$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ae69a8f-bdd7-37db-9fb3-221d511cd8b2.roa File: 4ae69a8f-bdd7-37db-9fb3-221d511cd8b2.roa (raw, json) Hash identifier: vHjsVQCiNz2HrrBY7egrEB50fy4z42j6XghsSP/RKs8= Subject key identifier: FB:AF:99:A9:9A:CE:D0:3E:F5:EF:15:28:28:33:DC:2B:E6:6B:96:45 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584B2E5C45DBCDE1069E62A020C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ae69a8f-bdd7-37db-9fb3-221d511cd8b2.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 214238 IP address blocks: 45.38.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:45:db:cd:e1:06:9e:62:a0:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=c1c2d119-5c3a-4c53-8d97-8c6eda989bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:17:65:07:6c:c8:92:17:af:6e:17:5f:14: 3d:49:75:98:cc:3b:ce:75:ad:48:39:f6:b7:92:bf: ee:c5:68:14:c9:fa:79:dc:17:ea:7c:e1:a6:0c:a4: 80:3b:a0:08:c9:92:38:8c:26:e8:90:95:fb:56:f0: 67:85:23:b0:03:83:54:98:77:db:3b:77:c5:08:ba: d9:f2:1c:a0:18:16:d9:26:43:83:e5:f9:d4:03:e5: 78:3e:0a:ea:a4:c3:c0:68:49:77:a6:e6:bc:a9:a2: 49:b4:c4:75:f3:5a:06:0f:2d:b7:21:9c:04:71:37: c8:9d:24:79:c7:18:ea:37:19:16:41:32:2b:16:07: 2e:c0:45:30:e5:c3:ab:cd:6a:99:88:22:ae:5c:aa: 7b:1a:2a:02:be:75:47:6f:5c:d5:f5:af:5e:ef:d7: 4f:6c:d0:17:52:3f:3b:84:88:31:9d:cf:52:38:30: 61:f8:a1:10:99:27:f7:51:12:23:f4:c7:5a:77:37: 21:76:82:7a:f8:e9:2e:de:aa:94:eb:ba:9a:9b:e0: aa:9b:7a:d6:87:9d:99:fd:ba:f8:f2:ec:88:26:1a: 72:f4:d4:bb:d9:d2:a3:da:7c:31:21:d3:b6:d5:50: 96:dc:0e:b5:85:ea:6d:76:9d:59:f3:b4:55:4c:ad: e0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AF:99:A9:9A:CE:D0:3E:F5:EF:15:28:28:33:DC:2B:E6:6B:96:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ae69a8f-bdd7-37db-9fb3-221d511cd8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.38.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:89:f1:27:64:7f:34:82:2d:10:0a:a7:b1:b5:19:38:59:21: 86:10:e7:c2:d5:6c:59:c0:c4:b3:6c:f2:76:4c:a9:90:20:71: 2b:b0:12:d6:66:8f:2d:26:b2:c0:03:aa:b8:95:1a:86:ba:29: 03:a0:17:9b:63:2d:58:a8:be:36:f4:f1:a9:ba:d9:84:a6:34: 72:1f:05:bf:ad:81:5d:9a:c8:2f:70:20:94:fc:0f:4b:b3:c2: cb:0b:5f:17:54:e8:46:17:f7:4d:c6:58:0e:c0:b5:4d:43:f1: 75:ae:b7:e1:51:7b:3d:f1:8b:d2:be:11:7e:2b:c2:a2:1c:e6: 26:10:b9:73:20:71:bd:13:63:a4:30:70:a6:8e:c8:7b:7a:d3: 51:84:47:f8:9b:32:f6:64:59:f4:43:0b:1a:2f:ec:74:c3:36: de:c7:af:06:71:4b:f9:2e:a6:7c:11:9d:09:23:12:bf:d1:e8: 2d:ba:6a:bf:c8:aa:f5:4b:d4:45:0e:bc:36:69:df:28:86:b5: 12:00:bc:06:3d:02:9b:fe:91:bb:d4:ef:c2:fa:0b:0a:39:8a: b8:ff:34:b5:12:4a:0f:d4:5c:ac:08:34:74:8c:cb:26:45:20: 05:f6:ad:9c:50:d5:97:50:e7:68:9b:30:af:6a:ed:e7:6e:4f: bb:cc:87:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEXbzeEGnmKgIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk YzFjMmQxMTktNWMzYS00YzUzLThkOTctOGM2ZWRhOTg5YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/4XZQdsyJIXr24XXxQ9SXWYzDvOda1IOfa3 kr/uxWgUyfp53BfqfOGmDKSAO6AIyZI4jCbokJX7VvBnhSOwA4NUmHfbO3fFCLrZ 8hygGBbZJkOD5fnUA+V4PgrqpMPAaEl3pua8qaJJtMR181oGDy23IZwEcTfInSR5 xxjqNxkWQTIrFgcuwEUw5cOrzWqZiCKuXKp7GioCvnVHb1zV9a9e79dPbNAXUj87 hIgxnc9SODBh+KEQmSf3URIj9MdadzchdoJ6+Oku3qqU67qam+Cqm3rWh52Z/br4 8uyIJhpy9NS72dKj2nwxIdO21VCW3A61heptdp1Z87RVTK3gpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuvmamaztA+9e8VKCgz3Cvma5ZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGFlNjlhOGYtYmRkNy0z N2RiLTlmYjMtMjIxZDUxMWNkOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACJ8SdkfzSCLRAKp7G1GThZIYYQ58LVbFnAxLNs8nZMqZAgcSuwEtZm jy0mssADqriVGoa6KQOgF5tjLViovjb08am62YSmNHIfBb+tgV2ayC9wIJT8D0uz wssLXxdU6EYX903GWA7AtU1D8XWut+FRez3xi9K+EX4rwqIc5iYQuXMgcb0TY6Qw cKaOyHt601GER/ibMvZkWfRDCxov7HTDNt7HrwZxS/kupnwRnQkjEr/R6C26ar/I qvVL1EUOvDZp3yiGtRIAvAY9Apv+kbvU78L6Cwo5irj/NLUSSg/UXKwINHSMyyZF IAX2rZxQ1ZdQ52ibMK9q7eduT7vMhxI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:19 2025 by rpki-client