$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6711206e-c75a-3111-910a-553774e6863c.roa File: 6711206e-c75a-3111-910a-553774e6863c.roa (raw, json) Hash identifier: MOC5vREZlzO1iJhLr1MzipeIqZp4stWymiVOz3OxBbE= Subject key identifier: B6:48:C0:02:4B:68:56:EA:41:0A:42:E5:90:2C:43:EC:20:BC:B4:B7 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584EA797D83993A944E47B6B60A0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6711206e-c75a-3111-910a-553774e6863c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10753 IP address blocks: 142.252.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:d8:39:93:a9:44:e4:7b:6b:60:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2b5bdc80-9693-4d67-9441-0741a42030d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:92:97:d9:83:37:1c:00:aa:71:22:64:c1:d6: 57:1d:db:ae:45:a5:b8:b0:22:e4:4a:87:2f:c4:7b: 9f:35:1a:01:ec:07:5e:a4:4c:f9:82:3a:cf:ba:82: 17:0a:f3:65:31:51:b9:68:f2:18:a5:40:6f:9a:e4: 4b:9d:fb:0b:9a:35:40:1a:2b:34:c5:49:4a:ab:5b: e5:b1:c0:55:ce:21:7e:b9:e3:38:24:37:6c:8a:64: 66:3b:d6:23:64:a3:86:f0:ba:36:1f:4b:88:93:fb: d6:8e:6c:d7:b1:d2:97:11:b1:16:1d:b2:9b:9b:62: 40:cd:13:1c:33:12:81:15:87:b2:36:41:dd:68:1e: 03:02:c1:0a:25:dc:40:65:ac:45:29:7d:d3:a6:af: eb:fb:e3:a3:db:66:f4:34:a4:fb:e3:68:7e:05:32: 75:2d:fa:4a:c6:00:3b:19:05:43:9e:6d:42:f1:1d: 92:25:71:36:df:28:cb:32:d6:57:d1:ab:35:b0:ba: 3b:d7:79:6f:2c:1a:01:2a:40:81:4b:ed:2a:00:0d: 06:6f:29:37:df:9b:bf:ee:c7:65:c6:05:bd:87:41: f4:d5:f8:d8:43:e3:15:ff:1b:cc:1a:4b:a7:5b:3c: 44:cc:aa:7a:8f:c7:f3:54:0b:6c:c8:f3:c1:67:c2: cd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:48:C0:02:4B:68:56:EA:41:0A:42:E5:90:2C:43:EC:20:BC:B4:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6711206e-c75a-3111-910a-553774e6863c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ca:f6:41:30:48:7e:fb:3b:37:9b:fc:6d:79:90:1d:b6:a6: 77:1c:9e:70:57:36:09:77:57:c3:59:22:57:7e:f9:71:6c:75: 14:17:c5:dd:72:d0:f2:d1:cd:d0:05:3b:2d:37:2d:83:10:cc: 74:9d:e9:dc:3c:ee:bd:80:d0:1c:30:61:62:0d:07:da:24:57: 1d:db:09:a6:3f:7c:95:c5:6d:d6:94:46:43:d1:af:cc:18:fa: 11:5b:1e:35:b2:b0:5c:8b:da:0c:3c:84:52:47:75:bc:e3:75: ea:14:c3:7c:3c:20:76:32:c2:a6:fb:eb:7d:d5:a3:0c:b8:b7: 63:14:7d:28:2d:b4:a9:fa:9f:46:92:0a:39:dd:eb:84:bf:c6: 83:95:29:86:2d:86:47:b2:56:9d:f9:45:0f:a3:d7:ca:08:b0: 80:c0:a3:67:e5:4b:b6:ab:80:a8:b7:b0:95:0b:a2:1e:1c:46: cb:cc:d5:81:2e:d2:bb:db:65:4f:46:b7:b5:c9:b3:1c:e4:1e: bb:67:f7:af:28:0a:48:e3:7e:ab:66:84:7f:f7:83:e7:a8:04: ba:cf:6a:9d:60:05:a2:08:82:d8:49:05:11:93:a8:0a:ab:30: a9:50:be:21:d8:ab:d9:27:c6:dd:b0:b7:33:62:49:66:b9:2e: ba:e5:d2:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl9g5k6lE5HtrYKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmI1YmRjODAtOTY5My00ZDY3LTk0NDEtMDc0MWE0MjAzMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipKX2YM3HACqcSJkwdZXHduuRaW4sCLkSocv xHufNRoB7AdepEz5gjrPuoIXCvNlMVG5aPIYpUBvmuRLnfsLmjVAGis0xUlKq1vl scBVziF+ueM4JDdsimRmO9YjZKOG8Lo2H0uIk/vWjmzXsdKXEbEWHbKbm2JAzRMc MxKBFYeyNkHdaB4DAsEKJdxAZaxFKX3Tpq/r++Oj22b0NKT742h+BTJ1LfpKxgA7 GQVDnm1C8R2SJXE23yjLMtZX0as1sLo713lvLBoBKkCBS+0qAA0Gbyk335u/7sdl xgW9h0H01fjYQ+MV/xvMGkunWzxEzKp6j8fzVAtsyPPBZ8LN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZIwAJLaFbqQQpC5ZAsQ+wgvLS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjcxMTIwNmUtYzc1YS0z MTExLTkxMGEtNTUzNzc0ZTY4NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7K9kEwSH77Ozeb/G15kB22pnccnnBXNgl3V8NZIld++XFsdRQXxd1y 0PLRzdAFOy03LYMQzHSd6dw87r2A0BwwYWINB9okVx3bCaY/fJXFbdaURkPRr8wY +hFbHjWysFyL2gw8hFJHdbzjdeoUw3w8IHYywqb7633Vowy4t2MUfSgttKn6n0aS Cjnd64S/xoOVKYYthkeyVp35RQ+j18oIsIDAo2flS7argKi3sJULoh4cRsvM1YEu 0rvbZU9Gt7XJsxzkHrtn968oCkjjfqtmhH/3g+eoBLrPap1gBaIIgthJBRGTqAqr MKlQviHYq9knxt2wtzNiSWa5Lrrl0vQ= -----END CERTIFICATE-----Generated at Wed Jul 29 18:18:27 2026 by rpki-client