$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2cb3900e-cb35-3328-8365-8288df41820c.roa File: 2cb3900e-cb35-3328-8365-8288df41820c.roa (raw, json) Hash identifier: LN5e8iV//kYlzJZ6zGL7qp4cjP1BFPf6VXiWH6Uyy6A= Subject key identifier: F8:20:39:72:06:A0:0F:F4:6A:98:47:88:FC:81:A8:3C:DD:01:E0:E9 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A01416EE8A520B91597672580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2cb3900e-cb35-3328-8365-8288df41820c.roa Signing time: Wed 28 May 2025 16:28:25 +0000 ROA not before: Wed 28 May 2025 16:28:25 +0000 ROA not after: Tue 26 Aug 2025 16:28:25 +0000 asID: 401688 IP address blocks: 172.252.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:01:41:6e:e8:a5:20:b9:15:97:67:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: May 28 16:28:25 2025 GMT Not After : Aug 26 16:28:25 2025 GMT Subject: CN=dc830e4c-d112-4709-b96b-d575a7d111be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:19:b6:06:37:95:90:a6:1e:33:63:74:9e:6b: e8:da:fc:bb:78:ba:7b:6d:73:aa:f3:cf:30:94:30: b0:f9:cb:54:e7:82:21:72:2a:52:fd:73:be:64:79: 33:c4:4a:93:8e:c1:33:23:09:f0:b5:e0:6e:c4:a4: c4:05:82:92:88:f0:f8:d1:bc:02:37:5b:5c:36:85: 70:d6:f2:c4:64:28:a1:14:d6:78:2c:56:47:a4:3e: 8f:13:b5:fb:1c:41:f5:6e:55:84:91:ad:6a:fb:64: 13:21:a0:81:4a:62:8d:2a:44:f1:22:fc:76:01:be: e6:55:59:08:6c:ae:07:8b:90:e5:6a:17:3d:d9:58: 33:8a:ba:f7:a3:a0:0b:f5:fa:65:a7:ff:5d:e6:30: ec:06:f6:55:72:78:cb:9c:0d:af:a6:e4:9d:70:6f: 58:7b:7c:c8:1c:88:25:5c:10:c0:c5:c9:f6:f5:4c: 45:0c:91:ff:6b:ed:1c:aa:14:bf:24:2a:77:e9:3d: d5:86:88:ce:d9:e6:2b:45:7e:66:02:f8:e2:3e:bb: 57:3b:08:ac:81:90:9f:e0:6a:27:cb:5f:85:0f:60: 3b:ea:ef:02:14:07:53:da:00:fa:71:a2:2b:60:64: 76:98:4e:59:3c:90:56:02:46:72:b0:28:e8:fb:8f: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:20:39:72:06:A0:0F:F4:6A:98:47:88:FC:81:A8:3C:DD:01:E0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2cb3900e-cb35-3328-8365-8288df41820c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:bd:c3:5e:54:ea:90:aa:f1:ee:75:dc:48:e7:da:3d:ff:be: 9f:5e:9d:ff:cd:4a:a3:4f:4d:9f:9d:b7:49:a8:65:46:a5:ba: 87:17:08:e5:7c:65:f4:56:8e:06:82:cb:6e:a5:2d:98:3a:b7: 4e:c6:68:26:ad:00:12:f8:70:87:94:fa:a2:57:73:dd:73:f3: e3:8b:09:75:e8:c5:ca:78:35:6b:38:d6:9b:db:99:e3:17:91: a2:c0:a0:d1:c8:8c:32:34:1e:b7:c5:b5:ca:ca:76:9e:46:bb: ac:a8:e7:37:0d:a1:f0:7e:78:f2:85:05:1e:08:fb:f4:5d:45: be:b7:54:12:e7:ff:76:58:c9:08:6d:6d:22:de:dd:16:b2:31: a4:27:f7:7e:47:f4:12:a2:e6:d4:bc:22:af:cf:c2:84:6b:8e: 1a:fb:95:c0:00:fe:9c:54:a2:d5:6c:da:1c:2e:c1:11:a3:71: f6:45:14:06:bc:38:f8:a4:6f:13:3f:14:80:5d:8b:60:47:5c: 9a:6a:7c:73:d5:b9:42:90:a4:1e:00:f3:9f:0d:10:e0:87:49: 2a:e1:10:1a:ab:1e:c2:5e:53:8f:d2:39:f6:a4:04:6a:61:18: 7d:47:5e:3a:4a:ec:fd:68:7a:6d:32:2c:03:82:60:4a:4b:ca: 9b:12:69:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoBQW7opSC5FZdnJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDUyODE2MjgyNVoXDTI1MDgyNjE2MjgyNVowLzEtMCsGA1UEAxMk ZGM4MzBlNGMtZDExMi00NzA5LWI5NmItZDU3NWE3ZDExMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBm2BjeVkKYeM2N0nmvo2vy7eLp7bXOq888w lDCw+ctU54IhcipS/XO+ZHkzxEqTjsEzIwnwteBuxKTEBYKSiPD40bwCN1tcNoVw 1vLEZCihFNZ4LFZHpD6PE7X7HEH1blWEka1q+2QTIaCBSmKNKkTxIvx2Ab7mVVkI bK4Hi5Dlahc92Vgzirr3o6AL9fplp/9d5jDsBvZVcnjLnA2vpuSdcG9Ye3zIHIgl XBDAxcn29UxFDJH/a+0cqhS/JCp36T3VhojO2eYrRX5mAvjiPrtXOwisgZCf4Gon y1+FD2A76u8CFAdT2gD6caIrYGR2mE5ZPJBWAkZysCjo+4+obQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPggOXIGoA/0aphHiPyBqDzdAeDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmNiMzkwMGUtY2IzNS0z MzI4LTgzNjUtODI4OGRmNDE4MjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa9w15U6pCq8e513Ejn2j3/vp9enf/NSqNPTZ+dt0moZUaluocXCOV8 ZfRWjgaCy26lLZg6t07GaCatABL4cIeU+qJXc91z8+OLCXXoxcp4NWs41pvbmeMX kaLAoNHIjDI0HrfFtcrKdp5Gu6yo5zcNofB+ePKFBR4I+/RdRb63VBLn/3ZYyQht bSLe3RayMaQn935H9BKi5tS8Iq/PwoRrjhr7lcAA/pxUotVs2hwuwRGjcfZFFAa8 OPikbxM/FIBdi2BHXJpqfHPVuUKQpB4A858NEOCHSSrhEBqrHsJeU4/SOfakBGph GH1HXjpK7P1oem0yLAOCYEpLypsSaak= -----END CERTIFICATE-----Generated at Thu Jun 19 09:37:19 2025 by rpki-client