$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72341b8c-57a8-3ef7-9c2b-4013f12b1e52.roa File: 72341b8c-57a8-3ef7-9c2b-4013f12b1e52.roa (raw, json) Hash identifier: GlNvOAtt/W7n5fifuRE2RJKk+JyRJiHnAfcV2Fy9Wrw= Subject key identifier: FC:8F:FC:CE:4F:E7:3F:0E:B6:D6:6F:29:FC:1D:D9:E9:C5:8A:72:E9 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B9E07D6A272408A5DC5270B00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72341b8c-57a8-3ef7-9c2b-4013f12b1e52.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 172.252.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d6:a2:72:40:8a:5d:c5:27:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b1d28a91-1ebb-44fe-99a5-9ff430968223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a0:8b:45:e8:e2:ec:83:5d:6c:c3:18:9d:48: 71:ce:7a:6e:4c:d8:21:7f:e4:7d:64:04:59:d5:2e: 57:5c:e2:d8:c0:00:e2:68:42:17:28:cb:be:d7:58: 3f:6c:1e:75:c5:89:e9:8b:ba:50:6a:63:9a:59:7e: 44:31:26:c6:5c:ac:27:85:5d:0f:22:9e:9e:ab:98: 44:ce:b1:bd:32:39:00:22:5d:35:ee:16:10:75:6c: 89:9f:54:99:e6:69:01:21:c6:e9:a2:16:c7:1b:15: 44:a4:e5:a2:d7:a8:46:6b:57:f2:ee:45:04:49:d5: 92:97:59:6c:51:9a:92:91:c7:e2:d8:ea:10:80:f3: e4:e2:03:49:83:32:d9:02:78:50:1b:e0:ea:2b:cb: 80:84:07:a2:81:74:b9:42:0b:da:4c:5e:5a:e3:b9: 19:3f:fd:3b:7e:01:5e:e9:be:b1:b3:07:4c:20:e4: e8:6e:b5:4f:8d:27:98:49:9a:87:26:2c:7a:57:6f: 86:3d:18:07:8d:04:51:75:21:b9:0e:ea:ba:95:df: 67:d6:76:38:0c:85:bf:5d:63:65:ca:c2:32:95:e3: 6f:f7:47:f0:bb:fe:f0:dd:eb:56:ce:b2:f8:4b:d1: f0:f8:24:9e:83:6a:9c:e2:5e:04:a9:c3:c9:a0:d6: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8F:FC:CE:4F:E7:3F:0E:B6:D6:6F:29:FC:1D:D9:E9:C5:8A:72:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72341b8c-57a8-3ef7-9c2b-4013f12b1e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f7:e4:db:97:a6:4f:0d:a8:32:fd:c1:82:0a:20:7b:47:59: 4d:41:0c:e8:f9:d1:56:8f:18:86:f9:b6:d6:d0:ac:15:07:0e: 5a:db:a5:bc:e3:9d:8e:32:f6:d4:8a:27:8d:b8:a6:f9:71:41: 4d:60:e8:35:b0:7f:7e:f7:9c:a8:e7:8f:74:bc:2e:ff:8c:c0: c3:28:a1:68:a8:eb:1f:7d:26:1c:a4:e9:13:3b:57:00:00:0a: b4:ed:5a:77:17:77:7f:a5:09:bd:27:a8:b8:21:5c:bd:c1:7c: 44:20:24:ad:75:0d:ca:88:7c:cf:69:29:be:2f:d5:45:a3:ae: 63:fd:ec:52:7a:f9:d4:53:68:1d:1b:be:2f:03:c0:fa:3f:2b: 49:9f:ef:ad:e4:fb:7d:66:97:65:03:be:8a:bf:cd:ea:1a:25: f3:f5:0e:22:fb:da:eb:a7:1d:36:a1:1b:97:d8:e3:81:c0:16: d5:8f:e3:18:39:12:9b:b1:17:14:5d:cf:d4:e3:57:0b:74:a2: 2e:7d:ba:b2:30:26:53:11:9d:ea:88:cd:52:e3:e9:ab:cf:93: 35:b6:d0:36:ae:3b:3e:fd:5d:55:1f:e5:e5:83:66:5c:28:94: 39:fd:78:2c:b6:c8:b0:c3:33:ba:3d:72:b7:99:71:f6:df:39: de:45:b1:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9aickCKXcUnCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YjFkMjhhOTEtMWViYi00NGZlLTk5YTUtOWZmNDMwOTY4MjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKCLReji7INdbMMYnUhxznpuTNghf+R9ZARZ 1S5XXOLYwADiaEIXKMu+11g/bB51xYnpi7pQamOaWX5EMSbGXKwnhV0PIp6eq5hE zrG9MjkAIl017hYQdWyJn1SZ5mkBIcbpohbHGxVEpOWi16hGa1fy7kUESdWSl1ls UZqSkcfi2OoQgPPk4gNJgzLZAnhQG+DqK8uAhAeigXS5QgvaTF5a47kZP/07fgFe 6b6xswdMIOTobrVPjSeYSZqHJix6V2+GPRgHjQRRdSG5Duq6ld9n1nY4DIW/XWNl ysIyleNv90fwu/7w3etWzrL4S9Hw+CSeg2qc4l4EqcPJoNbU9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyP/M5P5z8OttZvKfwd2enFinLpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzIzNDFiOGMtNTdhOC0z ZWY3LTljMmItNDAxM2YxMmIxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL35NuXpk8NqDL9wYIKIHtHWU1BDOj50VaPGIb5ttbQrBUHDlrbpbzj nY4y9tSKJ424pvlxQU1g6DWwf373nKjnj3S8Lv+MwMMooWio6x99Jhyk6RM7VwAA CrTtWncXd3+lCb0nqLghXL3BfEQgJK11DcqIfM9pKb4v1UWjrmP97FJ6+dRTaB0b vi8DwPo/K0mf763k+31ml2UDvoq/zeoaJfP1DiL72uunHTahG5fY44HAFtWP4xg5 EpuxFxRdz9TjVwt0oi59urIwJlMRneqIzVLj6avPkzW20DauOz79XVUf5eWDZlwo lDn9eCy2yLDDM7o9creZcfbfOd5FsVY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:21 2025 by rpki-client