$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd9ab602-f8f4-394b-a2f5-3d3c42c84576.roa File: cd9ab602-f8f4-394b-a2f5-3d3c42c84576.roa (raw, json) Hash identifier: e97zYUgorXgArmvg1AgYT0X251nCksDL382Az/p7fVA= Subject key identifier: CF:6C:53:40:77:55:81:E2:A3:89:14:91:D4:3D:AA:F1:A0:15:CF:97 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AB221795547B3BE6546871080 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd9ab602-f8f4-394b-a2f5-3d3c42c84576.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 18779 IP address blocks: 172.252.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:79:55:47:b3:be:65:46:87:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=af80af06-4f51-4cee-89bd-b5e83b6d3ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3f:63:3f:a5:68:dc:93:b3:a3:fb:18:f1:da: 3f:fd:7e:e7:1e:b8:89:04:54:d4:0b:be:f5:c6:ed: 3c:e9:c6:b8:97:ff:5e:aa:b5:ec:aa:fe:94:7a:ec: 5d:6e:b6:52:fe:a6:37:0b:19:e5:4b:76:98:6a:dc: 56:1e:fe:a4:2f:f1:70:ec:af:23:62:37:4c:5d:5c: 5c:2a:f2:0d:44:03:d0:31:2e:34:ee:8e:51:c2:ad: 1b:9e:9a:37:93:c4:13:3b:4c:a7:0a:04:e8:86:d6: 80:32:f3:5a:61:69:13:1d:11:2f:0b:27:8e:a6:2d: 78:0b:71:6b:f0:4b:e8:ee:9a:2a:a6:7c:13:50:f4: f4:8a:d0:b1:9c:ac:91:eb:8f:79:2e:2b:7d:05:1b: 3a:96:16:8f:63:e2:d2:61:35:90:48:f4:7d:23:7e: 03:b2:e4:ca:fc:8f:08:c9:a0:1f:8d:1f:d3:52:0b: 11:78:e7:69:d4:64:70:0b:3c:c0:bf:4c:2f:56:12: 94:41:1e:b8:0a:01:2c:30:ac:cb:69:fc:32:fb:97: 9a:55:0c:79:8a:df:b0:21:42:05:a8:26:cf:2f:10: e4:17:c9:34:4b:f3:76:83:bb:cb:bb:53:00:42:57: 4d:ea:d2:ff:21:46:81:bc:c4:3e:41:ed:30:90:fc: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6C:53:40:77:55:81:E2:A3:89:14:91:D4:3D:AA:F1:A0:15:CF:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd9ab602-f8f4-394b-a2f5-3d3c42c84576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6a:70:58:e0:45:1d:b0:4a:f3:f8:d8:54:2a:3e:72:e7:32: e5:b5:5b:c0:2e:d1:3f:0d:ec:11:c1:2c:b4:3d:d0:e6:a9:1f: cf:49:31:c2:c0:09:40:94:3d:5a:92:59:41:a9:95:2b:0a:22: 7f:93:5b:71:d0:92:f9:1e:3a:82:04:bd:2b:ad:c8:ed:30:ca: d6:7f:17:53:1f:e2:41:98:9e:f0:85:07:8e:30:62:a3:6e:c7: 0c:e9:1a:44:dd:ee:f2:0a:63:29:17:d1:2c:de:7b:4b:dc:fe: f0:87:f8:47:59:8e:2d:b7:fc:3d:2b:f4:e7:61:42:bc:14:4c: 6f:0e:7b:5a:8b:81:87:e9:4d:11:74:d0:94:7e:51:a5:52:89: c2:1b:cd:35:e5:8a:48:c8:f2:81:b3:06:b7:4e:e8:62:9f:fe: 53:66:8b:5b:27:e6:e1:f3:41:ca:30:89:03:fd:46:4b:c9:29: 04:bf:60:d2:c9:43:b1:b9:51:bf:ab:c7:6e:d9:61:a6:ab:59: 7e:d1:1b:1d:1c:7b:f9:7c:b4:93:fa:cf:93:88:fd:90:31:e0: e4:78:55:25:c0:9d:db:0a:aa:5e:c5:59:92:4a:ad:eb:5e:e8: 05:34:d9:cf:2e:88:07:e4:90:b2:e2:71:06:58:94:b1:fe:3b: 4f:ea:b4:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXlVR7O+ZUaHEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWY4MGFmMDYtNGY1MS00Y2VlLTg5YmQtYjVlODNiNmQzZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD9jP6Vo3JOzo/sY8do//X7nHriJBFTUC771 xu086ca4l/9eqrXsqv6UeuxdbrZS/qY3CxnlS3aYatxWHv6kL/Fw7K8jYjdMXVxc KvINRAPQMS407o5Rwq0bnpo3k8QTO0ynCgTohtaAMvNaYWkTHREvCyeOpi14C3Fr 8Evo7poqpnwTUPT0itCxnKyR6495Lit9BRs6lhaPY+LSYTWQSPR9I34DsuTK/I8I yaAfjR/TUgsReOdp1GRwCzzAv0wvVhKUQR64CgEsMKzLafwy+5eaVQx5it+wIUIF qCbPLxDkF8k0S/N2g7vLu1MAQldN6tL/IUaBvMQ+Qe0wkPzvKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9sU0B3VYHio4kUkdQ9qvGgFc+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2Q5YWI2MDItZjhmNC0z OTRiLWEyZjUtM2QzYzQyYzg0NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrPx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNqcFjgRR2wSvP42FQqPnLnMuW1W8Au0T8N7BHBLLQ90OapH89JMcLA CUCUPVqSWUGplSsKIn+TW3HQkvkeOoIEvSutyO0wytZ/F1Mf4kGYnvCFB44wYqNu xwzpGkTd7vIKYykX0Szee0vc/vCH+EdZji23/D0r9OdhQrwUTG8Oe1qLgYfpTRF0 0JR+UaVSicIbzTXlikjI8oGzBrdO6GKf/lNmi1sn5uHzQcowiQP9RkvJKQS/YNLJ Q7G5Ub+rx27ZYaarWX7RGx0ce/l8tJP6z5OI/ZAx4OR4VSXAndsKql7FWZJKrete 6AU02c8uiAfkkLLicQZYlLH+O0/qtLE= -----END CERTIFICATE-----Generated at Mon Aug 4 07:56:15 2025 by rpki-client