$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40435dd5-7986-3c05-a3c1-d000ffa050b6.roa File: 40435dd5-7986-3c05-a3c1-d000ffa050b6.roa (raw, json) Hash identifier: 99PSHrhqFZnA7dX5+5krHc7KbvuXFeOq/mFP/9qoIFA= Subject key identifier: DA:2A:E6:BD:45:E8:43:27:54:EE:F2:F2:E5:77:97:35:3A:62:87:2E Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B23318616290CF181E981BD04 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40435dd5-7986-3c05-a3c1-d000ffa050b6.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 59253 IP address blocks: 104.252.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:86:16:29:0c:f1:81:e9:81:bd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=a3fe8d16-dba5-4c47-8906-4d982dc3c45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:b7:1b:01:80:99:e1:f7:03:89:a7:09:bd: b5:b0:64:41:0b:c9:0b:dd:10:fc:44:9a:8b:ae:50: 03:c9:50:ee:29:2f:37:3d:d7:31:ca:46:d7:7f:54: 43:b2:c9:a4:53:cb:b3:70:9b:b0:c0:40:07:08:c4: da:5f:22:75:a4:1d:e8:70:d3:ad:1e:54:24:0c:d5: 00:76:ae:fb:42:92:ad:86:82:0f:58:8a:a6:c4:0f: 4a:93:ae:87:b1:ff:48:15:60:1e:1f:20:2d:54:28: a8:f4:16:49:33:59:82:b3:d9:46:ec:d5:6d:95:3b: 6c:e5:70:68:c3:a8:43:d9:a9:ac:90:4f:bd:63:9e: a2:d1:ad:03:f0:b8:37:a4:26:df:73:db:e4:0c:71: 33:d1:a0:ff:5a:20:19:72:95:dc:f2:00:70:2f:34: fe:76:a7:a5:c8:40:33:00:41:1b:04:aa:c2:7b:95: a2:d8:2b:d3:ba:b4:e7:03:86:f9:31:58:54:89:8e: b0:49:a0:da:ab:63:00:64:cf:8a:73:d2:77:f9:a7: ce:0d:52:88:62:99:a4:e2:50:d6:ff:b9:14:a0:b8: 11:88:b3:56:78:d2:c7:12:37:66:fc:c1:28:53:05: 78:51:e3:b8:36:1b:17:81:9b:29:6d:6c:45:e8:ca: 71:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2A:E6:BD:45:E8:43:27:54:EE:F2:F2:E5:77:97:35:3A:62:87:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40435dd5-7986-3c05-a3c1-d000ffa050b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.252.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ef:45:68:33:15:a0:a8:7c:ce:99:1a:06:5c:d5:02:a4:45: 9d:f6:d2:3d:31:68:e7:2e:ea:c3:fd:8c:62:53:d2:5b:f4:0c: 69:91:b6:48:7e:ab:c2:c1:98:31:64:e8:f7:62:29:f2:26:99: 13:63:4a:80:2c:c0:14:17:3a:47:85:68:21:32:3c:72:51:96: ac:b8:3e:cd:0e:fe:21:49:86:fa:84:d7:10:d4:8a:c1:0b:48: df:21:e1:34:c1:a0:7e:25:ee:78:14:f2:cc:c3:88:ec:f7:5d: 76:f9:2e:ed:9c:68:0c:bd:50:2a:34:e3:f2:61:5e:df:0a:98: 9c:69:eb:c2:8f:f0:d3:3e:db:83:2b:b8:a0:1c:00:ea:2f:f0: 27:7a:53:78:7a:89:a5:c4:de:c1:bb:78:5c:d6:05:8b:05:be: 98:ec:92:0d:7a:03:9f:e7:7e:3e:84:a8:2a:8e:04:43:1f:15: 13:47:71:68:86:a2:c4:e0:83:11:de:8f:4e:18:88:fb:ff:05: f7:3a:e3:1e:c3:df:35:c3:f6:d0:8c:b7:5e:66:83:a1:a3:06: 17:d0:d0:ce:21:af:6b:4f:79:8f:03:f9:c6:be:c5:58:88:7d: f1:16:89:81:e3:ae:38:cc:31:e9:0f:24:99:38:0f:a6:af:d8: 86:f6:bb:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYYWKQzxgemBvQQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YTNmZThkMTYtZGJhNS00YzQ3LTg5MDYtNGQ5ODJkYzNjNDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRG3GwGAmeH3A4mnCb21sGRBC8kL3RD8RJqL rlADyVDuKS83PdcxykbXf1RDssmkU8uzcJuwwEAHCMTaXyJ1pB3ocNOtHlQkDNUA dq77QpKthoIPWIqmxA9Kk66Hsf9IFWAeHyAtVCio9BZJM1mCs9lG7NVtlTts5XBo w6hD2amskE+9Y56i0a0D8Lg3pCbfc9vkDHEz0aD/WiAZcpXc8gBwLzT+dqelyEAz AEEbBKrCe5Wi2CvTurTnA4b5MVhUiY6wSaDaq2MAZM+Kc9J3+afODVKIYpmk4lDW /7kUoLgRiLNWeNLHEjdm/MEoUwV4UeO4NhsXgZspbWxF6Mpx4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoq5r1F6EMnVO7y8uV3lzU6YocuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDA0MzVkZDUtNzk4Ni0z YzA1LWEzYzEtZDAwMGZmYTA1MGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzvRWgzFaCofM6ZGgZc1QKkRZ320j0xaOcu6sP9jGJT0lv0DGmRtkh+ q8LBmDFk6PdiKfImmRNjSoAswBQXOkeFaCEyPHJRlqy4Ps0O/iFJhvqE1xDUisEL SN8h4TTBoH4l7ngU8szDiOz3XXb5Lu2caAy9UCo04/JhXt8KmJxp68KP8NM+24Mr uKAcAOov8Cd6U3h6iaXE3sG7eFzWBYsFvpjskg16A5/nfj6EqCqOBEMfFRNHcWiG osTggxHej04YiPv/Bfc64x7D3zXD9tCMt15mg6GjBhfQ0M4hr2tPeY8D+ca+xViI ffEWiYHjrjjMMekPJJk4D6av2Ib2uyk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:19:44 2025 by rpki-client