$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/689de88c-c7e0-33e9-ac5d-7f70c475f3e4.roa File: 689de88c-c7e0-33e9-ac5d-7f70c475f3e4.roa (raw, json) Hash identifier: cHFjChA9Xxz/AeclFKhcTyLEjzzPfIHAA/SKgfa1xxo= Subject key identifier: 86:43:14:6C:C2:31:56:32:0D:AB:0D:23:80:6A:89:E5:92:95:D2:6A Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AE2FBC3912349C54BA9816D60 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/689de88c-c7e0-33e9-ac5d-7f70c475f3e4.roa Signing time: Sun 17 Aug 2025 13:00:41 +0000 ROA not before: Sun 17 Aug 2025 13:00:41 +0000 ROA not after: Sat 15 Nov 2025 14:00:41 +0000 asID: 56971 IP address blocks: 45.38.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:fb:c3:91:23:49:c5:4b:a9:81:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 17 13:00:41 2025 GMT Not After : Nov 15 14:00:41 2025 GMT Subject: CN=ffeed6aa-8df4-4a61-83bd-aee0f6961f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:05:16:23:0f:c3:a5:36:8b:48:88:5b:59: e8:5e:2a:7d:23:61:dc:b1:86:c5:6a:e3:61:41:ae: fd:0c:45:ca:be:3a:e6:72:c6:fb:e1:36:0d:41:23: f6:56:fa:a2:db:28:4f:f4:c2:81:0d:74:69:85:b8: 2d:0b:0b:fc:85:f4:37:7b:04:4f:98:47:4b:25:38: f8:72:76:fb:c7:04:88:8a:14:2e:b1:a5:66:d3:c3: df:73:33:dc:0c:31:40:be:8d:4d:87:5d:c2:bb:b3: 33:8d:02:0f:6d:7e:e2:26:0e:ab:9c:7f:a4:f1:80: 5c:1f:7e:58:d8:82:46:58:28:3a:29:3c:49:d4:59: f3:25:c3:8f:b0:f1:4a:5c:39:a1:e0:b1:a8:8c:be: 89:15:0b:1c:58:ff:d7:1d:a6:71:b2:ba:f1:81:5b: 22:0c:c6:ee:e0:30:00:dc:a2:14:86:57:1b:31:d6: 85:a4:bf:b3:3f:e2:0e:39:95:32:9a:99:c2:7c:0e: 9c:01:b9:48:a5:a3:5b:0e:cb:76:b2:69:7b:a7:09: b4:44:23:01:a4:ee:79:e0:41:89:14:0f:0a:82:02: ad:5d:35:d4:46:88:c5:b7:7c:86:80:7e:bc:eb:6b: f6:5f:05:10:7b:53:31:7b:5f:1a:87:9f:c0:b9:c9: 92:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:43:14:6C:C2:31:56:32:0D:AB:0D:23:80:6A:89:E5:92:95:D2:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/689de88c-c7e0-33e9-ac5d-7f70c475f3e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.38.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:16:36:06:64:e7:33:aa:08:fc:2d:a7:8b:57:a4:55:4e:ad: 73:93:de:16:5d:0b:21:b8:5a:de:4c:89:ad:65:75:2e:d6:14: 4a:ab:9e:94:55:36:90:74:f7:94:c1:80:87:f3:c6:3f:3c:64: 50:fc:1b:2b:9c:9a:63:b3:a4:1f:87:72:9d:b6:64:80:54:fa: cb:16:d5:89:31:83:bb:03:55:e3:d9:f7:44:ae:04:1c:0a:c7: b1:95:ff:76:c1:f2:8f:11:07:14:f0:ae:60:81:ac:d7:da:83: 36:76:a5:ea:ed:17:64:af:03:0e:cc:ca:4a:4b:b9:0b:6b:bf: 6d:12:58:25:72:97:49:45:a0:9e:5e:a9:35:f7:13:77:5a:cb: cf:37:19:1d:43:e3:02:03:79:16:f0:b7:70:31:e7:0b:8f:90: 07:70:74:0c:6e:d9:fe:21:cb:48:dc:83:00:e7:23:7f:d5:b6: 2a:8c:82:37:d7:d3:25:43:44:36:33:e0:86:0c:db:77:96:73: c0:e9:2d:16:ae:42:ba:d2:d9:d6:e8:41:2b:28:ed:1a:77:b5: 28:60:90:35:00:51:e4:b7:61:d6:01:86:2a:65:95:cc:e5:2c: b4:ad:88:d1:d9:e0:d6:f1:ff:8f:b5:a4:25:f1:93:a9:21:d8: 3c:fe:6a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8ORI0nFS6mBbWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk ZmZlZWQ2YWEtOGRmNC00YTYxLTgzYmQtYWVlMGY2OTYxZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycQFFiMPw6U2i0iIW1noXip9I2HcsYbFauNh Qa79DEXKvjrmcsb74TYNQSP2Vvqi2yhP9MKBDXRphbgtCwv8hfQ3ewRPmEdLJTj4 cnb7xwSIihQusaVm08PfczPcDDFAvo1Nh13Cu7MzjQIPbX7iJg6rnH+k8YBcH35Y 2IJGWCg6KTxJ1FnzJcOPsPFKXDmh4LGojL6JFQscWP/XHaZxsrrxgVsiDMbu4DAA 3KIUhlcbMdaFpL+zP+IOOZUympnCfA6cAblIpaNbDst2sml7pwm0RCMBpO554EGJ FA8KggKtXTXURojFt3yGgH6862v2XwUQe1Mxe18ah5/AucmSVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZDFGzCMVYyDasNI4BqieWSldJqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjg5ZGU4OGMtYzdlMC0z M2U5LWFjNWQtN2Y3MGM0NzVmM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsWNgZk5zOqCPwtp4tXpFVOrXOT3hZdCyG4Wt5Mia1ldS7WFEqrnpRV NpB095TBgIfzxj88ZFD8GyucmmOzpB+Hcp22ZIBU+ssW1Ykxg7sDVePZ90SuBBwK x7GV/3bB8o8RBxTwrmCBrNfagzZ2pertF2SvAw7MykpLuQtrv20SWCVyl0lFoJ5e qTX3E3day883GR1D4wIDeRbwt3Ax5wuPkAdwdAxu2f4hy0jcgwDnI3/VtiqMgjfX 0yVDRDYz4IYM23eWc8DpLRauQrrS2dboQSso7Rp3tShgkDUAUeS3YdYBhipllczl LLStiNHZ4Nbx/4+1pCXxk6kh2Dz+alQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:05 2025 by rpki-client