$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d3a3ac9-35dc-3cdd-bac3-1a159acd53a3.roa File: 4d3a3ac9-35dc-3cdd-bac3-1a159acd53a3.roa (raw, json) Hash identifier: u6AFfQ7IC1kzFlqeE0snYF7+SLXa4rSQhWc+uRccza0= Subject key identifier: 8E:03:37:F7:59:D6:B3:52:96:66:99:BE:2F:09:C4:46:7F:1F:BE:E1 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A56004C5CF8988D8D0655CD40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d3a3ac9-35dc-3cdd-bac3-1a159acd53a3.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 59711 IP address blocks: 45.38.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:4c:5c:f8:98:8d:8d:06:55:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=cb6d5b30-5716-4068-8380-89f0eda7a24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:c2:cb:da:16:67:5a:5d:f6:2c:8f:f1:7e: 11:c9:9f:b0:1b:3f:fe:62:f1:6a:88:b1:90:3e:d2: c9:20:33:b6:83:a0:b9:df:01:0f:b7:c7:6c:4c:5e: e1:21:be:be:5d:af:8d:35:43:d3:41:23:ab:11:da: aa:13:90:71:f2:5a:74:f6:8e:34:e4:44:b9:c0:aa: d5:51:18:25:90:b5:62:ee:7f:fd:98:fc:af:42:62: e0:ef:db:9c:c4:23:cd:21:36:cc:35:ed:9e:ec:25: 98:cd:6f:c8:63:92:03:ef:a2:68:99:fd:e2:10:16: 9b:86:32:91:0c:c3:0d:3f:2b:fd:7f:30:ab:06:77: fc:25:65:28:91:6f:a9:6d:08:06:9b:3a:d6:71:ff: a1:72:f5:26:23:3c:eb:2e:51:56:33:8d:75:43:1e: 22:86:a7:d6:e3:3b:8d:f8:f6:90:04:9d:5f:b3:3e: 7b:8d:81:ba:1d:11:d5:7d:c4:b1:93:e4:7e:e0:78: 11:06:3e:3a:88:ab:45:e6:5c:9b:b5:19:4f:1f:30: d1:b3:92:f1:13:40:1e:34:0c:eb:de:85:65:6e:d9: 54:d2:d9:24:47:0b:ca:bb:3a:a6:03:16:03:82:67: 9f:3e:ce:72:fc:42:78:9f:d9:a0:f1:f5:db:b4:83: 7a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:03:37:F7:59:D6:B3:52:96:66:99:BE:2F:09:C4:46:7F:1F:BE:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d3a3ac9-35dc-3cdd-bac3-1a159acd53a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.38.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:02:4e:8c:81:2c:fa:26:86:28:d8:57:ca:fe:40:6a:a3:bd: 22:c2:9e:78:49:1d:37:a0:7f:04:87:95:be:18:bb:26:10:86: 04:79:1b:dc:ae:04:0d:ef:3f:f1:b5:01:d0:da:f7:24:b2:96: f6:98:08:c0:c9:9c:ff:31:b6:9a:aa:83:3b:99:30:b3:1c:b8: 23:b7:1c:30:f9:c4:c4:e4:a2:2b:34:d7:03:5c:02:95:bc:7c: 00:1e:83:2b:8a:4d:e8:f9:8c:8d:3b:0c:b2:f8:c5:58:5e:e3: c5:4b:13:8a:db:f9:f1:18:c5:af:3a:2b:87:0e:21:35:09:04: ee:bf:0c:3c:a3:49:ff:9d:9c:cc:11:43:16:7a:66:7f:8c:69: a2:a1:67:01:e0:82:e2:7e:23:6a:e1:c1:dd:0b:bc:33:74:40: 19:8f:25:84:ef:49:26:f4:41:4e:17:66:74:38:c5:f7:40:0f: 3a:50:30:93:b4:60:c4:23:dd:9e:b3:39:f2:43:81:f0:df:6b: 73:54:38:84:8b:54:4b:4a:f9:77:b6:27:d9:e6:04:cf:b0:ec: 4f:50:5f:4a:27:f1:7a:5d:4c:81:ca:6d:27:e8:2f:ec:21:86: fc:fd:9f:c0:ed:2e:2f:17:ad:d2:62:dc:4c:76:4d:94:a9:59: ca:d4:cf:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAExc+JiNjQZVzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk Y2I2ZDViMzAtNTcxNi00MDY4LTgzODAtODlmMGVkYTdhMjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOLCy9oWZ1pd9iyP8X4RyZ+wGz/+YvFqiLGQ PtLJIDO2g6C53wEPt8dsTF7hIb6+Xa+NNUPTQSOrEdqqE5Bx8lp09o405ES5wKrV URglkLVi7n/9mPyvQmLg79ucxCPNITbMNe2e7CWYzW/IY5ID76Jomf3iEBabhjKR DMMNPyv9fzCrBnf8JWUokW+pbQgGmzrWcf+hcvUmIzzrLlFWM411Qx4ihqfW4zuN +PaQBJ1fsz57jYG6HRHVfcSxk+R+4HgRBj46iKtF5lybtRlPHzDRs5LxE0AeNAzr 3oVlbtlU0tkkRwvKuzqmAxYDgmefPs5y/EJ4n9mg8fXbtIN63wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4DN/dZ1rNSlmaZvi8JxEZ/H77hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGQzYTNhYzktMzVkYy0z Y2RkLWJhYzMtMWExNTlhY2Q1M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYCToyBLPomhijYV8r+QGqjvSLCnnhJHTegfwSHlb4YuyYQhgR5G9yu BA3vP/G1AdDa9ySylvaYCMDJnP8xtpqqgzuZMLMcuCO3HDD5xMTkois01wNcApW8 fAAegyuKTej5jI07DLL4xVhe48VLE4rb+fEYxa86K4cOITUJBO6/DDyjSf+dnMwR QxZ6Zn+MaaKhZwHgguJ+I2rhwd0LvDN0QBmPJYTvSSb0QU4XZnQ4xfdADzpQMJO0 YMQj3Z6zOfJDgfDfa3NUOISLVEtK+Xe2J9nmBM+w7E9QX0on8XpdTIHKbSfoL+wh hvz9n8DtLi8XrdJi3Ex2TZSpWcrUz00= -----END CERTIFICATE-----Generated at Tue Jul 1 01:09:06 2025 by rpki-client