$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91e33bd4-f943-3939-aafc-4eadacf2864e.roa File: 91e33bd4-f943-3939-aafc-4eadacf2864e.roa (raw, json) Hash identifier: QO5ycHsECfXtdOpESwi0HVAc8rXaT15KLXR/s6apU8w= Subject key identifier: 3F:DD:45:DD:F1:1C:89:64:60:50:60:80:16:2D:0D:FC:E9:71:40:31 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A7D15E22FF69E7764BB9C44C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91e33bd4-f943-3939-aafc-4eadacf2864e.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 64267 IP address blocks: 172.252.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:e2:2f:f6:9e:77:64:bb:9c:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=8e0134e2-6b3a-4755-98d4-38e3c965cba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:54:ad:d0:92:73:5d:95:b8:e9:2d:96:0a: 14:3f:50:ce:19:d4:14:3a:17:ef:26:3b:df:2a:aa: fa:c0:66:52:9e:cb:d0:af:3e:30:a3:5f:b4:94:c3: 04:ef:50:04:64:ec:02:e4:37:c3:05:96:e1:a4:69: 1e:40:6b:f2:51:86:8b:1a:8b:fa:6d:b6:a4:12:3f: fd:a7:9c:94:a5:b9:ab:41:e3:ee:1d:b4:e2:5b:70: f6:ed:fc:34:55:6f:f1:4b:2b:85:84:60:9d:9b:ef: 1d:54:19:bf:de:0e:50:50:b3:14:a3:33:6e:5d:d6: c8:25:e8:e8:56:7f:52:17:da:1f:19:b9:39:04:00: 77:10:9b:35:4b:b7:9b:8f:8d:eb:f1:a2:91:09:ae: 8d:9d:c8:7c:26:f8:40:ee:9b:5f:73:7d:59:ec:40: 4c:16:24:2b:78:8e:74:bb:8a:6d:ee:47:6a:40:68: d6:85:38:fd:a1:41:ef:e0:70:92:19:61:8e:76:57: e3:91:5c:a3:2d:ad:db:06:2e:5f:f8:6d:3a:94:53: 75:5f:dd:1b:22:1b:ca:cd:9d:cc:98:58:d7:34:a1: 05:95:08:9d:9d:69:f6:5b:3c:95:a1:75:77:67:20: 1f:82:4b:97:aa:58:8b:06:9f:88:e9:7b:87:0c:00: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DD:45:DD:F1:1C:89:64:60:50:60:80:16:2D:0D:FC:E9:71:40:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91e33bd4-f943-3939-aafc-4eadacf2864e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ec:3a:27:c6:70:d5:44:d4:62:44:a0:4a:b3:af:69:25:7b: dd:03:c6:3c:4f:00:f9:9d:59:e9:b0:8a:73:a2:01:6e:07:60: 27:12:76:65:59:c3:0c:23:54:47:a1:9b:75:cd:4b:92:ef:18: e7:73:b6:d6:44:95:bd:99:53:e7:e8:b5:b3:b1:56:a8:1c:c2: 8f:57:b9:61:7a:38:b4:5f:52:dd:21:1f:b0:5f:c4:d5:c3:32: ba:de:24:f7:5a:66:18:fc:73:81:c0:db:ed:cf:71:c0:2e:18: cd:da:7b:71:18:4e:c2:01:5c:f4:c7:78:40:b9:e6:ed:31:8c: e6:d3:1e:e8:3a:79:d0:2b:cc:d5:a2:87:ed:ca:c8:c6:af:92: e7:02:47:a5:7c:03:36:86:a2:2e:43:0b:f1:87:7b:40:53:92: a9:1d:d2:27:59:97:c4:e5:14:fa:f3:8f:b1:34:74:c1:23:9d: cf:dd:08:73:65:4f:36:02:92:04:5a:f7:1c:17:d0:91:dc:fb: 6b:be:94:65:6f:2d:3a:5d:f2:1e:f3:f5:4f:01:70:a2:bd:7a: 85:cc:00:96:74:eb:37:a9:7b:12:c2:00:a9:ec:45:58:6c:86: ac:a3:66:26:aa:9e:2d:4d:1a:2b:31:3c:ed:be:8e:70:ec:46: bb:2c:25:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FeIv9p53ZLucRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk OGUwMTM0ZTItNmIzYS00NzU1LTk4ZDQtMzhlM2M5NjVjYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSFUrdCSc12VuOktlgoUP1DOGdQUOhfvJjvf Kqr6wGZSnsvQrz4wo1+0lMME71AEZOwC5DfDBZbhpGkeQGvyUYaLGov6bbakEj/9 p5yUpbmrQePuHbTiW3D27fw0VW/xSyuFhGCdm+8dVBm/3g5QULMUozNuXdbIJejo Vn9SF9ofGbk5BAB3EJs1S7ebj43r8aKRCa6Nnch8JvhA7ptfc31Z7EBMFiQreI50 u4pt7kdqQGjWhTj9oUHv4HCSGWGOdlfjkVyjLa3bBi5f+G06lFN1X90bIhvKzZ3M mFjXNKEFlQidnWn2WzyVoXV3ZyAfgkuXqliLBp+I6XuHDAAjLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/dRd3xHIlkYFBggBYtDfzpcUAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTFlMzNiZDQtZjk0My0z OTM5LWFhZmMtNGVhZGFjZjI4NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPx2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHsOifGcNVE1GJEoEqzr2kle90DxjxPAPmdWemwinOiAW4HYCcSdmVZ wwwjVEehm3XNS5LvGOdzttZElb2ZU+fotbOxVqgcwo9XuWF6OLRfUt0hH7BfxNXD MrreJPdaZhj8c4HA2+3PccAuGM3ae3EYTsIBXPTHeEC55u0xjObTHug6edArzNWi h+3KyMavkucCR6V8AzaGoi5DC/GHe0BTkqkd0idZl8TlFPrzj7E0dMEjnc/dCHNl TzYCkgRa9xwX0JHc+2u+lGVvLTpd8h7z9U8BcKK9eoXMAJZ06zepexLCAKnsRVhs hqyjZiaqni1NGisxPO2+jnDsRrssJXM= -----END CERTIFICATE-----Generated at Mon Aug 4 08:20:32 2025 by rpki-client