$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/1e69dbd6-694f-3c5d-89fb-a5c4a81df4df.roa File: 1e69dbd6-694f-3c5d-89fb-a5c4a81df4df.roa (raw, json) Hash identifier: ppUbk8kVQa0uWxqNvPIEUS3XGsraBKPDGsIo7tghlH0= Subject key identifier: 8E:C8:9C:80:87:DE:C3:49:5C:F5:93:4A:14:36:BA:F7:66:68:96:45 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584AECC122220671C9698D18E5D0 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/1e69dbd6-694f-3c5d-89fb-a5c4a81df4df.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 45.41.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:22:22:06:71:c9:69:8d:18:e5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d577d1fd-a8cd-4403-a53b-04ce293c7380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:0f:87:45:7a:64:a8:74:4a:bd:6e:4d:d3: c8:49:8f:b7:67:64:26:d0:10:33:35:ee:71:65:9b: c4:62:d7:fa:e5:55:bd:b5:fc:77:53:4e:40:ab:dd: 20:63:91:04:ea:a7:cc:31:f2:00:14:42:d0:0c:b0: 37:0b:1c:7d:44:8c:3a:b4:75:42:ce:6a:be:a6:36: d3:f4:90:a6:07:54:86:91:69:89:4e:c0:2e:07:dd: 51:f8:e3:24:76:58:8c:9c:b5:aa:3a:e3:d3:88:e9: 1c:fe:f4:da:c0:3e:61:80:ef:dc:99:f2:84:2f:5b: a6:d3:b7:ae:9a:59:1b:38:7d:fa:b7:ae:59:34:2c: 84:20:aa:4e:72:93:b8:bc:02:3c:ec:4c:91:c0:f2: 61:d6:c4:9e:a9:87:33:8b:e7:a0:a2:ca:31:36:62: 25:18:11:90:db:5a:ee:0e:7f:f2:8f:9f:03:bd:59: fe:51:e9:b3:99:a0:a0:79:3a:4f:36:a8:8e:07:20: da:15:d1:99:01:d3:33:15:72:5d:6b:63:2c:4e:a0: b3:de:86:33:12:2e:d3:95:73:ba:9a:dd:a5:97:b5: c8:73:56:1c:c8:dd:87:b4:7f:93:7c:95:5a:55:0a: 56:14:cd:d9:1d:41:8e:6f:a9:d3:e2:44:f0:d6:ac: 25:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C8:9C:80:87:DE:C3:49:5C:F5:93:4A:14:36:BA:F7:66:68:96:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/1e69dbd6-694f-3c5d-89fb-a5c4a81df4df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 45.41.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:06:f3:b1:5f:8a:c7:23:e1:52:35:de:d7:49:6f:c8:0c:9a: d2:d0:80:3c:36:51:ba:5e:ba:e4:3d:0d:f5:bb:d2:c6:b0:78: ca:50:70:ee:fe:62:a2:2f:96:64:72:5d:8f:04:f9:5f:02:e6: ab:ee:4a:d7:77:18:f5:46:1a:c8:16:46:52:ca:78:61:9e:e7: d8:47:13:4e:18:43:6c:b3:8f:cf:6f:d5:01:34:7a:90:02:d4: 70:78:85:c4:02:b7:a9:e6:e2:c2:33:20:e7:8e:f5:5c:84:cc: 57:94:3f:0c:db:02:a7:42:53:a2:0f:cc:2b:42:64:d0:60:ea: 63:6e:7c:33:89:64:7e:88:57:81:59:f9:dd:19:b0:b6:e2:68: 10:29:ad:22:60:ed:9a:e2:55:48:5b:0b:b6:d2:f2:35:5c:8b: 00:ab:5f:c0:f2:85:ec:50:2f:b3:d8:4f:13:82:89:a8:26:d4: 94:4e:52:44:7a:f5:74:f7:01:80:4c:e6:a0:7e:57:8e:af:ae: d4:0a:e9:ac:35:cf:ce:47:06:50:61:20:e9:9d:aa:f6:8d:67: bd:97:04:a8:ed:87:06:62:06:f4:f6:ce:da:b8:4f:2d:ab:fa: f8:d4:af:32:0b:b1:e1:62:66:9a:45:13:ce:7d:9d:1c:9e:0a: 09:79:b1:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSIiBnHJaY0Y5dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDU3N2QxZmQtYThjZC00NDAzLWE1M2ItMDRjZTI5M2M3MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTEPh0V6ZKh0Sr1uTdPISY+3Z2Qm0BAzNe5x ZZvEYtf65VW9tfx3U05Aq90gY5EE6qfMMfIAFELQDLA3Cxx9RIw6tHVCzmq+pjbT 9JCmB1SGkWmJTsAuB91R+OMkdliMnLWqOuPTiOkc/vTawD5hgO/cmfKEL1um07eu mlkbOH36t65ZNCyEIKpOcpO4vAI87EyRwPJh1sSeqYczi+egosoxNmIlGBGQ21ru Dn/yj58DvVn+UemzmaCgeTpPNqiOByDaFdGZAdMzFXJda2MsTqCz3oYzEi7TlXO6 mt2ll7XIc1YcyN2HtH+TfJVaVQpWFM3ZHUGOb6nT4kTw1qwl0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7InICH3sNJXPWTShQ2uvdmaJZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvMWU2OWRiZDYtNjk0Zi0z YzVkLTg5ZmItYTVjNGE4MWRmNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwG87Ffiscj4VI13tdJb8gMmtLQgDw2UbpeuuQ9DfW70saweMpQcO7+ YqIvlmRyXY8E+V8C5qvuStd3GPVGGsgWRlLKeGGe59hHE04YQ2yzj89v1QE0epAC 1HB4hcQCt6nm4sIzIOeO9VyEzFeUPwzbAqdCU6IPzCtCZNBg6mNufDOJZH6IV4FZ +d0ZsLbiaBAprSJg7ZriVUhbC7bS8jVciwCrX8DyhexQL7PYTxOCiagm1JROUkR6 9XT3AYBM5qB+V46vrtQK6aw1z85HBlBhIOmdqvaNZ72XBKjthwZiBvT2ztq4Ty2r +vjUrzILseFiZppFE859nRyeCgl5sQc= -----END CERTIFICATE-----Generated at Sat Aug 23 21:56:23 2025 by rpki-client