$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1da4ede4-0a90-3606-9639-0f21fe3a1529.roa File: 1da4ede4-0a90-3606-9639-0f21fe3a1529.roa (raw, json) Hash identifier: 9bwLVwAzqMMsG6QJsgFB8p6FDaSTZ+QjPuNM4OPADkY= Subject key identifier: 36:FB:EB:B7:1F:08:53:6E:E4:34:E8:7D:A9:19:3F:56:5B:0C:9B:46 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B2E5C5C8E9D43E9C1DD6A2800 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1da4ede4-0a90-3606-9639-0f21fe3a1529.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 202015 IP address blocks: 45.39.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:5c:8e:9d:43:e9:c1:dd:6a:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=43e7b5aa-f6cb-4937-b70f-f979cac8a532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:58:ce:cb:7f:9c:15:b2:65:af:a4:5f:d1:50: cf:37:aa:99:c5:a3:b7:61:b1:34:3d:d9:14:ab:5a: 6f:5e:b8:6c:fd:b1:4d:ff:fe:4e:43:66:a8:de:be: 15:1c:7f:ab:5a:e3:01:3b:46:e1:f5:cb:cd:44:58: 1f:3d:2a:a3:d4:3a:bb:99:d2:fe:f8:63:71:38:4c: a6:f6:7c:d8:26:00:ce:10:bc:5d:f1:64:05:53:b5: 5f:86:f2:25:23:4a:49:ad:6b:91:06:e6:7d:76:64: 4b:94:dc:a7:fc:00:25:0c:f1:75:d2:b1:f8:b9:1a: ed:c4:b3:46:ff:f5:8a:89:bb:16:66:af:ab:99:7e: 07:8a:4e:90:02:ab:f1:af:7f:1a:78:17:d7:36:5a: c2:ac:ea:9a:a4:1f:21:2c:fd:b8:b0:9f:42:6b:57: 20:a0:e2:ca:e8:82:ed:49:e6:7b:08:9c:79:2d:a2: 0f:e2:e9:9d:b4:3b:96:c0:11:b0:5d:8d:64:58:5d: b4:bc:c4:40:88:d9:c6:d3:77:0d:c7:8a:36:ae:a2: 46:7a:68:3f:02:86:9e:34:b1:bb:c7:c0:8e:d8:8b: 08:37:43:da:62:38:4c:de:6c:ec:a4:a6:63:6f:38: 65:12:b8:69:3c:6a:09:4c:a3:8a:33:53:9f:72:67: a1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FB:EB:B7:1F:08:53:6E:E4:34:E8:7D:A9:19:3F:56:5B:0C:9B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1da4ede4-0a90-3606-9639-0f21fe3a1529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.39.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:44:94:99:9d:72:10:34:28:af:40:12:d5:4e:63:8f:dc:ec: 47:fa:0c:e9:f5:e3:46:0d:92:0e:23:e5:b0:7f:c0:53:f3:c7: e0:fe:49:87:db:da:64:f8:ab:c0:fd:86:d5:bd:22:78:77:3c: f1:bb:99:b2:43:c2:86:f7:55:0b:0e:9c:d7:0f:81:32:d6:c8: bd:b5:25:c1:78:17:7b:d2:7d:c1:77:0b:98:75:8f:8b:76:6f: bb:fa:2e:af:0b:b1:26:b4:9c:a6:65:da:37:9f:2e:9c:01:d1: c8:0e:44:9c:9e:54:4b:12:ed:a7:f6:be:ca:68:ca:23:23:ae: 82:25:0c:8a:06:99:5f:e3:b2:59:c8:f3:e5:86:65:4f:97:c5: 40:cc:b6:50:6c:fa:42:04:07:ce:cc:26:02:04:8d:e0:0c:f8: 28:6d:af:33:46:b5:2d:4b:0d:fa:31:66:51:23:cf:23:75:83: 7f:9e:bf:f2:9e:ab:ba:6a:5d:f8:56:05:cc:70:73:81:3d:14: 1d:56:2f:31:6a:d8:4a:fb:32:3c:f7:21:af:86:40:12:ce:c8: 6d:3f:75:24:cd:5e:97:14:4f:4c:0e:f9:9c:0d:e6:7d:eb:f4: 95:f8:5d:c7:72:b4:d1:c3:f3:17:a7:6b:2e:86:84:cf:f1:ab: d6:73:c0:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXFyOnUPpwd1qKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NDNlN2I1YWEtZjZjYi00OTM3LWI3MGYtZjk3OWNhYzhhNTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVjOy3+cFbJlr6Rf0VDPN6qZxaO3YbE0PdkU q1pvXrhs/bFN//5OQ2ao3r4VHH+rWuMBO0bh9cvNRFgfPSqj1Dq7mdL++GNxOEym 9nzYJgDOELxd8WQFU7VfhvIlI0pJrWuRBuZ9dmRLlNyn/AAlDPF10rH4uRrtxLNG //WKibsWZq+rmX4Hik6QAqvxr38aeBfXNlrCrOqapB8hLP24sJ9Ca1cgoOLK6ILt SeZ7CJx5LaIP4umdtDuWwBGwXY1kWF20vMRAiNnG03cNx4o2rqJGemg/AoaeNLG7 x8CO2IsIN0PaYjhM3mzspKZjbzhlErhpPGoJTKOKM1OfcmehswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb767cfCFNu5DTofakZP1ZbDJtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWRhNGVkZTQtMGE5MC0z NjA2LTk2MzktMGYyMWZlM2ExNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALScRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJElJmdchA0KK9AEtVOY4/c7Ef6DOn140YNkg4j5bB/wFPzx+D+SYfb 2mT4q8D9htW9Inh3PPG7mbJDwob3VQsOnNcPgTLWyL21JcF4F3vSfcF3C5h1j4t2 b7v6Lq8LsSa0nKZl2jefLpwB0cgORJyeVEsS7af2vspoyiMjroIlDIoGmV/jslnI 8+WGZU+XxUDMtlBs+kIEB87MJgIEjeAM+ChtrzNGtS1LDfoxZlEjzyN1g3+ev/Ke q7pqXfhWBcxwc4E9FB1WLzFq2Er7Mjz3Ia+GQBLOyG0/dSTNXpcUT0wO+ZwN5n3r 9JX4XcdytNHD8xenay6GhM/xq9ZzwNs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:30:02 2025 by rpki-client