$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/565eac6b-5114-3987-b117-c3ade21d6fc3.roa File: 565eac6b-5114-3987-b117-c3ade21d6fc3.roa (raw, json) Hash identifier: UFHacXPMFyz3alv/Cx9AtR99oSFoyXrMbS61rYaVH5I= Subject key identifier: C1:84:29:E2:3E:B8:4C:72:30:E5:07:F6:AF:4B:29:75:8A:4E:3A:5D Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584ABEB0DFD26BA5299D9CEA9A80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/565eac6b-5114-3987-b117-c3ade21d6fc3.roa Signing time: Mon 04 Aug 2025 13:00:36 +0000 ROA not before: Mon 04 Aug 2025 13:00:36 +0000 ROA not after: Sun 02 Nov 2025 14:00:36 +0000 asID: 9009 IP address blocks: 172.252.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:b0:df:d2:6b:a5:29:9d:9c:ea:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 4 13:00:36 2025 GMT Not After : Nov 2 14:00:36 2025 GMT Subject: CN=40ca59e6-e6e7-4905-8397-f8d89ff22345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:a1:39:1e:7e:97:28:64:f5:71:14:22:be: 37:ed:a1:9c:ce:a1:d6:86:25:dd:db:bc:56:7f:4b: e2:68:67:c9:ab:ac:46:61:4f:93:64:90:dc:85:1b: 51:18:ae:1e:1f:b7:74:4b:93:ee:0f:b5:41:12:5b: 64:e5:a3:d0:f1:f5:5f:4c:66:f7:00:62:d9:24:65: dd:f4:1d:32:b1:4c:ef:4f:85:ae:70:fe:ec:11:cc: e6:d4:6d:7d:f6:56:58:4e:68:dd:b1:30:09:e1:88: 24:4b:51:ce:31:a8:65:2e:56:4b:07:7b:f4:04:4e: 85:67:04:05:6c:b2:aa:10:62:c1:8b:6f:2f:2f:54: 24:ea:c4:52:df:4e:de:58:c2:54:c7:9a:69:b1:3f: 58:45:9b:d3:7d:5c:15:31:1b:f3:25:4d:59:9d:1c: 8e:17:11:1e:b2:19:cd:c6:4f:7d:bf:38:f3:e6:c8: 0c:90:c6:38:9d:c6:d5:cb:4b:04:b9:3c:d5:ea:8c: b4:ba:35:5e:aa:a9:2f:1c:37:b2:78:9b:03:db:dd: 2b:13:40:0f:33:cd:ee:7e:ee:49:cc:81:8e:31:5e: ca:92:45:3d:32:ee:20:85:26:a3:47:a1:74:06:29: 76:13:8e:6c:d7:67:0f:64:aa:03:43:31:a8:3d:57: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:84:29:E2:3E:B8:4C:72:30:E5:07:F6:AF:4B:29:75:8A:4E:3A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/565eac6b-5114-3987-b117-c3ade21d6fc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5a:60:5d:14:65:b4:de:da:69:4c:ce:63:5a:ec:e6:3d:9b: d9:38:28:4f:12:b8:a9:22:af:41:0a:fd:dd:0b:29:b4:89:eb: fb:6c:ce:3b:58:00:83:dd:6e:e3:c4:02:ef:70:7b:8a:89:f0: 7b:0b:67:6a:f4:aa:8b:fe:44:d6:60:67:4f:79:9e:fe:a1:da: e9:0e:cf:97:8d:ba:cd:7f:a9:55:fb:70:cd:9e:1d:23:e8:35: 55:88:19:70:dd:b1:ed:70:39:a1:b0:50:49:c6:8a:65:54:7c: 41:67:8f:a1:b3:11:88:5c:c6:5f:74:2a:ae:68:88:79:45:43: 42:e2:ec:c6:56:81:b4:38:b1:54:a8:73:37:0e:a8:29:1b:81: a3:f4:1e:01:26:40:fb:6c:2f:a0:87:04:00:7f:d2:fc:1a:20: 4a:22:21:2c:5c:88:e5:43:a0:50:d3:f2:29:fd:1a:64:f0:c8: b8:79:f3:0e:dc:b5:cb:c8:ff:92:59:db:a0:58:18:dd:d8:d3: 80:97:9b:c8:e3:01:4c:75:41:28:3d:20:f8:fa:8e:d1:12:f5: 41:d8:f0:a8:3a:44:b5:ee:c1:74:a3:c0:aa:c5:e5:a5:a3:bd: a6:fa:0b:16:52:89:69:aa:cf:ed:79:04:e1:8d:20:e5:c5:31: ff:be:29:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq+sN/Sa6UpnZzqmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgwNDEzMDAzNloXDTI1MTEwMjE0MDAzNlowLzEtMCsGA1UEAxMk NDBjYTU5ZTYtZTZlNy00OTA1LTgzOTctZjhkODlmZjIyMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCehOR5+lyhk9XEUIr437aGczqHWhiXd27xW f0viaGfJq6xGYU+TZJDchRtRGK4eH7d0S5PuD7VBEltk5aPQ8fVfTGb3AGLZJGXd 9B0ysUzvT4WucP7sEczm1G199lZYTmjdsTAJ4YgkS1HOMahlLlZLB3v0BE6FZwQF bLKqEGLBi28vL1Qk6sRS307eWMJUx5ppsT9YRZvTfVwVMRvzJU1ZnRyOFxEeshnN xk99vzjz5sgMkMY4ncbVy0sEuTzV6oy0ujVeqqkvHDeyeJsD290rE0APM83ufu5J zIGOMV7KkkU9Mu4ghSajR6F0Bil2E45s12cPZKoDQzGoPVd6WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGEKeI+uExyMOUH9q9LKXWKTjpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTY1ZWFjNmItNTExNC0z OTg3LWIxMTctYzNhZGUyMWQ2ZmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExaYF0UZbTe2mlMzmNa7OY9m9k4KE8SuKkir0EK/d0LKbSJ6/tszjtY AIPdbuPEAu9we4qJ8HsLZ2r0qov+RNZgZ095nv6h2ukOz5eNus1/qVX7cM2eHSPo NVWIGXDdse1wOaGwUEnGimVUfEFnj6GzEYhcxl90Kq5oiHlFQ0Li7MZWgbQ4sVSo czcOqCkbgaP0HgEmQPtsL6CHBAB/0vwaIEoiISxciOVDoFDT8in9GmTwyLh58w7c tcvI/5JZ26BYGN3Y04CXm8jjAUx1QSg9IPj6jtES9UHY8Kg6RLXuwXSjwKrF5aWj vab6CxZSiWmqz+15BOGNIOXFMf++Kbg= -----END CERTIFICATE-----Generated at Sat Aug 9 22:46:17 2025 by rpki-client