$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa File: af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa (raw, json) Hash identifier: YUrOp0BZ2EqXT1A/uNZYWqufesE1DiqbqRlgJba63B4= Subject key identifier: 6A:9E:58:2D:12:97:DD:8D:74:2F:99:97:21:5E:66:82:E3:3B:E4:21 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A8DC1C5D3247F6BEC6439C168 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa Signing time: Fri 18 Jul 2025 00:20:10 +0000 ROA not before: Fri 18 Jul 2025 00:20:10 +0000 ROA not after: Thu 16 Oct 2025 00:20:10 +0000 asID: 6939 IP address blocks: 172.252.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:c1:c5:d3:24:7f:6b:ec:64:39:c1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 18 00:20:10 2025 GMT Not After : Oct 16 00:20:10 2025 GMT Subject: CN=ff0944e8-c1fd-46c5-9403-d14974d41b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:74:7b:28:8a:14:f9:45:9d:35:2f:23:19: 80:df:1a:e6:06:ad:e8:fe:9a:c6:89:65:16:b3:8c: ae:c3:a6:7e:fa:ff:ba:29:4d:05:fa:8b:33:0a:fa: 99:9d:ec:b5:44:e4:65:04:44:de:e6:ef:28:61:71: 64:eb:76:62:d3:5c:5d:8f:ad:ec:6d:22:9f:28:67: 35:31:6a:85:34:ae:3e:95:5b:89:e6:49:42:cf:af: bd:05:c4:05:93:3b:e8:ab:f2:7f:1a:1c:94:20:31: 53:75:c5:ba:ec:0d:bc:71:cf:35:e7:0e:cc:43:e5: db:89:b9:22:bf:25:7b:88:b2:48:c4:9b:38:c0:f7: 75:00:ce:7c:3c:70:ad:40:85:54:8e:9a:08:ef:f6: 7e:77:ec:e4:29:55:8d:b5:9f:20:fa:e1:c3:32:e0: fe:98:e0:4f:be:03:6c:53:39:35:0d:56:88:ca:73: 7f:80:89:dc:ce:e2:e2:00:27:8b:43:44:86:18:c2: 93:16:67:ee:7b:82:25:ed:b0:63:99:e0:89:b2:9c: 2a:7a:e4:e1:e8:23:cb:c0:ee:49:49:ce:14:10:d2: 76:9e:76:cb:f0:ab:b0:7b:89:4a:a5:2e:0c:ca:b8: 44:42:d0:3c:63:a8:7a:84:e2:09:2f:59:24:26:f9: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9E:58:2D:12:97:DD:8D:74:2F:99:97:21:5E:66:82:E3:3B:E4:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af0fceb2-d3a5-3b21-b0f0-7ccca8a285cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:34:32:1c:17:6d:70:ca:61:13:2b:9e:b4:8e:5e:83:4a:35: bb:d3:d4:b9:2c:47:80:0d:32:da:74:99:e8:ca:25:c6:90:18: 86:86:45:1a:73:b5:26:ee:cd:94:34:5a:d5:46:b5:4e:05:76: 4e:41:34:1f:b5:7b:cd:10:34:92:60:f5:93:ae:7b:f3:6b:98: 54:3f:63:63:56:aa:9f:7e:a8:d8:46:67:ec:76:96:21:1c:75: 00:8c:ee:df:2c:94:62:f5:47:58:c1:d1:6d:b1:79:89:b9:6e: f0:2d:2e:f7:4f:8f:69:94:57:2a:d4:21:f3:48:36:5e:2f:66: 7b:33:f8:58:bb:bd:8d:b1:45:fa:37:4d:cd:9b:40:c1:17:0b: ef:47:46:df:b1:a9:26:b1:0c:d6:a0:1f:d7:99:de:36:91:9e: 7f:27:ef:81:50:18:45:c6:3a:0e:90:1e:e7:b8:c9:ba:cc:4a: 6f:cf:dd:44:02:2a:1f:5e:77:5e:92:ac:ce:66:40:09:63:69: e0:94:92:16:86:bd:1c:c3:11:3a:04:ac:09:59:9d:b0:fc:b1: 50:c3:50:dc:35:2b:42:96:a5:61:d0:ae:1e:79:d4:69:25:ae: 6a:2d:49:35:2c:44:bd:c6:43:27:38:67:b7:e9:9a:d1:ad:69: 16:1f:19:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqNwcXTJH9r7GQ5wWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcxODAwMjAxMFoXDTI1MTAxNjAwMjAxMFowLzEtMCsGA1UEAxMk ZmYwOTQ0ZTgtYzFmZC00NmM1LTk0MDMtZDE0OTc0ZDQxYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrN0eyiKFPlFnTUvIxmA3xrmBq3o/prGiWUW s4yuw6Z++v+6KU0F+oszCvqZney1RORlBETe5u8oYXFk63Zi01xdj63sbSKfKGc1 MWqFNK4+lVuJ5klCz6+9BcQFkzvoq/J/GhyUIDFTdcW67A28cc815w7MQ+Xbibki vyV7iLJIxJs4wPd1AM58PHCtQIVUjpoI7/Z+d+zkKVWNtZ8g+uHDMuD+mOBPvgNs Uzk1DVaIynN/gInczuLiACeLQ0SGGMKTFmfue4Il7bBjmeCJspwqeuTh6CPLwO5J Sc4UENJ2nnbL8Kuwe4lKpS4MyrhEQtA8Y6h6hOIJL1kkJvnuzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqeWC0Sl92NdC+ZlyFeZoLjO+QhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWYwZmNlYjItZDNhNS0z YjIxLWIwZjAtN2NjY2E4YTI4NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ0MhwXbXDKYRMrnrSOXoNKNbvT1LksR4ANMtp0mejKJcaQGIaGRRpz tSbuzZQ0WtVGtU4Fdk5BNB+1e80QNJJg9ZOue/NrmFQ/Y2NWqp9+qNhGZ+x2liEc dQCM7t8slGL1R1jB0W2xeYm5bvAtLvdPj2mUVyrUIfNINl4vZnsz+Fi7vY2xRfo3 Tc2bQMEXC+9HRt+xqSaxDNagH9eZ3jaRnn8n74FQGEXGOg6QHue4ybrMSm/P3UQC Kh9ed16SrM5mQAljaeCUkhaGvRzDEToErAlZnbD8sVDDUNw1K0KWpWHQrh551Gkl rmotSTUsRL3GQyc4Z7fpmtGtaRYfGW0= -----END CERTIFICATE-----Generated at Mon Aug 4 08:16:59 2025 by rpki-client