$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa File: abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa (raw, json) Hash identifier: wdfMknS268GxAeZifoLrg3U11WPzMKpAHt9um5M3ObQ= Subject key identifier: 11:A7:D3:05:4E:2D:0A:91:E5:DA:EF:26:BB:0B:E7:F2:C6:31:43:E8 Certificate issuer: /CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Certificate serial: 010D0C9F4328584B5DD1F35B178F456A007D2C40 Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 394491 IP address blocks: 45.45.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f3:5b:17:8f:45:6a:00:7d:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=fca5072a-38af-4e5a-be11-d495dd530dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:64:9b:21:71:2c:7b:d0:ec:b9:66:93:fa: 98:d3:4d:18:77:39:6b:f9:b7:b0:cf:20:d0:35:f4: 82:9f:43:d6:21:3f:4a:9a:51:87:94:83:1e:e6:e9: 7b:02:2b:b8:ad:97:2d:d5:92:3d:54:8b:2b:98:f5: 34:68:23:2c:52:b7:57:c5:7b:fd:db:43:d5:51:ea: 9c:9e:73:ad:33:48:a7:c3:0b:c8:56:5b:77:2a:0a: b0:1d:79:9e:04:4d:aa:5c:67:7f:96:5b:93:3a:4a: f7:32:98:e1:e8:87:0d:95:ad:f6:45:4b:ff:39:05: a5:a8:3c:97:af:66:3b:f4:f7:ce:b5:fb:45:34:09: 4e:87:d7:43:73:0c:8b:6e:0c:a9:49:e7:41:c9:50: 0a:2d:ce:ea:58:d7:20:9e:f4:4a:7f:a2:99:65:6e: d2:63:ee:8c:b3:f7:a6:c3:79:c5:90:c6:45:8c:e8: 64:12:c8:74:f5:b5:34:df:bf:07:89:bf:1f:c8:6a: b8:12:cd:36:00:e9:73:58:ea:ed:b5:10:68:99:38: ad:4d:1e:5f:8a:bd:fe:d1:2a:91:c3:c8:34:bb:c1: 0f:16:1a:04:86:81:50:cf:c3:b0:f2:a0:3b:60:83: ec:0a:a2:3d:fc:5f:39:d5:c4:59:01:88:af:8b:f2: 39:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A7:D3:05:4E:2D:0A:91:E5:DA:EF:26:BB:0B:E7:F2:C6:31:43:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/abed2747-44df-31bb-b5c4-71ee2ca51ccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl X509v3 Authority Key Identifier: keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer sbgp-ipAddrBlock: critical IPv4: 45.45.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a5:01:fa:e3:32:41:4f:18:2f:15:ee:65:f7:c6:0d:43:5e: f5:fb:71:7c:e1:0e:fe:2a:d5:2e:e8:6b:55:83:84:7b:20:21: 7b:4c:a5:f9:c0:3d:b7:b7:79:32:c0:c0:6f:f5:fa:a9:bb:29: 22:60:ae:ae:dc:b4:a0:60:a6:13:50:ce:a1:7f:4e:38:6b:d5: fa:b9:13:31:53:5e:b8:30:b5:8b:71:1a:af:28:aa:64:35:eb: 2c:04:e8:fc:c6:51:d3:1e:9e:29:97:89:c9:c3:92:f1:97:28: 6a:e0:b4:ce:f7:68:aa:16:14:32:f2:6c:60:03:3e:8f:00:e1: 3b:1a:71:c1:f0:34:19:11:92:01:26:8b:d9:83:94:d8:1e:ab: 40:32:85:1a:02:65:ba:6c:5c:0a:dc:03:f7:a6:f6:44:cc:1e: 28:51:94:e2:13:c4:ed:cf:f1:fc:a2:42:bc:88:ae:a6:03:33: c8:5b:f2:7b:2b:da:59:09:84:de:5f:9f:ff:03:72:82:72:f4: 50:d6:7d:d3:d4:c8:e0:90:87:77:6e:d1:1a:9f:e2:cb:f4:87: e4:be:1e:27:97:8e:d2:e2:f5:d9:c9:90:47:5a:46:88:50:e4: 2f:a8:19:f9:32:8b:dc:c2:f9:79:cc:2a:b8:ed:3f:99:88:aa: 8c:92:1b:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fNbF49FagB9LEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmYmRhYzgtMjBjMC00ZGE0LTg2NTQtMjdiNGJmNTky OTMwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZmNhNTA3MmEtMzhhZi00ZTVhLWJlMTEtZDQ5NWRkNTMwZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7dkmyFxLHvQ7Llmk/qY000Ydzlr+bewzyDQ NfSCn0PWIT9KmlGHlIMe5ul7Aiu4rZct1ZI9VIsrmPU0aCMsUrdXxXv920PVUeqc nnOtM0inwwvIVlt3KgqwHXmeBE2qXGd/lluTOkr3Mpjh6IcNla32RUv/OQWlqDyX r2Y79PfOtftFNAlOh9dDcwyLbgypSedByVAKLc7qWNcgnvRKf6KZZW7SY+6Ms/em w3nFkMZFjOhkEsh09bU0378Hib8fyGq4Es02AOlzWOrttRBomTitTR5fir3+0SqR w8g0u8EPFhoEhoFQz8Ow8qA7YIPsCqI9/F851cRZAYivi/I5TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGn0wVOLQqR5drvJrsL5/LGMUPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZi ZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0YmY1OTI5MzAvYWJlZDI3NDctNDRkZi0z MWJiLWI1YzQtNzFlZTJjYTUxY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTJmYmRhYzgtMjBjMC00ZGE0LTg2 NTQtMjdiNGJmNTkyOTMwLzUyZmJkYWM4LTIwYzAtNGRhNC04NjU0LTI3YjRiZjU5 MjkzMC5jcmwwHwYDVR0jBBgwFoAUg/WmWf8elpbI5bS53/Y9NykwpHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZiZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0 YmY1OTI5MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS39MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6lAfrjMkFPGC8V7mX3xg1DXvX7cXzhDv4q1S7oa1WDhHsgIXtMpfnA Pbe3eTLAwG/1+qm7KSJgrq7ctKBgphNQzqF/Tjhr1fq5EzFTXrgwtYtxGq8oqmQ1 6ywE6PzGUdMenimXicnDkvGXKGrgtM73aKoWFDLybGADPo8A4TsaccHwNBkRkgEm i9mDlNgeq0AyhRoCZbpsXArcA/em9kTMHihRlOITxO3P8fyiQryIrqYDM8hb8nsr 2lkJhN5fn/8DcoJy9FDWfdPUyOCQh3du0Rqf4sv0h+S+HieXjtLi9dnJkEdaRohQ 5C+oGfkyi9zC+XnMKrjtP5mIqoySG3g= -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:38 2025 by rpki-client