$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/248da6ac-99ea-39a4-92ee-da70d147a0f4.roa File: 248da6ac-99ea-39a4-92ee-da70d147a0f4.roa (raw, json) Hash identifier: G40g/aYGQi/P8+1J32alrbVVRw1x6+LKm5V1VQGwVXQ= Subject key identifier: 6C:7B:63:5A:D2:86:79:AF:65:72:2E:05:B1:C9:9F:F3:36:BB:1F:F2 Certificate issuer: /CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Certificate serial: 010D0C9F4328584B5DD1ED8FE426B1E3DD04D590 Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/248da6ac-99ea-39a4-92ee-da70d147a0f4.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 394491 IP address blocks: 45.45.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:ed:8f:e4:26:b1:e3:dd:04:d5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=1b73296b-e074-4633-8319-fc7e4e2831ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:16:53:49:e5:2b:bb:37:94:79:90:3a:ca: a4:39:71:f2:ba:d0:89:65:c3:ca:e0:f1:a5:b1:72: a1:7a:fa:c1:49:47:ac:02:31:fa:44:44:ce:71:5d: 72:ff:58:f1:95:4d:0b:05:12:42:26:98:fd:8f:f8: b0:ad:b5:76:90:b4:ef:d6:f8:6c:5b:bf:d0:a7:f7: 1d:4d:a6:ba:db:0b:43:b7:ec:5a:ce:53:a9:15:2f: 59:f6:ed:84:cd:a7:c4:e8:d6:c0:19:ae:af:f8:b4: ac:98:f0:61:94:a6:72:8e:4f:71:0f:20:66:53:0e: 9e:63:64:2c:5a:6f:e2:8c:32:e6:3e:39:fd:9e:e0: a4:09:a9:6e:b8:76:dd:07:5d:12:6d:93:55:bf:ba: bf:4f:99:b2:50:b6:4f:e6:8f:24:a3:dc:e8:6e:3e: 35:5c:3c:0e:ca:96:61:9a:af:8e:68:ed:80:bf:39: 73:11:3e:95:84:ec:a0:e6:7b:f4:9e:5d:1d:63:c7: 74:e0:72:b2:06:6c:60:c5:38:4b:e4:af:d0:1a:41: d5:21:6d:8c:b1:3d:a0:5c:78:22:6f:25:e9:e7:09: b9:af:ab:21:01:f2:00:31:f7:a7:27:05:1a:a1:82: ba:c0:d1:36:7d:75:6a:60:66:dd:a1:b5:3d:96:f1: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:63:5A:D2:86:79:AF:65:72:2E:05:B1:C9:9F:F3:36:BB:1F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/248da6ac-99ea-39a4-92ee-da70d147a0f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl X509v3 Authority Key Identifier: keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer sbgp-ipAddrBlock: critical IPv4: 45.45.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c2:6a:2b:48:e7:fb:6c:dd:8a:08:7b:95:f5:ef:66:05:51: 6b:d2:24:c2:a4:8b:a7:b9:a2:14:b2:b5:7f:16:c2:43:dd:99: 69:82:1e:93:cd:94:55:bc:49:cb:69:df:d4:3f:9f:7f:68:4d: 59:12:4b:48:6a:19:3f:ca:1d:4b:a8:bf:1c:cb:e9:c5:38:3a: 01:74:2e:f7:83:ac:9d:69:99:dc:40:33:5f:b3:13:21:62:f1: 5c:49:06:7f:68:e7:02:49:de:c0:d6:31:8f:1a:f5:09:6b:8c: f9:f4:c8:ab:f7:10:16:7e:b8:00:0d:df:d1:95:23:24:13:de: 9d:03:f7:71:4e:7a:74:ac:60:5f:7d:b1:af:c2:81:c9:f6:f7: e0:07:ee:c6:f9:01:5a:8e:15:c9:71:a8:28:cc:6e:fb:02:50: 3c:d1:34:e0:83:6f:5c:db:7e:a8:50:f9:e1:50:08:6b:90:aa: 4a:79:58:5e:96:82:15:67:23:f3:b8:e1:7e:28:d7:0b:cc:48: 55:9f:ef:2d:0e:70:4a:8a:85:16:e6:ab:fb:30:e1:eb:fc:0f: c6:5e:8d:e8:9a:00:c4:c8:dd:4a:81:e6:af:77:40:14:2b:a0: e6:4d:06:2e:00:22:9c:db:f4:48:a0:6a:13:29:a8:83:6e:d0: d9:5c:24:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0e2P5Cax490E1ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmYmRhYzgtMjBjMC00ZGE0LTg2NTQtMjdiNGJmNTky OTMwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MWI3MzI5NmItZTA3NC00NjMzLTgzMTktZmM3ZTRlMjgzMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAQWU0nlK7s3lHmQOsqkOXHyutCJZcPK4PGl sXKhevrBSUesAjH6RETOcV1y/1jxlU0LBRJCJpj9j/iwrbV2kLTv1vhsW7/Qp/cd Taa62wtDt+xazlOpFS9Z9u2EzafE6NbAGa6v+LSsmPBhlKZyjk9xDyBmUw6eY2Qs Wm/ijDLmPjn9nuCkCaluuHbdB10SbZNVv7q/T5myULZP5o8ko9zobj41XDwOypZh mq+OaO2AvzlzET6VhOyg5nv0nl0dY8d04HKyBmxgxThL5K/QGkHVIW2MsT2gXHgi byXp5wm5r6shAfIAMfenJwUaoYK6wNE2fXVqYGbdobU9lvFOwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx7Y1rShnmvZXIuBbHJn/M2ux/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZi ZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0YmY1OTI5MzAvMjQ4ZGE2YWMtOTllYS0z OWE0LTkyZWUtZGE3MGQxNDdhMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTJmYmRhYzgtMjBjMC00ZGE0LTg2 NTQtMjdiNGJmNTkyOTMwLzUyZmJkYWM4LTIwYzAtNGRhNC04NjU0LTI3YjRiZjU5 MjkzMC5jcmwwHwYDVR0jBBgwFoAUg/WmWf8elpbI5bS53/Y9NykwpHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZiZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0 YmY1OTI5MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTCaitI5/ts3YoIe5X172YFUWvSJMKki6e5ohSytX8WwkPdmWmCHpPN lFW8Sctp39Q/n39oTVkSS0hqGT/KHUuovxzL6cU4OgF0LveDrJ1pmdxAM1+zEyFi 8VxJBn9o5wJJ3sDWMY8a9QlrjPn0yKv3EBZ+uAAN39GVIyQT3p0D93FOenSsYF99 sa/Cgcn29+AH7sb5AVqOFclxqCjMbvsCUDzRNOCDb1zbfqhQ+eFQCGuQqkp5WF6W ghVnI/O44X4o1wvMSFWf7y0OcEqKhRbmq/sw4ev8D8ZejeiaAMTI3UqB5q93QBQr oOZNBi4AIpzb9EigahMpqINu0NlcJGg= -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:23 2025 by rpki-client