$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b0dcd770-ccf4-3512-a30e-003855ac2181.roa File: b0dcd770-ccf4-3512-a30e-003855ac2181.roa (raw, json) Hash identifier: upIuqn6tninUZ5jnNFdc3n50I+0sK2Fy4ZSze+vKRvE= Subject key identifier: 42:2F:D5:00:BF:77:92:FE:A2:F1:38:FA:B0:D2:C7:3A:37:5A:C2:58 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BBE0CBD047164FE64D830C0C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b0dcd770-ccf4-3512-a30e-003855ac2181.roa Signing time: Tue 04 Nov 2025 00:16:57 +0000 ROA not before: Tue 04 Nov 2025 00:16:57 +0000 ROA not after: Mon 02 Feb 2026 00:16:57 +0000 asID: 834 IP address blocks: 172.252.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:0c:bd:04:71:64:fe:64:d8:30:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 4 00:16:57 2025 GMT Not After : Feb 2 00:16:57 2026 GMT Subject: CN=a1c72f4c-5eef-4db3-8755-ee9a5bee40cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:23:bd:5a:a1:02:7c:d2:cb:22:f3:5d:2f: e5:c8:9b:29:2a:f7:2e:9c:4e:f5:5c:5d:c3:67:de: 9a:2a:03:1a:fd:89:88:67:ea:a6:21:4b:25:14:c3: 50:c5:9c:6d:e5:68:a1:47:ec:8e:ed:78:96:c7:26: 19:9c:16:31:e8:0d:38:79:21:0a:78:09:3a:bb:1d: ca:26:7c:67:8e:56:19:db:dc:fd:7d:18:9a:ec:cf: 17:10:41:ba:30:fe:9f:fe:ff:4d:df:c1:78:92:67: 3d:0c:e7:85:3e:1f:86:79:85:14:ea:fa:fa:25:7c: 24:8f:ae:40:60:e6:7e:3e:ee:79:a1:66:a2:66:78: c0:d1:98:04:b9:58:36:28:89:dc:8a:9a:5d:12:de: 8e:58:05:95:d7:89:dd:7d:53:3c:df:51:8c:a3:93: da:0e:0c:8a:96:03:9b:5d:02:3c:b6:58:09:9c:66: af:02:9d:b3:78:a3:4e:a7:b3:48:0e:4c:c6:62:7b: b5:ab:2a:a3:53:8e:9f:10:63:d7:f0:89:eb:d5:f7: 26:33:89:38:6e:75:45:d0:0c:51:fd:5b:33:15:43: c2:e0:f3:4e:27:f5:45:9c:8e:8b:0f:2a:18:78:ef: 24:4c:a7:e0:66:90:b0:2e:d3:12:f4:88:75:62:90: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2F:D5:00:BF:77:92:FE:A2:F1:38:FA:B0:D2:C7:3A:37:5A:C2:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b0dcd770-ccf4-3512-a30e-003855ac2181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c0:ba:2d:25:93:32:b5:80:7d:19:ac:b0:e0:43:89:4a:2f: 9b:d3:a3:78:0a:0b:bb:ae:91:d7:d3:81:d2:85:3a:5d:e9:24: 53:55:81:80:3a:89:5f:27:6c:83:d1:e0:8c:70:8e:c2:8e:43: d6:e4:cf:b9:70:4b:32:21:d6:75:8e:ed:11:80:6e:bf:37:f5: 29:fc:b9:63:b9:ef:9f:ae:66:a9:69:ce:e2:37:be:5a:b7:8d: 74:00:de:da:28:24:36:6a:de:16:95:59:30:48:3e:f3:75:60: 90:3a:04:3d:3a:fe:40:bc:2b:aa:3c:6a:27:2d:04:43:81:ff: 18:18:5e:8a:fc:d8:a0:62:29:17:78:42:e7:5c:92:b3:9d:11: 48:59:30:6c:45:7d:ba:2d:31:45:91:85:dd:36:d3:d0:3c:56: b2:a9:79:15:bd:52:1f:22:e3:bd:ce:a8:fd:0e:39:b4:f5:b3: ff:f0:5d:8a:01:f3:7a:89:7b:85:d3:2e:d6:68:24:8f:f6:5f: 1c:e2:47:c6:5e:c6:3c:38:96:0e:4e:62:73:0f:51:30:62:d6: f0:84:d3:3a:0d:55:2c:ba:71:e9:61:90:5f:0c:6b:7a:6a:e0: 0e:d4:62:e8:52:7a:93:14:e8:84:8d:87:db:75:aa:48:fa:43: e0:c4:59:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+DL0EcWT+ZNgwwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwNDAwMTY1N1oXDTI2MDIwMjAwMTY1N1owLzEtMCsGA1UEAxMk YTFjNzJmNGMtNWVlZi00ZGIzLTg3NTUtZWU5YTViZWU0MGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm0jvVqhAnzSyyLzXS/lyJspKvcunE71XF3D Z96aKgMa/YmIZ+qmIUslFMNQxZxt5WihR+yO7XiWxyYZnBYx6A04eSEKeAk6ux3K JnxnjlYZ29z9fRia7M8XEEG6MP6f/v9N38F4kmc9DOeFPh+GeYUU6vr6JXwkj65A YOZ+Pu55oWaiZnjA0ZgEuVg2KIncippdEt6OWAWV14ndfVM831GMo5PaDgyKlgOb XQI8tlgJnGavAp2zeKNOp7NIDkzGYnu1qyqjU46fEGPX8Inr1fcmM4k4bnVF0AxR /VszFUPC4PNOJ/VFnI6LDyoYeO8kTKfgZpCwLtMS9Ih1YpD9bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIv1QC/d5L+ovE4+rDSxzo3WsJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjBkY2Q3NzAtY2NmNC0z NTEyLWEzMGUtMDAzODU1YWMyMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDAui0lkzK1gH0ZrLDgQ4lKL5vTo3gKC7uukdfTgdKFOl3pJFNVgYA6 iV8nbIPR4IxwjsKOQ9bkz7lwSzIh1nWO7RGAbr839Sn8uWO575+uZqlpzuI3vlq3 jXQA3tooJDZq3haVWTBIPvN1YJA6BD06/kC8K6o8aictBEOB/xgYXor82KBiKRd4 QudckrOdEUhZMGxFfbotMUWRhd0209A8VrKpeRW9Uh8i473OqP0OObT1s//wXYoB 83qJe4XTLtZoJI/2XxziR8Zexjw4lg5OYnMPUTBi1vCE0zoNVSy6celhkF8Ma3pq 4A7UYuhSepMU6ISNh9t1qkj6Q+DEWf8= -----END CERTIFICATE-----Generated at Wed Nov 5 15:30:05 2025 by rpki-client