$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e12912f-e7c6-3b29-a54e-19e04ecf93ba.roa File: 3e12912f-e7c6-3b29-a54e-19e04ecf93ba.roa (raw, json) Hash identifier: TT6L7iT1jOZ7Ra4G7Fz3X1apvJQf4GZgKNqBzAdNH2c= Subject key identifier: 49:D1:5A:F5:1C:C7:86:DB:FB:FC:28:79:38:38:21:85:49:E0:A5:54 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A8DC1ED5862C184E5C26F4080 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e12912f-e7c6-3b29-a54e-19e04ecf93ba.roa Signing time: Fri 18 Jul 2025 00:20:29 +0000 ROA not before: Fri 18 Jul 2025 00:20:29 +0000 ROA not after: Thu 16 Oct 2025 00:20:29 +0000 asID: 6939 IP address blocks: 172.252.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:c1:ed:58:62:c1:84:e5:c2:6f:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 18 00:20:29 2025 GMT Not After : Oct 16 00:20:29 2025 GMT Subject: CN=456a4909-335d-40eb-b3a7-64fe4871c680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:19:f0:2d:57:57:be:ee:6a:fa:0e:a9:0a: 7f:f1:81:ea:62:43:89:6d:d1:7b:c5:17:b7:48:70: 92:37:b4:96:7f:81:bc:32:c0:9a:79:5f:14:b5:8f: ed:7c:54:96:cb:67:3a:3b:39:6c:7e:aa:71:e1:5d: cb:99:94:a1:b0:c7:37:b5:97:60:33:30:1c:55:28: da:52:d6:1e:16:38:fc:70:ca:48:b4:1e:11:76:84: d9:fb:16:87:7f:22:e0:81:ae:44:31:33:f7:4c:ba: ca:75:60:2a:b4:03:b9:aa:6f:32:51:c5:e6:27:59: 43:4e:e5:e0:3d:7c:67:87:25:4c:31:6d:26:73:49: 4a:ef:53:ef:43:0d:b7:2e:77:e2:ad:5f:4f:66:ba: a5:1d:3e:c9:9f:c8:29:4b:4c:23:3b:80:58:8a:69: c5:01:d3:3a:0c:b4:9e:9c:b2:d1:97:31:bc:95:d2: 4e:bd:83:64:6f:81:3e:16:ee:4d:8d:4a:01:2d:88: 73:68:aa:31:72:50:b8:cf:71:c0:be:87:cf:24:99: ae:47:3b:13:d8:a8:bd:0e:8d:9c:0c:40:2e:d5:c0: a3:58:29:08:e8:f5:9b:0a:c4:82:3b:50:81:2f:cf: 3c:28:af:50:1e:57:e5:3c:e1:38:4f:df:d1:52:02: 52:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D1:5A:F5:1C:C7:86:DB:FB:FC:28:79:38:38:21:85:49:E0:A5:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e12912f-e7c6-3b29-a54e-19e04ecf93ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5c:ed:19:86:07:05:c0:97:25:7a:0f:63:58:5d:ce:cf:fe: 30:29:75:1d:9a:ea:23:9a:d6:fc:d5:6d:80:ac:3a:0d:b9:9a: c5:65:6c:1d:ec:18:90:9f:a1:a8:42:98:eb:fa:ab:44:ca:b1: 11:61:41:86:15:74:36:fd:fc:61:14:6b:84:2c:0a:13:f6:31: ae:07:d2:2d:0a:f7:73:1d:32:53:64:ca:a8:bd:84:5d:05:c0: ff:53:07:ba:7b:aa:2a:9b:f0:7a:26:07:f8:47:f6:23:02:9f: 2d:df:e3:4f:76:ba:ee:8a:cb:a9:27:f8:7e:c8:8f:47:c6:db: 38:59:90:ee:6f:3d:e7:f9:d1:f2:1d:21:63:21:71:2d:21:31: c4:52:d6:bb:4c:ea:e6:92:8b:5b:05:48:95:ce:7a:fe:3b:02: 5d:db:e0:8a:c5:2b:65:bf:8a:fd:e3:25:ed:85:39:74:6a:dd: 92:82:d6:e1:96:4d:ec:f9:46:df:d8:a8:a9:fb:87:de:ab:2e: 29:6e:84:44:46:55:b7:ca:50:d2:91:ed:1c:a8:aa:cb:6a:bf: a5:2e:7b:7e:cb:0e:ad:3e:7b:65:4d:10:1d:c1:8e:a7:6b:cc: a0:6b:d2:e7:80:77:a0:05:f5:a0:25:80:b8:21:73:6c:a5:90: 60:ac:07:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqNwe1YYsGE5cJvQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxODAwMjAyOVoXDTI1MTAxNjAwMjAyOVowLzEtMCsGA1UEAxMk NDU2YTQ5MDktMzM1ZC00MGViLWIzYTctNjRmZTQ4NzFjNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiIZ8C1XV77uavoOqQp/8YHqYkOJbdF7xRe3 SHCSN7SWf4G8MsCaeV8UtY/tfFSWy2c6Ozlsfqpx4V3LmZShsMc3tZdgMzAcVSja UtYeFjj8cMpItB4RdoTZ+xaHfyLgga5EMTP3TLrKdWAqtAO5qm8yUcXmJ1lDTuXg PXxnhyVMMW0mc0lK71PvQw23LnfirV9PZrqlHT7Jn8gpS0wjO4BYimnFAdM6DLSe nLLRlzG8ldJOvYNkb4E+Fu5NjUoBLYhzaKoxclC4z3HAvofPJJmuRzsT2Ki9Do2c DEAu1cCjWCkI6PWbCsSCO1CBL888KK9QHlflPOE4T9/RUgJSrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnRWvUcx4bb+/woeTg4IYVJ4KVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2UxMjkxMmYtZTdjNi0z YjI5LWE1NGUtMTllMDRlY2Y5M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPw/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtc7RmGBwXAlyV6D2NYXc7P/jApdR2a6iOa1vzVbYCsOg25msVlbB3s GJCfoahCmOv6q0TKsRFhQYYVdDb9/GEUa4QsChP2Ma4H0i0K93MdMlNkyqi9hF0F wP9TB7p7qiqb8HomB/hH9iMCny3f4092uu6Ky6kn+H7Ij0fG2zhZkO5vPef50fId IWMhcS0hMcRS1rtM6uaSi1sFSJXOev47Al3b4IrFK2W/iv3jJe2FOXRq3ZKC1uGW Tez5Rt/YqKn7h96rLiluhERGVbfKUNKR7Ryoqstqv6Uue37LDq0+e2VNEB3Bjqdr zKBr0ueAd6AF9aAlgLghc2ylkGCsB7Q= -----END CERTIFICATE-----Generated at Mon Aug 4 11:18:48 2025 by rpki-client