$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29cc249c-04ec-33c0-bc78-aa48fb2d0169.roa File: 29cc249c-04ec-33c0-bc78-aa48fb2d0169.roa (raw, json) Hash identifier: hg25lwGQsB0pYZF17SDRZtYueThbTMTvdWYEyYmKtIs= Subject key identifier: 69:49:AA:E4:61:FA:A8:EE:CB:19:84:FE:04:AA:10:81:DE:DA:63:B6 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B41E704F5300295872B3FB840 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29cc249c-04ec-33c0-bc78-aa48fb2d0169.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 18779 IP address blocks: 142.252.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:04:f5:30:02:95:87:2b:3f:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=7cb0549e-5941-444e-a75f-652ec1e37995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:67:aa:aa:03:e6:c7:ed:15:4f:8d:18:98: b6:5f:31:02:c8:8e:8d:be:8f:7a:69:dd:f1:ac:49: 13:7f:f3:c7:0c:00:6b:53:01:67:98:cd:fd:c8:97: b6:4b:51:54:d1:b4:6c:d1:e3:4d:08:8b:12:e3:4f: 6b:95:7c:c6:e2:31:62:30:ec:ee:61:c7:8c:2c:e5: ad:dc:c0:dd:25:3f:5c:ee:d7:0c:bd:d6:ee:f0:1f: 40:58:3d:2a:6f:52:ad:8f:c2:e4:1e:f9:2a:7c:99: f2:60:c3:99:b3:ef:2c:9d:9a:8c:15:bf:fd:b9:0d: d6:97:77:41:30:73:db:bf:4e:d5:40:ac:c5:6d:85: 38:e7:3d:ac:c2:bf:a7:a9:43:24:f5:e9:f8:c8:13: 20:e6:3a:7f:82:ab:96:86:7d:54:56:21:1a:7b:fe: 8b:30:ab:64:c6:ae:28:8b:67:09:e6:d0:69:b5:25: bb:53:81:5c:8f:c0:c0:58:53:04:ce:9a:26:50:e5: c7:6b:0f:bc:e2:19:71:3a:44:6e:7d:73:d7:46:53: 0e:b0:14:94:13:fb:8b:f7:15:b8:34:3b:f4:93:0d: da:bd:7e:17:dd:60:a9:15:43:a1:72:9e:a1:d9:39: 95:19:79:74:54:a1:e9:88:7e:1a:c6:f2:86:97:ef: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:49:AA:E4:61:FA:A8:EE:CB:19:84:FE:04:AA:10:81:DE:DA:63:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29cc249c-04ec-33c0-bc78-aa48fb2d0169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:07:14:ad:a8:ad:b1:a0:c2:1f:c1:aa:d8:11:25:bb:ba:dd: 7a:7e:c1:bf:53:1f:05:e7:b3:2c:02:c0:0e:79:db:30:d8:bf: c5:7b:aa:6d:1c:01:f6:30:c3:5a:d4:b9:81:7b:06:bc:a7:07: 82:a1:29:d0:81:94:5f:8b:fd:47:7b:7d:53:93:f5:28:53:0b: f6:ba:c2:22:c3:82:5b:f8:a7:be:c8:1c:6e:57:c3:1f:95:71: be:f7:10:bb:b4:65:32:8d:fc:ac:af:76:a0:18:3e:b8:08:ae: c3:10:8a:c5:37:be:50:6a:02:cf:a8:af:a6:12:5a:f7:b7:d9: b1:e3:70:cb:3c:f9:30:59:5e:27:6f:88:f4:5e:29:00:a1:50: 9b:d1:7e:47:45:9a:ad:30:02:03:33:a0:15:1d:6a:a2:5c:eb: 4b:fc:ae:85:d8:28:07:96:60:1d:8a:66:81:17:89:01:62:16: ba:dd:5a:c7:93:6d:48:94:e9:6b:45:33:9e:9c:79:43:2d:8a: f5:60:18:2e:2e:21:82:11:62:58:b9:eb:ee:b1:e8:22:eb:ed: 73:77:43:83:2c:91:b3:46:df:62:00:cc:04:65:84:ec:f5:59: fa:70:33:96:99:77:2d:1c:dc:d5:de:1d:d0:b0:d4:5d:4a:40: df:aa:56:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5wT1MAKVhys/uEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk N2NiMDU0OWUtNTk0MS00NDRlLWE3NWYtNjUyZWMxZTM3OTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMxnqqoD5sftFU+NGJi2XzECyI6Nvo96ad3x rEkTf/PHDABrUwFnmM39yJe2S1FU0bRs0eNNCIsS409rlXzG4jFiMOzuYceMLOWt 3MDdJT9c7tcMvdbu8B9AWD0qb1Ktj8LkHvkqfJnyYMOZs+8snZqMFb/9uQ3Wl3dB MHPbv07VQKzFbYU45z2swr+nqUMk9en4yBMg5jp/gquWhn1UViEae/6LMKtkxq4o i2cJ5tBptSW7U4Fcj8DAWFMEzpomUOXHaw+84hlxOkRufXPXRlMOsBSUE/uL9xW4 NDv0kw3avX4X3WCpFUOhcp6h2TmVGXl0VKHpiH4axvKGl+8ZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlJquRh+qjuyxmE/gSqEIHe2mO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjljYzI0OWMtMDRlYy0z M2MwLWJjNzgtYWE0OGZiMmQwMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvw5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8HFK2orbGgwh/BqtgRJbu63Xp+wb9THwXnsywCwA552zDYv8V7qm0c AfYww1rUuYF7BrynB4KhKdCBlF+L/Ud7fVOT9ShTC/a6wiLDglv4p77IHG5Xwx+V cb73ELu0ZTKN/KyvdqAYPrgIrsMQisU3vlBqAs+or6YSWve32bHjcMs8+TBZXidv iPReKQChUJvRfkdFmq0wAgMzoBUdaqJc60v8roXYKAeWYB2KZoEXiQFiFrrdWseT bUiU6WtFM56ceUMtivVgGC4uIYIRYli56+6x6CLr7XN3Q4MskbNG32IAzARlhOz1 WfpwM5aZdy0c3NXeHdCw1F1KQN+qVmA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:12 2025 by rpki-client