$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4625fdcb-f6e7-32ae-844b-3ecf88153586.roa File: 4625fdcb-f6e7-32ae-844b-3ecf88153586.roa (raw, json) Hash identifier: AqRQ7/gEQN8dU7EmW5piEQTKENxz2TGuBKtaFZT7mE0= Subject key identifier: B3:5A:70:95:E6:73:BB:0D:04:97:17:2E:8F:29:DB:DE:54:8E:6A:C8 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B9E07D17A66BD425A2D8C19C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4625fdcb-f6e7-32ae-844b-3ecf88153586.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 172.252.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d1:7a:66:bd:42:5a:2d:8c:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=5c95cb67-7fbc-44b0-8abe-0d75c85891bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d5:44:82:1b:c6:3f:73:03:77:63:0b:a9:32: d7:df:cd:1d:59:5f:6f:1b:56:1a:c0:6a:2f:ae:63: cc:46:f4:80:dd:44:76:d3:67:30:46:5b:67:dc:3c: d7:9c:7e:f4:88:8c:5e:96:2d:1f:56:b1:28:1b:29: 38:c4:6b:ba:97:74:de:0f:fb:8a:91:85:5c:dc:3e: e4:ce:21:e0:d2:d8:1f:5b:72:6e:cd:8b:35:12:d3: e1:e1:5a:7c:7d:c3:2e:52:b0:a1:e9:1e:e4:ca:b6: 87:b7:48:08:88:fb:9d:14:24:c3:9e:41:e4:f7:33: 20:11:c5:ed:c1:14:f3:1e:de:37:2a:ab:18:4a:94: 6e:c4:ff:eb:c1:20:f0:33:77:bb:e8:be:0f:4f:a7: dd:34:13:7a:a2:42:08:73:cd:1c:37:d9:94:fb:55: fb:3f:ba:c6:84:f5:b6:73:d5:44:dc:cc:75:5a:9e: c5:2c:96:6d:9d:85:4d:08:9f:cf:43:be:f9:e5:62: 89:fa:80:13:11:73:39:15:be:04:e5:21:18:20:81: ca:b8:29:e8:47:b2:28:2b:5d:46:1c:f3:89:6c:dd: c1:3e:e1:1f:d9:49:24:12:14:15:4c:ca:37:85:38: eb:48:88:ae:3f:0f:36:21:5d:e3:f9:50:2e:79:7f: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5A:70:95:E6:73:BB:0D:04:97:17:2E:8F:29:DB:DE:54:8E:6A:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4625fdcb-f6e7-32ae-844b-3ecf88153586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0e:81:f3:d7:1f:12:95:b2:75:4f:4f:1b:29:0a:2b:90:e1: 92:1a:6c:8c:00:0a:cd:80:62:ef:7f:f6:9b:27:1e:a9:45:0e: 31:52:1b:6d:09:da:57:4e:1a:b1:3f:4f:a5:96:c5:94:fe:53: f1:af:3a:95:6d:ce:8b:91:b7:48:b5:6b:6c:34:04:b2:50:98: e0:58:c4:4d:57:7f:b7:97:39:a0:26:17:26:68:fe:38:2d:67: d1:4b:40:a3:6e:1a:06:50:58:f1:69:42:c4:7f:73:2e:31:78: da:8e:83:32:aa:b3:f9:0d:9d:91:a4:b6:1b:07:70:26:6b:6c: 83:a6:61:5d:88:74:39:5f:be:e2:bc:05:23:37:2f:14:ef:77: ee:78:cc:54:e8:1c:3d:90:73:95:4f:55:48:41:61:4e:4c:fe: 2f:de:57:a9:14:26:a0:00:2d:7b:c3:19:34:3e:55:5f:b1:0b: 35:1b:8f:ec:d5:ec:62:e3:ff:83:98:2c:e7:34:c7:5a:95:9e: 42:a1:95:d5:d0:c0:e2:48:b8:d1:36:fe:da:07:bf:69:13:4f: 72:c3:7b:d1:4e:c8:51:8f:41:d7:18:17:b0:de:45:c2:32:48: 4f:d0:11:56:5e:7e:97:ac:3f:1a:b4:aa:21:d3:cc:df:1d:1f: 3c:2a:18:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9F6Zr1CWi2MGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NWM5NWNiNjctN2ZiYy00NGIwLThhYmUtMGQ3NWM4NTg5MWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NVEghvGP3MDd2MLqTLX380dWV9vG1YawGov rmPMRvSA3UR202cwRltn3DzXnH70iIxeli0fVrEoGyk4xGu6l3TeD/uKkYVc3D7k ziHg0tgfW3JuzYs1EtPh4Vp8fcMuUrCh6R7kyraHt0gIiPudFCTDnkHk9zMgEcXt wRTzHt43KqsYSpRuxP/rwSDwM3e76L4PT6fdNBN6okIIc80cN9mU+1X7P7rGhPW2 c9VE3Mx1Wp7FLJZtnYVNCJ/PQ7755WKJ+oATEXM5Fb4E5SEYIIHKuCnoR7IoK11G HPOJbN3BPuEf2UkkEhQVTMo3hTjrSIiuPw82IV3j+VAueX/ZjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNacJXmc7sNBJcXLo8p295UjmrIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDYyNWZkY2ItZjZlNy0z MmFlLTg0NGItM2VjZjg4MTUzNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPwbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgOgfPXHxKVsnVPTxspCiuQ4ZIabIwACs2AYu9/9psnHqlFDjFSG20J 2ldOGrE/T6WWxZT+U/GvOpVtzouRt0i1a2w0BLJQmOBYxE1Xf7eXOaAmFyZo/jgt Z9FLQKNuGgZQWPFpQsR/cy4xeNqOgzKqs/kNnZGkthsHcCZrbIOmYV2IdDlfvuK8 BSM3LxTvd+54zFToHD2Qc5VPVUhBYU5M/i/eV6kUJqAALXvDGTQ+VV+xCzUbj+zV 7GLj/4OYLOc0x1qVnkKhldXQwOJIuNE2/toHv2kTT3LDe9FOyFGPQdcYF7DeRcIy SE/QEVZefpesPxq0qiHTzN8dHzwqGEM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:00 2025 by rpki-client