$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a921d48d-23c5-3689-afe8-f9efd7de1dab.roa File: a921d48d-23c5-3689-afe8-f9efd7de1dab.roa (raw, json) Hash identifier: rJ5NpFWaoEw1MNTlIh8jnyvphQIkBHlzeLCLYy5JTmE= Subject key identifier: A4:E0:47:08:A2:64:5C:31:5E:54:46:CE:65:E7:40:28:10:D2:12:66 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BA93284AFBE8382AD768ED200 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a921d48d-23c5-3689-afe8-f9efd7de1dab.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 48031 IP address blocks: 45.38.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:84:af:be:83:82:ad:76:8e:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=7219118f-e394-4b8b-aa5e-4f3e677439e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:f3:97:de:29:d1:a4:90:61:4f:90:7d:c1: 46:03:8a:45:73:53:63:13:2e:0a:22:13:d0:bd:1c: 4a:a1:03:06:60:b7:9d:8b:96:f9:c9:d1:61:a4:69: c1:50:a9:67:fb:48:8d:0b:d8:9d:7f:9c:2a:9e:69: 12:be:9d:8c:f5:e4:a9:f4:84:9a:65:21:25:98:6b: ca:1a:9e:6e:52:4b:60:77:eb:bf:46:2d:ee:6a:c1: ad:f8:71:d2:89:b3:8a:b5:c9:61:a0:53:6c:71:5c: dd:d5:d2:2c:e0:f9:3f:0a:d3:e6:55:90:0b:84:08: 76:32:9e:42:b2:d8:41:22:af:d7:46:e6:47:bf:98: 9b:38:6d:5f:a2:61:51:cd:f4:58:bf:bd:d5:bb:d5: f7:48:7f:ec:98:c2:16:4e:10:5d:f9:6d:22:6d:ea: 01:b6:00:ff:75:4e:ca:65:da:8b:c4:d5:fd:c7:bf: 9b:f5:12:f9:8c:6d:c9:0c:0c:d2:b5:82:08:ea:f7: ea:29:18:ed:f0:0b:80:d6:fc:bd:b0:23:1e:a8:d7: 36:c1:43:3d:61:e7:2c:45:b1:50:df:8d:0a:65:cc: 57:90:3a:1e:41:e8:48:4d:0b:c9:8e:d0:ed:dc:5e: 7d:44:2e:1f:d5:60:e4:48:3c:aa:ac:00:0c:d7:e4: fa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E0:47:08:A2:64:5C:31:5E:54:46:CE:65:E7:40:28:10:D2:12:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a921d48d-23c5-3689-afe8-f9efd7de1dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.38.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:95:67:54:c7:60:04:72:63:7e:d1:e3:cd:f9:38:89:17:95: f2:c4:32:1e:ff:bc:d3:d0:fa:14:92:da:11:03:2e:b6:08:37: f7:e8:16:06:c6:b4:48:10:c9:30:1a:5f:55:98:67:03:73:b1: a2:67:d7:2c:ed:17:61:28:1a:3d:86:e9:9a:ef:40:d2:84:48: 66:c9:d9:78:cc:a2:6e:15:cc:80:5d:18:b4:e8:96:3d:3a:9e: cd:56:70:e8:38:9e:ca:5d:51:bf:63:7c:b3:66:04:02:dc:38: f9:13:b6:6e:a4:8d:11:17:ee:42:31:fa:60:8e:6c:11:04:1a: 2a:09:0c:df:0d:a5:3b:63:24:4b:3f:90:66:74:8c:10:8b:84: 4e:2b:68:a2:a1:a4:e5:ea:f3:71:f8:2f:fd:a7:96:3b:c9:41: 59:35:8e:89:16:1a:d2:70:6d:b5:d2:6e:53:47:a2:b3:6f:f1: 8f:10:b7:3d:fb:b0:ef:13:59:69:84:8c:d8:26:6f:c4:66:d0: 6c:e6:b7:ff:02:0a:d0:07:83:12:cf:87:c3:f5:2a:cd:47:7b: 12:9e:cf:3c:77:5e:c9:15:a1:ed:e4:c5:0d:fd:c9:be:d8:c4: d3:19:fd:3f:97:9a:4a:7b:d3:2d:05:85:c4:fa:3a:f1:06:c2: 4d:ce:01:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoSvvoOCrXaO0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NzIxOTExOGYtZTM5NC00YjhiLWFhNWUtNGYzZTY3NzQzOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYLzl94p0aSQYU+QfcFGA4pFc1NjEy4KIhPQ vRxKoQMGYLedi5b5ydFhpGnBUKln+0iNC9idf5wqnmkSvp2M9eSp9ISaZSElmGvK Gp5uUktgd+u/Ri3uasGt+HHSibOKtclhoFNscVzd1dIs4Pk/CtPmVZALhAh2Mp5C sthBIq/XRuZHv5ibOG1fomFRzfRYv73Vu9X3SH/smMIWThBd+W0ibeoBtgD/dU7K ZdqLxNX9x7+b9RL5jG3JDAzStYII6vfqKRjt8AuA1vy9sCMeqNc2wUM9YecsRbFQ 340KZcxXkDoeQehITQvJjtDt3F59RC4f1WDkSDyqrAAM1+T6PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTgRwiiZFwxXlRGzmXnQCgQ0hJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTkyMWQ0OGQtMjNjNS0z Njg5LWFmZTgtZjllZmQ3ZGUxZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSbPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKVZ1THYARyY37R4835OIkXlfLEMh7/vNPQ+hSS2hEDLrYIN/foFgbG tEgQyTAaX1WYZwNzsaJn1yztF2EoGj2G6ZrvQNKESGbJ2XjMom4VzIBdGLTolj06 ns1WcOg4nspdUb9jfLNmBALcOPkTtm6kjREX7kIx+mCObBEEGioJDN8NpTtjJEs/ kGZ0jBCLhE4raKKhpOXq83H4L/2nljvJQVk1jokWGtJwbbXSblNHorNv8Y8Qtz37 sO8TWWmEjNgmb8Rm0Gzmt/8CCtAHgxLPh8P1Ks1HexKezzx3XskVoe3kxQ39yb7Y xNMZ/T+Xmkp70y0FhcT6OvEGwk3OAVM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:20:02 2025 by rpki-client