$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2880896-e281-3125-8c68-93f3b7e7eaf1.roa File: d2880896-e281-3125-8c68-93f3b7e7eaf1.roa (raw, json) Hash identifier: YxvdfdyT/1a0EdZ6ivYsnTHQyT/6+bX1C6noa01gocU= Subject key identifier: 65:27:89:3D:6F:C4:77:CA:69:2B:3E:EF:82:4B:26:17:7B:87:C4:EB Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B4A320EBABEA96814F6C55B00 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2880896-e281-3125-8c68-93f3b7e7eaf1.roa Signing time: Tue 23 Sep 2025 12:18:23 +0000 ROA not before: Tue 23 Sep 2025 12:18:23 +0000 ROA not after: Mon 22 Dec 2025 13:18:23 +0000 asID: 9304 IP address blocks: 142.252.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:32:0e:ba:be:a9:68:14:f6:c5:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 23 12:18:23 2025 GMT Not After : Dec 22 13:18:23 2025 GMT Subject: CN=fcda7c72-11ab-45e8-af74-b3b61c1c0dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e1:7d:54:42:26:64:28:d8:87:aa:5f:03:e9: d3:46:ae:9a:3a:eb:c4:6e:d1:23:0a:b7:c7:0a:fd: 7c:da:0a:b8:68:13:b3:64:a4:6b:3c:1d:73:74:ad: 00:a4:85:59:25:9e:ac:1c:af:b8:30:d2:df:6d:57: ff:2b:05:36:dd:56:4c:58:3f:f8:31:86:5f:f3:22: 69:e1:16:08:5f:42:e9:cc:d1:00:eb:41:46:98:b4: 6d:32:93:3f:b5:5d:d0:f3:dc:d5:d4:dd:1a:ab:a8: af:7c:86:cd:ad:6b:10:61:03:8f:7f:c3:d2:cf:bb: b8:e4:e4:48:68:65:e8:85:24:65:66:95:ff:8d:1a: 30:37:a4:62:56:d4:cb:a2:14:1f:95:eb:c2:a5:91: 1e:fd:78:84:46:1e:58:9e:29:b6:34:45:30:ec:b0: 0a:01:56:bd:45:3d:ce:88:6a:ff:a2:78:6d:01:06: 54:c2:49:ef:3f:34:fc:5b:1c:ec:58:a7:f0:6e:fb: 5e:49:ef:d8:a2:f2:be:78:f9:f3:fb:6f:cc:dd:7a: da:96:bb:77:6d:98:5c:8f:dc:95:85:86:8d:cf:20: c5:c1:a8:35:06:e2:4b:1f:e1:0b:3f:a7:12:a9:01: 8c:e5:2b:a0:4b:01:f2:90:c4:69:1b:c1:af:78:5b: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:27:89:3D:6F:C4:77:CA:69:2B:3E:EF:82:4B:26:17:7B:87:C4:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2880896-e281-3125-8c68-93f3b7e7eaf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:12:f8:f2:72:b5:7a:e6:22:0a:48:8a:7a:43:2c:ff:2a:e4: 93:d1:82:2e:6e:1e:f4:aa:e8:67:8b:be:5b:1a:69:97:41:5c: cb:a9:d3:7b:95:80:87:56:96:66:dd:c4:29:a7:41:75:6c:54: d2:c7:fc:71:9a:4d:9a:70:a3:56:c0:87:0e:b5:a3:f6:d7:a4: 0c:c4:78:8c:43:05:19:0e:aa:5c:3e:bd:64:bd:be:f3:f0:c3: f0:9b:cf:0f:d5:5b:af:c1:ac:de:0a:1c:fc:a9:9e:2a:e2:78: 40:21:27:4e:9d:9a:2d:67:d1:05:b3:b8:43:31:f6:ae:fd:7e: b7:ad:ef:62:bc:84:37:67:67:81:88:a2:1d:5d:1d:a7:5c:93: a4:c4:ab:23:22:79:84:9f:6c:1d:73:51:a0:16:98:61:40:75: 60:5c:10:b2:84:5e:78:1f:30:99:68:9a:e4:d8:e4:34:f8:37: eb:a9:72:8e:1e:1c:ec:c2:1f:06:16:89:23:a9:80:e2:76:6d: 07:82:7b:bd:de:77:21:81:2d:89:3c:39:79:36:d7:a8:ba:95: f9:9c:89:dc:fc:78:fa:d9:32:4a:5a:b1:d5:33:b4:d7:e8:0e: 9c:8b:88:03:f9:1d:09:a4:b4:b9:50:3e:5c:51:84:38:ff:5b: 5d:4f:84:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKMg66vqloFPbFWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkyMzEyMTgyM1oXDTI1MTIyMjEzMTgyM1owLzEtMCsGA1UEAxMk ZmNkYTdjNzItMTFhYi00NWU4LWFmNzQtYjNiNjFjMWMwZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOF9VEImZCjYh6pfA+nTRq6aOuvEbtEjCrfH Cv182gq4aBOzZKRrPB1zdK0ApIVZJZ6sHK+4MNLfbVf/KwU23VZMWD/4MYZf8yJp 4RYIX0LpzNEA60FGmLRtMpM/tV3Q89zV1N0aq6ivfIbNrWsQYQOPf8PSz7u45ORI aGXohSRlZpX/jRowN6RiVtTLohQflevCpZEe/XiERh5Ynim2NEUw7LAKAVa9RT3O iGr/onhtAQZUwknvPzT8WxzsWKfwbvteSe/YovK+ePnz+2/M3Xralrt3bZhcj9yV hYaNzyDFwag1BuJLH+ELP6cSqQGM5SugSwHykMRpG8GveFsvDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUniT1vxHfKaSs+74JLJhd7h8TrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDI4ODA4OTYtZTI4MS0z MTI1LThjNjgtOTNmM2I3ZTdlYWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUS+PJytXrmIgpIinpDLP8q5JPRgi5uHvSq6GeLvlsaaZdBXMup03uV gIdWlmbdxCmnQXVsVNLH/HGaTZpwo1bAhw61o/bXpAzEeIxDBRkOqlw+vWS9vvPw w/Cbzw/VW6/BrN4KHPypnirieEAhJ06dmi1n0QWzuEMx9q79fret72K8hDdnZ4GI oh1dHadck6TEqyMieYSfbB1zUaAWmGFAdWBcELKEXngfMJlomuTY5DT4N+upco4e HOzCHwYWiSOpgOJ2bQeCe73edyGBLYk8OXk216i6lfmcidz8ePrZMkpasdUztNfo DpyLiAP5HQmktLlQPlxRhDj/W11PhCM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:34:52 2025 by rpki-client