+UMKUggiNGzv ynsXuBOMR4ui44+7jpmPW6iszWTrPYrHscQgLTyP0pCtTQIwdS5JKayNj5gNPx/4 kabwYImVMROTCDW75AbadFBOF8YPiShBJmtLsPkO7w0RQKQZqTBKtVJG9/xH2IxY lsLGvA57qFdIcX1ExdmAE3XYAbk2NgqZJjikh2jFS+4SMdCFXMPZlLyksOKlsJtw CEWT8XpIy/RDN0DKmU1mbVcRbzgDZxt0/C+x2+tWcFCErT6IZ428qmCpdi/Pe9Vf 4T2O7oPWBCg+AIbHDW5R2i4kUfIaKZs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:19:14 2025 by rpki-client