$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a4f9f0fd-1a7d-3528-90bd-3a4e185e10f3.roa File: a4f9f0fd-1a7d-3528-90bd-3a4e185e10f3.roa (raw, json) Hash identifier: MXHJfUxpkkYzDnfXadZ5ExhYaOwA5CiWPLWjN4f608M= Subject key identifier: 32:C2:08:DF:21:F2:92:AE:8A:57:32:CF:DD:6B:5A:83:B3:14:D1:B5 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A8DC1C7470EF5F6306AD63400 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a4f9f0fd-1a7d-3528-90bd-3a4e185e10f3.roa Signing time: Fri 18 Jul 2025 00:20:11 +0000 ROA not before: Fri 18 Jul 2025 00:20:11 +0000 ROA not after: Thu 16 Oct 2025 00:20:11 +0000 asID: 6939 IP address blocks: 172.252.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:c1:c7:47:0e:f5:f6:30:6a:d6:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 18 00:20:11 2025 GMT Not After : Oct 16 00:20:11 2025 GMT Subject: CN=c97e1f0a-e4dd-40f2-b3d6-85e5c25c59ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8d:b2:7e:8b:09:a3:29:5d:8c:8e:70:fb:ed: f5:dd:e7:a6:83:39:8d:2b:57:27:26:48:61:0f:46: d1:5c:d2:a2:de:67:32:e3:fb:ab:bc:49:63:64:0e: 43:f1:33:bb:13:cc:09:fd:67:3d:8e:3b:2f:94:e6: e1:b8:cf:3c:93:5d:f2:fe:69:51:52:a9:19:b8:9f: c6:bb:fe:cf:73:f2:78:30:ef:69:08:9e:f1:b2:0a: 92:05:3e:32:46:27:49:36:cf:ed:43:7e:39:34:86: 9e:cb:26:64:2e:0a:0c:34:48:2d:ba:98:52:73:d1: c0:fa:f4:40:47:6c:d9:de:42:98:a6:d7:79:49:06: c7:95:0b:bf:e1:30:2e:62:a5:48:1f:dc:71:21:f3: 05:f5:f9:53:32:26:1e:83:77:30:db:1a:e2:0e:64: 02:d7:5b:31:27:0b:e6:eb:b6:0f:32:e2:3d:5f:39: 64:b5:ec:02:af:73:01:8d:96:ef:62:c0:d2:24:7c: 6d:f2:ba:62:7d:65:06:2f:16:50:02:d0:c0:8a:38: 59:5d:20:6c:6b:83:e9:1b:89:b2:f1:aa:15:2d:f6: 4d:f5:dc:74:74:24:61:9c:76:0a:87:b9:07:bd:30: a5:4a:81:b0:8d:d9:46:93:51:11:23:61:78:d6:7d: d4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C2:08:DF:21:F2:92:AE:8A:57:32:CF:DD:6B:5A:83:B3:14:D1:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a4f9f0fd-1a7d-3528-90bd-3a4e185e10f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c6:ed:35:f3:8e:db:ae:ff:2d:59:f5:48:8e:a3:11:33:5b: c9:bc:4b:6e:0d:e3:a4:9e:00:03:62:f8:e3:d8:f9:83:ef:fe: 60:85:65:d5:5e:53:f3:c6:e9:b3:ab:5b:07:6a:09:0c:8c:0e: d9:ad:bf:4c:53:82:36:4a:e7:fe:45:8b:43:b6:57:33:64:b0: d8:df:47:a2:39:5d:73:96:7d:6e:f2:3e:3a:c8:52:6b:48:ad: 31:b6:2f:5a:6b:42:b2:82:7a:c9:25:dd:ca:47:63:65:69:af: 96:1d:22:bd:bf:bc:cf:50:39:41:1d:a7:0f:a0:7e:6a:14:9a: 89:b1:e6:11:20:17:e2:b6:ae:81:b0:1c:a9:c1:54:b3:32:82: 7f:bf:65:5b:e7:10:b9:d8:04:f7:5d:1c:a1:52:bf:b2:36:b4: a7:37:9f:e7:11:0c:b4:f8:13:4f:86:80:8e:2a:c5:61:5a:9d: 3d:48:c8:ea:3c:e6:e9:7e:75:0e:00:dc:6a:cd:a5:cd:66:2f: 28:61:7c:27:80:5a:28:72:06:c6:1c:93:1a:dd:51:6b:f5:b4: 02:61:78:73:80:8e:fd:3a:b4:4d:69:0b:c7:89:22:bf:76:b0: ba:43:f7:6d:07:a5:a4:08:f5:00:55:1f:9d:54:74:ef:b1:d6: 41:fe:42:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqNwcdHDvX2MGrWNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxODAwMjAxMVoXDTI1MTAxNjAwMjAxMVowLzEtMCsGA1UEAxMk Yzk3ZTFmMGEtZTRkZC00MGYyLWIzZDYtODVlNWMyNWM1OWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY2yfosJoyldjI5w++313eemgzmNK1cnJkhh D0bRXNKi3mcy4/urvEljZA5D8TO7E8wJ/Wc9jjsvlObhuM88k13y/mlRUqkZuJ/G u/7Pc/J4MO9pCJ7xsgqSBT4yRidJNs/tQ345NIaeyyZkLgoMNEgtuphSc9HA+vRA R2zZ3kKYptd5SQbHlQu/4TAuYqVIH9xxIfMF9flTMiYeg3cw2xriDmQC11sxJwvm 67YPMuI9XzlktewCr3MBjZbvYsDSJHxt8rpifWUGLxZQAtDAijhZXSBsa4PpG4my 8aoVLfZN9dx0dCRhnHYKh7kHvTClSoGwjdlGk1ERI2F41n3U5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLCCN8h8pKuilcyz91rWoOzFNG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTRmOWYwZmQtMWE3ZC0z NTI4LTkwYmQtM2E0ZTE4NWUxMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnG7TXzjtuu/y1Z9UiOoxEzW8m8S24N46SeAANi+OPY+YPv/mCFZdVe U/PG6bOrWwdqCQyMDtmtv0xTgjZK5/5Fi0O2VzNksNjfR6I5XXOWfW7yPjrIUmtI rTG2L1prQrKCeskl3cpHY2Vpr5YdIr2/vM9QOUEdpw+gfmoUmomx5hEgF+K2roGw HKnBVLMygn+/ZVvnELnYBPddHKFSv7I2tKc3n+cRDLT4E0+GgI4qxWFanT1IyOo8 5ul+dQ4A3GrNpc1mLyhhfCeAWihyBsYckxrdUWv1tAJheHOAjv06tE1pC8eJIr92 sLpD920HpaQI9QBVH51UdO+x1kH+QiI= -----END CERTIFICATE-----Generated at Mon Aug 4 08:21:09 2025 by rpki-client