$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/488e4fc2-0590-38ef-b99a-c91886725820.roa File: 488e4fc2-0590-38ef-b99a-c91886725820.roa (raw, json) Hash identifier: SQc69ln/Cd7OhS5qV/QPawfagb5M+pVyKwAd+uMp8P0= Subject key identifier: 0E:E2:0C:91:F1:81:C0:E4:9C:E9:51:AE:0E:C8:5F:24:A9:AD:80:88 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BBE4046FB1020E6FD2900A380 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/488e4fc2-0590-38ef-b99a-c91886725820.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 8881 IP address blocks: 45.39.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:46:fb:10:20:e6:fd:29:00:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=c4b40000-e773-4827-be60-693157f8651c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ca:a0:58:31:21:84:9e:7b:d1:b6:21:51:dc: de:07:fa:a0:4b:f7:73:94:92:6d:60:56:64:d4:00: 15:30:35:60:9c:03:b6:78:81:7b:84:9b:3e:27:0b: 2b:0d:7b:f1:a1:35:ef:b5:ad:1c:25:a2:eb:e3:e2: d2:43:7b:fd:63:d2:fa:47:3e:fa:93:dd:00:cf:62: 9b:86:ff:8c:08:67:3f:4a:11:88:d0:79:ff:3f:28: d3:dc:58:da:31:6b:86:4e:9b:e2:5e:c8:ac:70:13: ae:3c:69:4e:88:99:40:b4:ef:bd:cf:27:e8:70:7c: 91:14:a3:c5:5c:54:97:8a:84:3c:54:d1:41:87:71: 6c:85:e2:a3:97:dd:bb:97:2a:19:e8:fc:18:37:7a: 4d:f1:ea:d6:70:83:8a:89:89:a3:92:14:75:6d:72: 3d:82:f1:ba:81:ad:40:81:39:15:5d:4d:ec:3e:8a: 41:7a:d3:31:16:75:0b:3c:4e:74:37:a2:21:4e:fa: e5:4b:1a:c9:28:e8:2e:a0:b3:7c:61:f4:70:01:5a: 83:34:5b:72:a4:35:d3:93:b6:fc:d3:2d:0e:b4:be: 25:b2:47:57:83:99:6e:6c:76:7e:c7:c3:1f:14:16: 6e:2f:3e:a0:6a:da:a5:bf:17:ce:7d:7a:72:0e:93: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E2:0C:91:F1:81:C0:E4:9C:E9:51:AE:0E:C8:5F:24:A9:AD:80:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/488e4fc2-0590-38ef-b99a-c91886725820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.39.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:dc:dd:dc:72:6b:92:b4:41:f1:a4:e4:a4:02:54:b3:ff:42: 69:e6:11:bf:04:2f:95:01:d2:39:ff:7d:10:24:0f:8d:8a:11: cf:66:6a:8a:29:a7:93:7e:cd:67:8d:98:df:2e:42:a7:1c:d5: a0:4e:41:26:32:eb:2a:d2:59:90:a3:62:5f:b1:9e:31:6d:23: 15:e2:5f:a3:36:f1:59:92:f7:ea:46:d9:bf:dd:79:43:c3:07: 77:e7:9d:16:ea:93:87:c9:33:09:06:af:26:ab:b3:20:1f:7e: b9:b3:db:03:c8:77:90:a1:ab:7a:ed:d7:e9:9d:b8:d2:6e:7c: dd:a4:6f:aa:0c:04:27:db:39:54:34:d1:b3:37:04:78:1d:09: 39:3f:e6:d1:66:32:1a:f4:cc:f9:44:77:ec:9f:d3:4d:05:bf: e4:47:2c:ee:39:77:f4:76:1d:12:81:dc:bf:01:0c:22:04:a5: 21:7e:8f:fb:cf:af:d9:6f:04:0b:a2:14:f2:b0:d9:3c:6a:9e: 1c:bb:ec:11:74:0a:df:65:45:17:31:d2:5e:e1:0c:1f:dc:85: 45:71:92:96:1a:aa:b3:61:c9:43:5f:52:95:c7:bd:e6:e4:35: 41:56:c6:64:29:b2:00:dc:b1:f5:39:62:4d:03:a1:a0:f3:53: 54:74:b1:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEb7ECDm/SkAo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YzRiNDAwMDAtZTc3My00ODI3LWJlNjAtNjkzMTU3Zjg2NTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicqgWDEhhJ570bYhUdzeB/qgS/dzlJJtYFZk 1AAVMDVgnAO2eIF7hJs+JwsrDXvxoTXvta0cJaLr4+LSQ3v9Y9L6Rz76k90Az2Kb hv+MCGc/ShGI0Hn/PyjT3FjaMWuGTpviXsiscBOuPGlOiJlAtO+9zyfocHyRFKPF XFSXioQ8VNFBh3FsheKjl927lyoZ6PwYN3pN8erWcIOKiYmjkhR1bXI9gvG6ga1A gTkVXU3sPopBetMxFnULPE50N6IhTvrlSxrJKOguoLN8YfRwAVqDNFtypDXTk7b8 0y0OtL4lskdXg5lubHZ+x8MfFBZuLz6gatqlvxfOfXpyDpPZZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7iDJHxgcDknOlRrg7IXySprYCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDg4ZTRmYzItMDU5MC0z OGVmLWI5OWEtYzkxODg2NzI1ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSeBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvc3dxya5K0QfGk5KQCVLP/QmnmEb8EL5UB0jn/fRAkD42KEc9maoop p5N+zWeNmN8uQqcc1aBOQSYy6yrSWZCjYl+xnjFtIxXiX6M28VmS9+pG2b/deUPD B3fnnRbqk4fJMwkGryarsyAffrmz2wPId5Chq3rt1+mduNJufN2kb6oMBCfbOVQ0 0bM3BHgdCTk/5tFmMhr0zPlEd+yf000Fv+RHLO45d/R2HRKB3L8BDCIEpSF+j/vP r9lvBAuiFPKw2Txqnhy77BF0Ct9lRRcx0l7hDB/chUVxkpYaqrNhyUNfUpXHvebk NUFWxmQpsgDcsfU5Yk0DoaDzU1R0sXo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:57:42 2025 by rpki-client