$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f9e408d7-9384-3ed8-b90e-2209bd62718c.roa File: f9e408d7-9384-3ed8-b90e-2209bd62718c.roa (raw, json) Hash identifier: qDMGuOv5ORsvkKygsKKfV+dYaj8eOa/Q0U1ep5wZB5o= Subject key identifier: FF:E7:87:00:B3:EC:C3:75:F3:8D:63:B4:C0:20:44:ED:FB:B0:FD:10 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584AD23C383BE8EFFF66669A61C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f9e408d7-9384-3ed8-b90e-2209bd62718c.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 214238 IP address blocks: 45.38.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:38:3b:e8:ef:ff:66:66:9a:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=46aa7942-3db4-4187-9af4-d78427da58e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:d6:c1:29:65:d6:ab:db:27:92:c9:62:20: 15:9b:09:03:c1:da:de:f7:77:aa:28:aa:24:6e:88: 8a:2d:a3:7d:f0:28:cf:e9:42:e7:94:6b:9c:ac:96: a1:1e:16:0b:ec:97:fd:ee:02:ba:4f:0e:ef:92:2d: 68:9b:2e:fa:c8:ab:57:40:a9:87:a5:1e:0b:dd:5a: 53:2c:50:38:18:5f:c6:a1:37:be:14:fb:10:ef:db: 42:96:d3:37:f5:cd:29:39:7c:d0:19:4c:0d:cd:1d: c7:dc:51:32:26:51:e8:ee:46:b7:6b:57:6a:3d:a9: 3f:81:89:15:87:3d:0a:e3:47:02:6c:e0:c2:6b:dc: 89:89:d8:6a:d8:21:33:0f:e6:ac:70:69:c4:56:6d: c0:de:24:d3:b2:4d:c9:fd:ad:1b:1d:b2:86:e7:64: ae:1e:9d:ef:f8:88:c5:ed:6f:86:9e:56:79:f4:a0: 48:a6:56:d8:72:87:66:d6:41:b3:1c:f9:ff:fe:5d: e0:8e:6e:58:14:dc:97:07:18:6c:b5:e7:ae:26:e6: 04:b5:e7:ec:2b:c3:36:33:de:64:64:18:4d:75:53: 82:a8:40:65:a5:98:b9:bc:26:09:c4:0f:dd:ed:5b: a6:2d:27:12:fe:be:9e:79:7f:81:27:23:63:6a:3a: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E7:87:00:B3:EC:C3:75:F3:8D:63:B4:C0:20:44:ED:FB:B0:FD:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f9e408d7-9384-3ed8-b90e-2209bd62718c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.38.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ba:74:a4:ac:a4:7f:35:1d:b2:24:8c:b3:f3:7c:c8:6e:75: e5:9d:79:f5:b9:77:46:21:bc:6c:c7:c3:ef:c4:4a:1b:8b:d6: 36:06:a1:91:47:8b:f8:62:77:81:08:7e:a2:7d:03:9b:8e:59: aa:7a:cb:fc:31:e1:a7:20:3c:9a:3b:23:79:27:27:74:d0:00: 16:c1:dd:62:0d:00:aa:05:df:2c:d2:30:12:01:70:91:78:cb: ae:ad:d5:87:94:16:80:1a:6e:23:f1:8d:d9:35:ce:99:d0:78: fc:cc:d7:3f:8f:e1:f4:39:92:fe:62:b0:d9:f5:44:22:2c:38: 7a:e6:c7:6a:17:19:45:b8:e2:6a:81:89:27:2b:a7:42:5f:09: ba:cb:b4:f5:5f:90:7c:00:71:c9:4a:1c:b1:c7:bf:a2:84:ad: 2a:73:7f:50:e7:16:8b:f6:31:44:fc:b5:d9:ce:d7:20:01:5c: d6:87:eb:d2:51:b1:a4:30:2e:bc:f4:36:ab:48:75:69:c5:c1: 08:02:b8:b8:bb:64:b3:33:77:49:8b:cf:b9:f3:58:7b:d2:7c: c2:80:cd:17:de:56:9c:28:06:16:ea:2e:20:eb:7d:0d:af:4a: a3:35:07:db:82:59:d6:fc:7d:9a:80:66:86:93:7a:0b:17:5c: 42:83:b3:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPDg76O//ZmaaYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NDZhYTc5NDItM2RiNC00MTg3LTlhZjQtZDc4NDI3ZGE1OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ7WwSll1qvbJ5LJYiAVmwkDwdre93eqKKok boiKLaN98CjP6ULnlGucrJahHhYL7Jf97gK6Tw7vki1omy76yKtXQKmHpR4L3VpT LFA4GF/GoTe+FPsQ79tCltM39c0pOXzQGUwNzR3H3FEyJlHo7ka3a1dqPak/gYkV hz0K40cCbODCa9yJidhq2CEzD+ascGnEVm3A3iTTsk3J/a0bHbKG52SuHp3v+IjF 7W+GnlZ59KBIplbYcodm1kGzHPn//l3gjm5YFNyXBxhsteeuJuYEtefsK8M2M95k ZBhNdVOCqEBlpZi5vCYJxA/d7VumLScS/r6eeX+BJyNjajqCaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/nhwCz7MN1841jtMAgRO37sP0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjllNDA4ZDctOTM4NC0z ZWQ4LWI5MGUtMjIwOWJkNjI3MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSbzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES6dKSspH81HbIkjLPzfMhudeWdefW5d0YhvGzHw+/EShuL1jYGoZFH i/hid4EIfqJ9A5uOWap6y/wx4acgPJo7I3knJ3TQABbB3WINAKoF3yzSMBIBcJF4 y66t1YeUFoAabiPxjdk1zpnQePzM1z+P4fQ5kv5isNn1RCIsOHrmx2oXGUW44mqB iScrp0JfCbrLtPVfkHwAcclKHLHHv6KErSpzf1DnFov2MUT8tdnO1yABXNaH69JR saQwLrz0NqtIdWnFwQgCuLi7ZLMzd0mLz7nzWHvSfMKAzRfeVpwoBhbqLiDrfQ2v SqM1B9uCWdb8fZqAZoaTegsXXEKDs7A= -----END CERTIFICATE-----Generated at Sat Aug 23 16:21:46 2025 by rpki-client