$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af5f35ec-65fc-33c2-b807-84ca8db37e9e.roa File: af5f35ec-65fc-33c2-b807-84ca8db37e9e.roa (raw, json) Hash identifier: 10zflQank/kOD1/rYThoOKCNuXuFfhS83PeEktbK56Y= Subject key identifier: DD:15:BD:B5:1C:68:C9:EF:E5:ED:81:1B:77:86:19:7F:7B:BC:B0:11 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AAB266F4C3829CD08495BA8C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af5f35ec-65fc-33c2-b807-84ca8db37e9e.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 172.252.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:6f:4c:38:29:cd:08:49:5b:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=57d14e85-80e6-4fd5-8a43-436a661829d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:71:14:fe:5b:9c:9b:1b:25:fd:d5:12:9e: 43:df:cc:07:24:fc:bf:b5:f7:cb:97:48:7d:a7:c8: 14:e2:1b:7a:85:07:92:ba:2c:fd:2c:52:ef:43:fb: dc:da:92:c7:f4:8e:f2:83:de:09:af:03:d9:25:41: f8:ad:db:f5:da:c0:cb:bd:4e:c4:07:6f:d1:d8:12: a2:e4:b7:06:87:c7:b9:5e:1c:db:69:ad:fd:0b:0b: 32:8f:a1:06:b0:75:99:54:37:85:49:5c:23:ca:ad: 5c:53:34:c6:4c:b9:1f:07:8e:7d:5b:32:d5:c7:f9: 1f:15:e5:b0:40:30:7e:bd:e7:11:48:4c:a6:b8:35: b1:3a:e3:19:bc:81:3d:d2:c1:0a:d7:22:c3:63:8f: 91:f3:40:2f:f4:ad:15:10:9d:92:d9:33:a6:35:6a: 3f:6d:41:f4:c7:b3:8e:26:a9:23:d3:07:40:25:d3: 4a:e2:e0:20:5b:8f:5c:10:33:9c:ee:79:bf:1e:dd: 4b:b7:d9:0f:ce:a1:59:53:8c:be:e1:0f:98:2d:92: 6f:c4:2c:ef:5d:2b:a0:65:50:b9:95:2a:e6:f0:15: 23:2e:36:98:98:0f:eb:cb:e6:fa:49:46:c2:69:42: 36:94:36:17:57:df:be:7b:de:d7:e6:99:59:f6:d8: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:15:BD:B5:1C:68:C9:EF:E5:ED:81:1B:77:86:19:7F:7B:BC:B0:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af5f35ec-65fc-33c2-b807-84ca8db37e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f4:8d:05:a9:23:d8:7e:aa:d5:0e:3f:81:53:80:8a:e0:b3: b2:9d:58:af:b6:17:17:c8:84:ef:73:93:fa:31:d7:92:17:d3: 08:19:d5:4f:88:1b:ec:3d:1f:01:43:c0:dc:4e:c2:86:a3:53: 1b:10:00:75:6e:1b:25:4e:74:b7:cd:fa:c7:cd:7d:af:93:dc: 48:5e:49:9c:1b:a2:8f:b0:51:c5:4c:94:22:a5:33:e6:e1:df: 86:de:c8:fa:7e:13:12:88:3a:6c:8e:a9:6a:77:a7:b2:08:d9: 1d:0a:8d:47:1a:72:b1:2b:92:59:89:83:b6:5c:f9:4d:ca:55: 5b:d2:61:54:a1:4f:c8:7b:6d:fc:81:e0:90:46:5f:f0:ba:08: fa:b1:81:b8:7c:cd:5f:b6:76:47:63:ac:6c:e8:8a:af:65:dc: c4:cb:a3:3c:7e:4b:ec:be:3a:0d:a3:7c:ad:bc:5a:7c:cf:94: 10:b3:5a:2c:ee:e4:58:15:dd:20:03:ac:56:36:68:fe:de:19: 0c:0c:10:2f:d8:76:1d:9e:c0:17:a0:82:e3:d5:50:bc:42:4c: 93:3c:cc:80:29:e3:8b:c9:87:f1:a1:1f:6f:aa:f3:74:c9:f4: d9:bc:f7:71:be:9f:8a:8d:3b:ec:d5:09:11:da:e2:82:78:2c: 11:f3:49:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJm9MOCnNCElbqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NTdkMTRlODUtODBlNi00ZmQ1LThhNDMtNDM2YTY2MTgyOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzJxFP5bnJsbJf3VEp5D38wHJPy/tffLl0h9 p8gU4ht6hQeSuiz9LFLvQ/vc2pLH9I7yg94JrwPZJUH4rdv12sDLvU7EB2/R2BKi 5LcGh8e5Xhzbaa39Cwsyj6EGsHWZVDeFSVwjyq1cUzTGTLkfB459WzLVx/kfFeWw QDB+vecRSEymuDWxOuMZvIE90sEK1yLDY4+R80Av9K0VEJ2S2TOmNWo/bUH0x7OO Jqkj0wdAJdNK4uAgW49cEDOc7nm/Ht1Lt9kPzqFZU4y+4Q+YLZJvxCzvXSugZVC5 lSrm8BUjLjaYmA/ry+b6SUbCaUI2lDYXV9++e97X5plZ9tgeqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0VvbUcaMnv5e2BG3eGGX97vLARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWY1ZjM1ZWMtNjVmYy0z M2MyLWI4MDctODRjYThkYjM3ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPx7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj0jQWpI9h+qtUOP4FTgIrgs7KdWK+2FxfIhO9zk/ox15IX0wgZ1U+I G+w9HwFDwNxOwoajUxsQAHVuGyVOdLfN+sfNfa+T3EheSZwboo+wUcVMlCKlM+bh 34beyPp+ExKIOmyOqWp3p7II2R0KjUcacrErklmJg7Zc+U3KVVvSYVShT8h7bfyB 4JBGX/C6CPqxgbh8zV+2dkdjrGzoiq9l3MTLozx+S+y+Og2jfK28WnzPlBCzWizu 5FgV3SADrFY2aP7eGQwMEC/Ydh2ewBegguPVULxCTJM8zIAp44vJh/GhH2+q83TJ 9Nm893G+n4qNO+zVCRHa4oJ4LBHzSTM= -----END CERTIFICATE-----Generated at Wed Aug 6 11:16:05 2025 by rpki-client