$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d23dbedd-8c9d-3273-9d00-d28fb411c342.roa File: d23dbedd-8c9d-3273-9d00-d28fb411c342.roa (raw, json) Hash identifier: 5jW2pXOBqhXI9CL3/PlShzsNq62dy3lYzS0l8rEccEY= Subject key identifier: 80:6B:02:77:01:8A:54:B1:F0:F5:CD:19:35:C0:46:FF:E6:47:8A:E8 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AAB266F686CE0E76E25F50800 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d23dbedd-8c9d-3273-9d00-d28fb411c342.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 50131 IP address blocks: 172.252.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:6f:68:6c:e0:e7:6e:25:f5:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=94eba9eb-a627-4c14-a493-c81b9aaa4ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ee:3c:0f:79:09:84:d3:9b:b0:9e:59:64:c5: a8:b8:30:19:94:18:38:03:b7:3a:37:cc:ed:7b:cb: ec:82:c3:82:0c:bc:67:be:09:be:88:a1:c2:83:ea: 91:5a:ed:54:6c:65:fe:b6:31:9c:b3:1a:99:a3:83: cb:9f:ec:c1:87:30:18:ff:62:e5:8a:40:78:8d:83: 9a:e5:56:1b:87:83:c5:c8:27:90:bf:68:dd:93:5e: f0:10:9b:ab:f0:67:08:b2:37:3e:62:1c:12:fb:81: 56:0c:74:06:91:54:d1:81:b1:53:56:f8:ba:53:cc: 23:11:2a:50:fa:72:c5:79:37:8d:d6:a0:bb:5c:9b: 95:74:e5:be:66:e5:11:c8:5f:c0:0e:a3:80:60:0c: ae:5e:0e:c6:f9:4e:dc:04:60:0b:33:3e:a2:48:c5: 1c:49:98:f8:75:50:62:c9:e8:24:be:4a:b7:52:bd: 1d:f1:ac:60:8e:d6:23:11:37:77:9d:16:44:8b:89: 84:36:a0:42:a5:33:2c:ee:e8:e8:99:e0:c9:f9:1a: 78:66:bf:e3:de:38:5e:43:bf:ef:4f:3f:0e:da:90: 91:cb:1a:cb:d7:32:37:a7:45:26:03:23:c1:c9:45: 8a:7f:48:04:1b:1c:9c:f0:c2:ba:3a:a1:11:3a:3e: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6B:02:77:01:8A:54:B1:F0:F5:CD:19:35:C0:46:FF:E6:47:8A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d23dbedd-8c9d-3273-9d00-d28fb411c342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:0e:7f:75:d7:c5:00:8c:d6:8d:e9:81:58:ea:98:57:31:fe: ba:0b:3f:27:15:90:13:d6:2a:22:fa:ad:da:1a:f8:5c:b2:37: b8:60:b3:26:6f:a4:a0:ef:50:55:ce:5c:ec:85:3e:eb:d5:d7: ea:03:7b:ab:ff:d5:54:a0:67:e1:0c:2e:56:8a:ad:8c:71:6b: d4:c5:6b:2a:50:2d:60:aa:68:e2:bc:9d:e1:50:13:d1:07:fd: e8:12:ec:b1:c9:ea:3f:14:e7:93:51:61:c9:07:7b:18:c4:48: d9:c6:c9:39:0c:69:67:e4:ca:1a:5c:33:ad:59:15:1c:5e:1e: 71:2e:d0:bf:29:a5:fd:2d:cd:82:10:c4:4f:31:13:09:89:7e: eb:37:37:11:70:4a:30:77:e3:3c:45:5f:a1:80:81:9c:89:88: 2f:5e:e7:63:a1:aa:a0:60:79:1a:92:de:0a:95:8b:c3:f2:46: 6f:33:d6:9e:90:9b:61:b5:73:99:71:75:e7:dc:d4:84:78:97: 62:a9:18:28:0f:31:61:26:4d:a0:31:1d:7b:83:48:ec:bb:c8: eb:67:32:d9:03:ae:d2:d1:35:e9:c2:70:68:93:52:78:b5:04: e4:36:ed:55:a3:bf:ba:d8:0c:76:22:ea:d3:17:a9:84:c2:52: 48:6c:10:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJm9obODnbiX1CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk OTRlYmE5ZWItYTYyNy00YzE0LWE0OTMtYzgxYjlhYWE0YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO48D3kJhNObsJ5ZZMWouDAZlBg4A7c6N8zt e8vsgsOCDLxnvgm+iKHCg+qRWu1UbGX+tjGcsxqZo4PLn+zBhzAY/2LlikB4jYOa 5VYbh4PFyCeQv2jdk17wEJur8GcIsjc+YhwS+4FWDHQGkVTRgbFTVvi6U8wjESpQ +nLFeTeN1qC7XJuVdOW+ZuURyF/ADqOAYAyuXg7G+U7cBGALMz6iSMUcSZj4dVBi yegkvkq3Ur0d8axgjtYjETd3nRZEi4mENqBCpTMs7ujomeDJ+Rp4Zr/j3jheQ7/v Tz8O2pCRyxrL1zI3p0UmAyPByUWKf0gEGxyc8MK6OqEROj62NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBrAncBilSx8PXNGTXARv/mR4roMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDIzZGJlZGQtOGM5ZC0z MjczLTlkMDAtZDI4ZmI0MTFjMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPxZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8Of3XXxQCM1o3pgVjqmFcx/roLPycVkBPWKiL6rdoa+FyyN7hgsyZv pKDvUFXOXOyFPuvV1+oDe6v/1VSgZ+EMLlaKrYxxa9TFaypQLWCqaOK8neFQE9EH /egS7LHJ6j8U55NRYckHexjESNnGyTkMaWfkyhpcM61ZFRxeHnEu0L8ppf0tzYIQ xE8xEwmJfus3NxFwSjB34zxFX6GAgZyJiC9e52OhqqBgeRqS3gqVi8PyRm8z1p6Q m2G1c5lxdefc1IR4l2KpGCgPMWEmTaAxHXuDSOy7yOtnMtkDrtLRNenCcGiTUni1 BOQ27VWjv7rYDHYi6tMXqYTCUkhsEHQ= -----END CERTIFICATE-----Generated at Mon Aug 4 08:24:34 2025 by rpki-client