$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab846b8b-3bec-3add-ad0c-3f80cda456c7.roa File: ab846b8b-3bec-3add-ad0c-3f80cda456c7.roa (raw, json) Hash identifier: ZHX4fQwsmOUPfq+GO/9Z3L3l2+GOkxQsPEWnA01AIrk= Subject key identifier: EE:43:21:5D:AE:C5:8D:F7:4C:27:AA:20:DE:C5:BF:F8:C3:12:AA:39 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A8DC1E2C2725627C83AEE3980 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab846b8b-3bec-3add-ad0c-3f80cda456c7.roa Signing time: Fri 18 Jul 2025 00:20:24 +0000 ROA not before: Fri 18 Jul 2025 00:20:24 +0000 ROA not after: Thu 16 Oct 2025 00:20:24 +0000 asID: 6939 IP address blocks: 172.252.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:c1:e2:c2:72:56:27:c8:3a:ee:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 18 00:20:24 2025 GMT Not After : Oct 16 00:20:24 2025 GMT Subject: CN=e8b31814-dbf7-4487-b2c3-25e5c989c09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:28:6c:45:f3:4e:39:e8:6c:d4:2a:e4:df: 81:61:de:3f:56:1b:9a:0b:c6:92:ce:a6:73:dd:61: 79:5b:5a:60:81:3c:a5:c7:ba:36:d4:46:30:b8:50: e7:19:58:79:09:c1:47:d5:2e:12:ae:fd:66:d2:65: 5d:61:df:92:5c:55:08:1a:50:e8:4b:b2:d6:43:59: 1a:3f:10:da:b1:af:fe:42:cc:9d:b7:12:d7:95:ad: dd:41:74:92:66:1a:d9:81:28:26:a6:69:dd:20:fd: 46:e3:b5:39:c9:ed:60:ca:a3:e1:f2:aa:da:48:61: 1a:7b:ea:3f:17:d0:f7:b2:84:2d:b1:ed:c7:da:7f: 4f:0f:96:0a:3d:11:70:c2:08:4c:97:7f:ee:af:41: 7b:66:e0:20:4d:bd:39:16:b0:f2:e6:68:f5:18:e4: 8c:1c:7d:19:68:12:73:dd:9f:09:74:33:d5:47:6b: 21:b3:6b:78:2c:0d:f2:b9:14:5b:90:85:be:64:ad: dd:06:57:df:7b:55:b4:9d:37:bd:25:d2:f2:90:10: ca:e0:2e:d6:25:0c:2c:81:c9:b1:6a:35:d8:f8:56: 33:f0:2c:1e:24:79:d5:c8:91:30:ce:51:a7:af:65: 23:24:f1:b5:e8:39:72:8f:62:0d:a9:bd:c6:d5:c2: 24:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:43:21:5D:AE:C5:8D:F7:4C:27:AA:20:DE:C5:BF:F8:C3:12:AA:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab846b8b-3bec-3add-ad0c-3f80cda456c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:15:aa:42:7a:c0:96:56:7a:dc:20:59:58:bc:4f:7f:bb:33: 9a:4e:4d:27:ae:85:7d:ff:4c:2e:00:83:c3:0e:c6:8b:a0:1a: ed:4c:c7:cf:b9:0b:e4:b8:44:6f:ad:6b:ad:45:d5:85:cb:6a: 7e:57:21:4e:5a:ab:46:32:a1:cd:58:4c:68:b0:ff:ed:73:75: c2:ee:4d:69:79:cf:91:c3:41:5c:cc:d6:f7:98:53:2b:36:b4: a5:b1:ea:ed:8b:27:e7:56:19:7c:af:0f:e2:9b:d5:95:60:62: c0:47:49:43:45:7b:de:69:fd:69:f2:30:28:f8:b9:89:fa:80: a6:b7:79:b1:83:09:01:04:7f:cd:c9:3a:f4:6d:3f:8d:44:8b: a2:e5:6b:23:95:da:85:fd:90:d6:1f:42:1f:ab:67:8a:b4:14: b1:5a:5e:a2:51:60:98:ef:db:10:63:67:f1:95:ed:9a:ba:37: f8:a4:b0:64:25:9b:6d:e0:c5:20:a9:f6:8a:c0:79:66:62:52: bd:5d:1c:83:44:97:70:7f:7a:3f:69:de:b6:fe:44:13:e3:53: b6:45:02:fd:b3:29:2b:31:e1:ca:a9:c8:bd:6c:7f:8e:49:48: 28:c4:bb:02:f0:99:63:90:87:74:33:27:3e:b8:8f:54:0e:c9: 69:c8:5c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqNweLCclYnyDruOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxODAwMjAyNFoXDTI1MTAxNjAwMjAyNFowLzEtMCsGA1UEAxMk ZThiMzE4MTQtZGJmNy00NDg3LWIyYzMtMjVlNWM5ODljMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIYobEXzTjnobNQq5N+BYd4/VhuaC8aSzqZz 3WF5W1pggTylx7o21EYwuFDnGVh5CcFH1S4Srv1m0mVdYd+SXFUIGlDoS7LWQ1ka PxDasa/+QsydtxLXla3dQXSSZhrZgSgmpmndIP1G47U5ye1gyqPh8qraSGEae+o/ F9D3soQtse3H2n9PD5YKPRFwwghMl3/ur0F7ZuAgTb05FrDy5mj1GOSMHH0ZaBJz 3Z8JdDPVR2shs2t4LA3yuRRbkIW+ZK3dBlffe1W0nTe9JdLykBDK4C7WJQwsgcmx ajXY+FYz8CweJHnVyJEwzlGnr2UjJPG16Dlyj2INqb3G1cIkNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5DIV2uxY33TCeqIN7Fv/jDEqo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWI4NDZiOGItM2JlYy0z YWRkLWFkMGMtM2Y4MGNkYTQ1NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMVqkJ6wJZWetwgWVi8T3+7M5pOTSeuhX3/TC4Ag8MOxougGu1Mx8+5 C+S4RG+ta61F1YXLan5XIU5aq0Yyoc1YTGiw/+1zdcLuTWl5z5HDQVzM1veYUys2 tKWx6u2LJ+dWGXyvD+Kb1ZVgYsBHSUNFe95p/WnyMCj4uYn6gKa3ebGDCQEEf83J OvRtP41Ei6LlayOV2oX9kNYfQh+rZ4q0FLFaXqJRYJjv2xBjZ/GV7Zq6N/iksGQl m23gxSCp9orAeWZiUr1dHINEl3B/ej9p3rb+RBPjU7ZFAv2zKSsx4cqpyL1sf45J SCjEuwLwmWOQh3QzJz64j1QOyWnIXJk= -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:53 2025 by rpki-client