$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25b1c232-4ff6-3aea-95e4-15efc8b69ce3.roa File: 25b1c232-4ff6-3aea-95e4-15efc8b69ce3.roa (raw, json) Hash identifier: kUcp/Ov5fAaJRtsqHRU6VU39LQf5wmcOVAV1hR6KvKM= Subject key identifier: 38:6A:B2:B4:E2:F5:4A:CD:77:79:68:40:6C:6A:35:4C:84:17:CB:6D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AE891441236507EE634AB0400 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25b1c232-4ff6-3aea-95e4-15efc8b69ce3.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 5650 IP address blocks: 172.252.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:44:12:36:50:7e:e6:34:ab:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=6b9b6b15-c646-48f5-82b3-a02357654625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a1:85:e0:e8:18:88:18:74:f5:7d:ad:5d:ef: 86:34:74:72:14:b7:46:1c:fe:07:55:4a:19:4d:12: 32:30:a1:2d:50:7b:7e:41:85:9b:6e:f5:2a:de:8f: 42:02:73:0f:7c:85:d9:f7:ab:4c:a7:01:a3:c6:9f: e5:52:c1:b1:63:62:95:64:d3:9d:0f:17:06:d8:57: cf:aa:b6:bb:51:8b:5f:9b:4c:77:f8:4f:e3:95:8c: 23:41:bd:d7:f5:88:fa:91:62:da:6f:08:f3:22:bd: 65:97:f5:e7:b8:b2:aa:30:f0:4b:77:db:c2:b6:8b: 9d:19:b4:82:6a:5b:85:8f:a6:b3:f7:f4:ab:00:78: 21:cb:db:ec:9b:2b:e5:13:2a:29:9e:fa:85:66:86: ee:df:ae:3b:bb:e1:8f:62:22:5a:ac:8e:d5:af:b5: b2:42:3c:99:24:57:47:f7:c1:7d:e2:1e:44:5f:ee: 7c:48:5a:fd:e1:15:f0:80:61:56:53:8f:87:c5:f4: 92:30:a8:26:06:b0:52:08:85:10:d9:b0:75:1f:0a: 9e:4f:ae:04:3e:3c:1f:39:5a:06:44:78:39:7f:d8: b8:d4:26:57:01:00:6b:c4:15:c9:16:70:f0:0f:58: c1:b6:e5:d3:56:66:37:fb:42:68:53:83:80:b7:52: a7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6A:B2:B4:E2:F5:4A:CD:77:79:68:40:6C:6A:35:4C:84:17:CB:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25b1c232-4ff6-3aea-95e4-15efc8b69ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ca:9c:fa:be:f7:fe:4b:32:da:eb:b6:44:66:6f:55:b4:b6: 42:11:eb:1c:e2:2b:b0:c8:04:87:d7:97:57:90:64:7f:3c:b7: b8:f4:8a:77:25:21:48:fa:4f:ff:c9:d2:8f:5b:98:1c:48:e9: 77:76:da:8f:d2:24:de:7e:98:92:ad:9f:1d:26:86:c1:bc:e1: e4:a0:68:40:7d:66:04:ba:cb:b5:85:ca:88:f0:94:37:f5:84: cc:92:04:70:10:38:36:b4:c0:e8:e8:f5:40:95:6b:f4:66:6a: 85:cb:b8:6e:51:f7:5d:ea:77:6c:30:77:85:92:10:db:a4:bd: 51:39:c8:b0:93:ec:b8:ce:6f:00:cc:5f:ed:c2:41:1d:03:de: da:bd:a2:80:fa:aa:43:89:a3:2d:01:99:e1:c6:ec:9b:e8:a5: 40:af:2e:41:18:98:04:ef:99:e8:cb:10:e3:db:20:e4:5a:f9: 33:03:c0:d7:e5:07:b7:2b:ec:2f:32:86:50:45:c3:44:1c:0e: c0:a8:e9:b6:ee:03:94:71:c6:bf:d7:8b:01:8d:39:dc:85:66: da:ce:db:f0:9f:a4:dd:84:1e:bf:05:df:af:79:57:ec:a6:1c: b0:8c:65:ae:ba:7f:d0:61:65:7e:48:85:00:fd:b5:79:bc:33: 36:84:5f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokUQSNlB+5jSrBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NmI5YjZiMTUtYzY0Ni00OGY1LTgyYjMtYTAyMzU3NjU0NjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqGF4OgYiBh09X2tXe+GNHRyFLdGHP4HVUoZ TRIyMKEtUHt+QYWbbvUq3o9CAnMPfIXZ96tMpwGjxp/lUsGxY2KVZNOdDxcG2FfP qra7UYtfm0x3+E/jlYwjQb3X9Yj6kWLabwjzIr1ll/XnuLKqMPBLd9vCtoudGbSC aluFj6az9/SrAHghy9vsmyvlEyopnvqFZobu3647u+GPYiJarI7Vr7WyQjyZJFdH 98F94h5EX+58SFr94RXwgGFWU4+HxfSSMKgmBrBSCIUQ2bB1HwqeT64EPjwfOVoG RHg5f9i41CZXAQBrxBXJFnDwD1jBtuXTVmY3+0JoU4OAt1KnMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhqsrTi9UrNd3loQGxqNUyEF8ttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjViMWMyMzItNGZmNi0z YWVhLTk1ZTQtMTVlZmM4YjY5Y2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfKnPq+9/5LMtrrtkRmb1W0tkIR6xziK7DIBIfXl1eQZH88t7j0incl IUj6T//J0o9bmBxI6Xd22o/SJN5+mJKtnx0mhsG84eSgaEB9ZgS6y7WFyojwlDf1 hMySBHAQODa0wOjo9UCVa/RmaoXLuG5R913qd2wwd4WSENukvVE5yLCT7LjObwDM X+3CQR0D3tq9ooD6qkOJoy0BmeHG7JvopUCvLkEYmATvmejLEOPbIORa+TMDwNfl B7cr7C8yhlBFw0QcDsCo6bbuA5Rxxr/XiwGNOdyFZtrO2/CfpN2EHr8F3695V+ym HLCMZa66f9BhZX5IhQD9tXm8MzaEX6k= -----END CERTIFICATE-----Generated at Wed Nov 5 19:27:21 2025 by rpki-client