$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfca6c57-7a0d-39ee-8e6d-d291d1950f53.roa File: bfca6c57-7a0d-39ee-8e6d-d291d1950f53.roa (raw, json) Hash identifier: L9U9RmZEfKn3fKQW7ZcaDjhOJ92Bt1MchmBXNuINsyE= Subject key identifier: 1F:5B:42:26:64:92:09:C6:A4:89:5C:B8:E4:BD:10:2C:87:AB:9A:62 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584BBE4047A771F4A3771D247480 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfca6c57-7a0d-39ee-8e6d-d291d1950f53.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 8881 IP address blocks: 45.39.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:47:a7:71:f4:a3:77:1d:24:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=52e14116-2c54-4d21-982a-1824bf527da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:f2:20:80:26:2c:e1:6d:35:4c:aa:55:92: 3f:af:94:52:3b:4e:c5:3d:6f:3d:91:25:8d:74:d9: 27:1f:62:90:53:68:57:03:59:c9:51:80:71:f9:40: 98:74:cc:08:65:12:08:c1:85:f8:d5:ef:4f:5c:7a: 70:89:dc:c5:ee:90:12:d4:8c:24:e1:35:5e:3c:f5: 4f:76:ab:79:4c:42:3b:79:02:c8:b0:b8:be:fe:4c: dc:c6:a5:bb:a6:a1:29:2c:58:0a:d1:cf:2d:c9:14: 04:bc:24:82:fa:a1:e1:8b:88:70:26:52:37:f3:6c: 7c:9a:8f:b2:32:f8:84:c4:2e:2c:58:03:ad:5f:62: 76:6d:75:cb:50:45:76:92:c7:e8:65:25:32:dd:79: 7e:7f:10:bc:d5:31:bf:85:30:48:e8:1a:af:cf:2b: ee:97:6d:1b:fc:16:d0:cc:46:0a:f0:fc:90:10:1a: 39:13:93:2e:c2:df:f2:39:54:26:f6:d8:a2:aa:06: d1:35:93:f8:e9:a9:1d:ef:c8:8a:3f:24:b3:3d:c1: 83:5a:a2:7e:07:c6:c0:21:0d:53:7a:69:c6:dd:a0: 23:d3:23:9e:09:04:b4:68:53:d0:e6:62:86:99:77: 07:79:6d:fe:8f:27:37:cd:43:4e:f2:fb:28:ca:9b: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5B:42:26:64:92:09:C6:A4:89:5C:B8:E4:BD:10:2C:87:AB:9A:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bfca6c57-7a0d-39ee-8e6d-d291d1950f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 45.39.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f7:ec:8f:e3:0a:df:8e:d3:7b:3c:81:95:8e:e6:4d:14:5b: 0c:9d:a9:84:f8:7f:e9:44:5e:99:21:67:2b:8c:47:2b:07:d2: b9:f9:d8:ea:79:90:ac:06:32:31:92:6c:0c:fb:d9:0a:b3:cb: 96:50:0b:be:49:83:4d:41:ea:8b:80:1a:be:01:0b:74:7d:e7: e4:26:8c:2b:27:23:be:ef:d2:30:95:81:96:98:cc:70:29:50: 62:de:d4:3c:ba:e7:55:a1:9a:7a:e5:88:af:40:4e:d6:3c:de: 06:14:68:00:12:18:b6:2d:fd:03:89:4b:ad:31:46:75:0b:7f: 9f:87:01:72:e5:24:7c:73:7d:0e:ef:68:c7:43:c7:a1:8a:ac: 23:48:fe:f7:aa:4a:c5:fe:9c:06:0e:d4:0e:a1:de:fd:34:10: c9:7d:f0:03:5f:d3:3b:de:9d:0f:a1:08:71:40:7e:96:84:e5: 6b:f6:00:b5:99:a5:ff:0d:72:9d:89:a6:85:d2:73:d5:3f:79: 45:ac:75:20:e6:03:94:6d:b2:37:af:8a:c5:cc:3f:af:15:22: 46:b9:e4:3f:c8:d9:28:a4:8b:97:9b:ef:7b:f4:c4:e8:b7:8c: 23:d5:74:55:35:ff:4d:00:c3:18:35:1e:87:08:29:6f:a3:cf: 72:9e:cf:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEencfSjdx0kdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NTJlMTQxMTYtMmM1NC00ZDIxLTk4MmEtMTgyNGJmNTI3ZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp7yIIAmLOFtNUyqVZI/r5RSO07FPW89kSWN dNknH2KQU2hXA1nJUYBx+UCYdMwIZRIIwYX41e9PXHpwidzF7pAS1Iwk4TVePPVP dqt5TEI7eQLIsLi+/kzcxqW7pqEpLFgK0c8tyRQEvCSC+qHhi4hwJlI382x8mo+y MviExC4sWAOtX2J2bXXLUEV2ksfoZSUy3Xl+fxC81TG/hTBI6Bqvzyvul20b/BbQ zEYK8PyQEBo5E5Muwt/yOVQm9tiiqgbRNZP46akd78iKPySzPcGDWqJ+B8bAIQ1T emnG3aAj0yOeCQS0aFPQ5mKGmXcHeW3+jyc3zUNO8vsoypvq9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9bQiZkkgnGpIlcuOS9ECyHq5piMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmZjYTZjNTctN2EwZC0z OWVlLThlNmQtZDI5MWQxOTUwZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSeTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf37I/jCt+O03s8gZWO5k0UWwydqYT4f+lEXpkhZyuMRysH0rn52Op5 kKwGMjGSbAz72Qqzy5ZQC75Jg01B6ouAGr4BC3R95+QmjCsnI77v0jCVgZaYzHAp UGLe1Dy651WhmnrliK9ATtY83gYUaAASGLYt/QOJS60xRnULf5+HAXLlJHxzfQ7v aMdDx6GKrCNI/veqSsX+nAYO1A6h3v00EMl98ANf0zvenQ+hCHFAfpaE5Wv2ALWZ pf8Ncp2JpoXSc9U/eUWsdSDmA5RtsjevisXMP68VIka55D/I2Siki5eb73v0xOi3 jCPVdFU1/00Awxg1HocIKW+jz3Kez+s= -----END CERTIFICATE-----Generated at Wed Nov 5 00:46:09 2025 by rpki-client