$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ba2e539-8392-3b40-bddb-a7720732e3f7.roa File: 5ba2e539-8392-3b40-bddb-a7720732e3f7.roa (raw, json) Hash identifier: uEB4GJ4W6T23PkGROfIITK3Z6VDRGmpZEV3+f96hiNs= Subject key identifier: 79:7B:D9:52:89:EF:88:99:1D:D2:A6:7B:2E:0A:07:2B:5B:CF:30:FD Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A4DA03C8E8ECFE3D2908C00A0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ba2e539-8392-3b40-bddb-a7720732e3f7.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 214238 IP address blocks: 45.38.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:3c:8e:8e:cf:e3:d2:90:8c:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=c19dbc30-43e7-4bd2-bc69-cfe14d7cd1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f5:fb:ce:ee:07:c6:a2:ce:c7:49:61:8f:27: 62:65:c5:3c:6a:e2:f8:00:cb:8f:a0:a6:a3:40:0c: 3a:c4:3f:b4:99:36:ed:e8:39:7c:06:5b:f9:87:48: f7:6a:c9:f9:00:a7:d1:86:eb:49:54:59:a2:62:cf: 16:9b:cc:3a:06:1c:01:86:33:29:05:5b:59:e4:48: 81:46:65:a5:dc:69:5b:4a:74:2f:1b:24:01:94:f2: 31:10:ae:07:a9:f3:a8:78:a7:3f:14:58:a0:11:02: 5c:75:9b:32:4e:ea:c0:b0:12:d2:a7:cd:ad:0e:d8: ed:89:62:08:0b:f7:f7:38:91:73:5a:bb:26:c3:72: d1:8c:7f:75:af:b6:c0:c0:32:e8:c5:4b:74:f1:b5: 5a:31:66:d0:71:7c:4f:91:61:e7:8a:3d:af:99:57: 72:ae:ab:76:95:08:00:f6:ab:35:32:a3:7c:cb:8a: 4c:3d:bd:50:00:83:f0:d9:84:ea:06:28:a4:7a:ae: 1e:90:2d:2d:2f:e0:1a:8a:f1:56:ad:3e:eb:55:fa: 2a:57:bf:59:22:83:a2:cb:fd:f5:ba:5e:1c:d4:45: ce:8c:4b:32:af:7d:a8:d1:6a:30:41:37:af:e7:fa: a9:dc:ff:1a:23:56:93:bc:4b:ec:2a:0b:af:12:65: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7B:D9:52:89:EF:88:99:1D:D2:A6:7B:2E:0A:07:2B:5B:CF:30:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5ba2e539-8392-3b40-bddb-a7720732e3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.38.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d3:87:59:7a:b2:80:8e:d9:35:3d:dc:3a:1f:5f:91:0a:06: 8f:2a:c6:af:83:8c:ad:f0:42:a4:06:f8:e1:31:5d:dc:cf:fb: e9:a8:90:e2:27:23:be:9a:63:d7:d6:3b:46:58:8e:d5:f3:c4: 7f:77:99:85:69:a0:df:3c:51:10:6a:e8:bd:b8:17:d6:65:5b: 7b:a2:4c:56:29:ff:df:e9:07:ba:4a:60:0f:0a:42:9d:6c:bc: 24:0b:e9:c7:e9:a2:96:63:f6:1b:cb:f1:b6:86:a9:13:88:f8: d5:7c:ae:cd:e9:f6:4c:8e:cd:99:18:45:ca:ba:48:7d:c4:00: 14:97:28:ab:b9:c1:cd:df:ff:04:b1:dd:12:f5:86:db:c3:c1: c8:fc:8c:b0:81:60:9c:ed:20:d9:e1:78:77:63:e7:30:e5:f7: 68:2a:48:47:24:f3:f6:a8:81:ea:21:2c:45:1c:6c:33:fe:19: 64:f6:82:2f:f3:1d:7a:c2:64:49:9a:54:0f:85:23:c5:c1:07: 50:7c:31:66:cf:15:ee:ea:15:87:c1:dc:88:3d:b8:8e:20:dd: b1:50:79:f0:cb:22:22:8b:73:23:b0:f7:af:30:eb:7a:14:d5: 02:b3:b6:6e:06:24:dd:bf:bd:05:33:79:a9:32:df:b2:9b:2a: 73:cb:ad:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoDyOjs/j0pCMAKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk YzE5ZGJjMzAtNDNlNy00YmQyLWJjNjktY2ZlMTRkN2NkMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfX7zu4HxqLOx0lhjydiZcU8auL4AMuPoKaj QAw6xD+0mTbt6Dl8Blv5h0j3asn5AKfRhutJVFmiYs8Wm8w6BhwBhjMpBVtZ5EiB RmWl3GlbSnQvGyQBlPIxEK4HqfOoeKc/FFigEQJcdZsyTurAsBLSp82tDtjtiWII C/f3OJFzWrsmw3LRjH91r7bAwDLoxUt08bVaMWbQcXxPkWHnij2vmVdyrqt2lQgA 9qs1MqN8y4pMPb1QAIPw2YTqBiikeq4ekC0tL+AaivFWrT7rVfoqV79ZIoOiy/31 ul4c1EXOjEsyr32o0WowQTev5/qp3P8aI1aTvEvsKguvEmVQ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHl72VKJ74iZHdKmey4KBytbzzD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWJhMmU1MzktODM5Mi0z YjQwLWJkZGItYTc3MjA3MzJlM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzTh1l6soCO2TU93DofX5EKBo8qxq+DjK3wQqQG+OExXdzP++mokOIn I76aY9fWO0ZYjtXzxH93mYVpoN88URBq6L24F9ZlW3uiTFYp/9/pB7pKYA8KQp1s vCQL6cfpopZj9hvL8baGqROI+NV8rs3p9kyOzZkYRcq6SH3EABSXKKu5wc3f/wSx 3RL1htvDwcj8jLCBYJztINnheHdj5zDl92gqSEck8/aogeohLEUcbDP+GWT2gi/z HXrCZEmaVA+FI8XBB1B8MWbPFe7qFYfB3Ig9uI4g3bFQefDLIiKLcyOw968w63oU 1QKztm4GJN2/vQUzeaky37KbKnPLrYM= -----END CERTIFICATE-----Generated at Tue Jul 1 13:19:49 2025 by rpki-client