$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3cc8bc58-c9d4-36da-b756-a954ca7f7f81.roa File: 3cc8bc58-c9d4-36da-b756-a954ca7f7f81.roa (raw, json) Hash identifier: LTFqKagR3Ddr/JsZ/eNC4p819iYbThkvO0zKoS9SCbc= Subject key identifier: 36:F5:6F:16:AB:68:52:16:12:7B:6C:F6:AB:DC:88:72:BF:63:9C:91 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B41E72580C29D93B50568D580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3cc8bc58-c9d4-36da-b756-a954ca7f7f81.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 18779 IP address blocks: 142.252.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:25:80:c2:9d:93:b5:05:68:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=dc3105d5-d354-4811-9798-e5be5940620b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2c:34:c0:68:73:48:05:c5:8b:35:c3:a9:2c: 11:13:52:79:6e:ce:36:51:7c:f3:e1:c8:7d:af:6a: c8:72:7f:83:16:c2:76:d1:25:b2:1f:de:94:0f:ea: ef:1a:fe:e5:67:ad:08:be:83:76:8a:e3:36:e1:3b: f0:b1:0b:71:00:8e:66:39:35:0a:6c:1a:c8:56:d6: cb:ba:bf:ca:13:8d:14:07:85:3c:0a:c8:b9:b2:c4: 63:c7:b4:b9:a9:de:06:e7:3c:66:48:d2:57:e1:bb: 5e:2d:c3:99:4c:50:a6:cc:62:96:ee:bc:35:7a:0c: e0:f8:bf:90:20:0e:88:2f:35:10:9d:4c:8a:0e:14: 77:7a:11:41:c2:cf:4d:b7:f9:ca:d1:1c:02:b6:2d: 21:0a:73:8e:00:3f:71:b2:d7:cc:b6:8c:5c:c2:da: 9f:c9:3a:d0:b8:57:e7:c3:92:17:a2:a4:0e:0f:85: 53:84:bc:55:87:84:d7:ef:96:14:9c:6b:8a:c9:f0: db:cc:58:10:c2:75:c6:a6:3a:e4:56:91:4a:5d:27: 87:05:3a:c9:ca:30:f8:52:d4:d5:3c:d3:ac:43:47: bc:5f:2f:ee:47:d6:97:67:a2:42:2f:18:c7:a0:27: 25:01:3d:47:f7:86:07:49:7c:d3:94:be:38:6b:ed: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F5:6F:16:AB:68:52:16:12:7B:6C:F6:AB:DC:88:72:BF:63:9C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3cc8bc58-c9d4-36da-b756-a954ca7f7f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0d:bf:ab:aa:6b:43:77:46:d1:d5:75:25:78:3c:30:62:7c: 1e:aa:28:50:7e:33:9e:4d:a3:09:c6:8f:ff:c2:55:e7:3a:62: bc:fa:28:70:b7:0e:3c:04:49:5c:d3:fb:79:a7:cc:52:81:94: 60:52:45:cb:bc:2d:de:e7:4b:ce:82:c6:21:64:f7:20:76:61: 2a:76:a3:c2:40:72:95:46:fb:e7:68:03:5e:0f:b1:c2:1a:93: 3c:63:0b:57:66:97:88:dd:72:c1:ec:a3:d5:34:97:fa:0b:40: a4:e5:24:5b:58:a9:d2:6e:86:85:5e:78:14:58:f6:47:0f:0c: 08:72:32:d5:e4:7f:4a:58:ef:f4:b3:ba:59:bd:4f:a4:3c:e2: 73:95:8e:07:da:35:7c:d9:8a:43:d6:97:a6:cd:bb:0d:87:3b: 54:02:3a:9d:0f:71:66:2b:69:fb:22:b4:1e:91:8f:36:61:af: 44:13:37:45:3a:40:e8:53:4b:ec:3d:ba:aa:f5:9e:20:ae:79: b7:c5:9c:08:a1:b0:2e:98:76:83:d7:48:93:d9:8f:30:05:67: e6:6f:36:d8:e8:8a:94:9d:97:79:b9:8f:4a:ab:58:d5:0f:ea: 0a:94:75:f3:8c:3f:16:e0:b6:55:ff:dc:2b:d4:21:27:eb:ab: d1:b7:d5:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yWAwp2TtQVo1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZGMzMTA1ZDUtZDM1NC00ODExLTk3OTgtZTViZTU5NDA2MjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Cw0wGhzSAXFizXDqSwRE1J5bs42UXzz4ch9 r2rIcn+DFsJ20SWyH96UD+rvGv7lZ60IvoN2iuM24TvwsQtxAI5mOTUKbBrIVtbL ur/KE40UB4U8Csi5ssRjx7S5qd4G5zxmSNJX4bteLcOZTFCmzGKW7rw1egzg+L+Q IA6ILzUQnUyKDhR3ehFBws9Nt/nK0RwCti0hCnOOAD9xstfMtoxcwtqfyTrQuFfn w5IXoqQOD4VThLxVh4TX75YUnGuKyfDbzFgQwnXGpjrkVpFKXSeHBTrJyjD4UtTV PNOsQ0e8Xy/uR9aXZ6JCLxjHoCclAT1H94YHSXzTlL44a+26WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb1bxaraFIWEnts9qvciHK/Y5yRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2NjOGJjNTgtYzlkNC0z NmRhLWI3NTYtYTk1NGNhN2Y3ZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoNv6uqa0N3RtHVdSV4PDBifB6qKFB+M55NownGj//CVec6Yrz6KHC3 DjwESVzT+3mnzFKBlGBSRcu8Ld7nS86CxiFk9yB2YSp2o8JAcpVG++doA14PscIa kzxjC1dml4jdcsHso9U0l/oLQKTlJFtYqdJuhoVeeBRY9kcPDAhyMtXkf0pY7/Sz ulm9T6Q84nOVjgfaNXzZikPWl6bNuw2HO1QCOp0PcWYrafsitB6RjzZhr0QTN0U6 QOhTS+w9uqr1niCuebfFnAihsC6YdoPXSJPZjzAFZ+ZvNtjoipSdl3m5j0qrWNUP 6gqUdfOMPxbgtlX/3CvUISfrq9G31Rk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:29:46 2025 by rpki-client