$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/d8de2f24-85d0-37dd-a2f8-018801ca07ac.roa File: d8de2f24-85d0-37dd-a2f8-018801ca07ac.roa (raw, json) Hash identifier: CwVEOzj5WOByUSWk2xH8hJfwhN3asM7xtXIpq/NuNGc= Subject key identifier: 01:A6:37:7A:4B:0F:2A:A7:2B:EC:6E:CF:35:60:FD:0F:A3:53:72:55 Certificate issuer: /CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Certificate serial: 010D0C9F4328584B5DD1ED79B103B8F7BDD82080 Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/d8de2f24-85d0-37dd-a2f8-018801ca07ac.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 394491 IP address blocks: 45.45.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:ed:79:b1:03:b8:f7:bd:d8:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=ef2b969c-9ba4-49fa-9564-14e40f04a33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a2:9d:31:ab:92:ef:14:dc:25:03:05:8d:f8: 87:41:00:e0:e6:a4:bd:01:5e:1a:64:83:f4:5e:c3: 32:9d:8d:bd:aa:9a:e1:93:a2:9e:07:19:9b:0e:18: e3:b8:79:2f:b0:81:7b:b4:0e:63:25:76:6c:cb:31: 83:f3:07:d3:90:c1:a2:2a:78:a3:86:e6:3c:1a:1f: 4b:11:1e:3c:dd:38:bd:8c:69:4d:aa:0f:39:b9:43: ba:7b:45:5e:61:fd:4c:92:55:d1:64:b4:8f:73:fc: b9:b7:5c:7c:2a:7c:7a:fb:d9:33:98:af:9c:85:bb: 54:b1:2d:67:ef:ce:2e:86:f6:c5:f6:b0:63:e3:aa: e4:4f:75:01:c3:04:7b:eb:3c:62:b0:56:bf:b9:01: 14:9f:1d:99:4c:49:88:7c:3d:e5:a8:53:96:04:25: d7:6e:4e:7b:b5:9b:63:6c:b7:a8:3b:f1:b0:1b:af: cf:6f:2b:b6:73:23:8f:e6:6b:f4:c4:f8:ee:a0:df: e8:06:e4:39:f0:61:3a:7a:cb:6b:71:46:5b:80:ad: 00:3e:80:eb:12:ec:ab:6f:43:79:1e:67:96:9c:e7: 39:38:4f:8a:fd:37:5f:b1:80:d3:40:f9:0c:e2:85: 26:e4:00:48:05:4f:be:5a:76:79:a4:c3:a9:48:cb: a0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A6:37:7A:4B:0F:2A:A7:2B:EC:6E:CF:35:60:FD:0F:A3:53:72:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/d8de2f24-85d0-37dd-a2f8-018801ca07ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl X509v3 Authority Key Identifier: keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer sbgp-ipAddrBlock: critical IPv4: 45.45.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:4d:c0:b0:69:bb:1d:ae:23:4f:4a:9b:0c:c1:86:fe:08:02: 54:84:3b:58:fc:75:48:6c:33:37:e9:5c:cb:57:10:fe:dc:7b: 45:e6:ef:ac:ed:42:ed:69:0e:13:bf:d6:7f:eb:c3:e0:4a:6b: aa:42:f8:57:03:47:be:1d:13:42:23:ca:57:ce:8a:cf:ec:7c: 18:ba:28:7f:79:cb:10:75:a8:d2:93:35:c2:13:0d:41:9a:2d: 99:5b:10:be:b5:00:34:a6:18:07:f2:32:9a:bc:a1:79:b7:ca: ff:c0:06:3a:33:e7:b5:49:b8:49:cc:d9:88:ed:ef:45:6a:9e: 30:0f:ab:4a:63:20:50:b3:63:dd:1f:ea:4e:aa:2c:05:f6:b5: 8e:8b:b4:29:d4:b3:24:4b:2c:b1:60:31:88:bb:a5:00:c4:a8: 8e:ab:f8:32:9a:2a:80:45:b7:6c:5b:e7:8c:e0:33:de:7f:de: 86:f1:56:ea:e7:11:ab:3d:87:78:2a:c0:6f:21:ae:94:07:5a: 4b:cf:b9:7d:2b:fa:86:8f:30:5c:91:83:e1:d2:ba:be:c2:7a: 2c:8b:3d:51:f7:0c:09:22:60:a6:1f:2f:84:cc:cc:cb:3e:63: da:03:4d:61:97:0b:13:e7:6d:59:be:d4:96:fa:28:c9:60:c5: 68:9c:dc:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0e15sQO4973YIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmYmRhYzgtMjBjMC00ZGE0LTg2NTQtMjdiNGJmNTky OTMwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZWYyYjk2OWMtOWJhNC00OWZhLTk1NjQtMTRlNDBmMDRhMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aKdMauS7xTcJQMFjfiHQQDg5qS9AV4aZIP0 XsMynY29qprhk6KeBxmbDhjjuHkvsIF7tA5jJXZsyzGD8wfTkMGiKnijhuY8Gh9L ER483Ti9jGlNqg85uUO6e0VeYf1MklXRZLSPc/y5t1x8Knx6+9kzmK+chbtUsS1n 784uhvbF9rBj46rkT3UBwwR76zxisFa/uQEUnx2ZTEmIfD3lqFOWBCXXbk57tZtj bLeoO/GwG6/Pbyu2cyOP5mv0xPjuoN/oBuQ58GE6estrcUZbgK0APoDrEuyrb0N5 HmeWnOc5OE+K/TdfsYDTQPkM4oUm5ABIBU++WnZ5pMOpSMugkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGmN3pLDyqnK+xuzzVg/Q+jU3JVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZi ZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0YmY1OTI5MzAvZDhkZTJmMjQtODVkMC0z N2RkLWEyZjgtMDE4ODAxY2EwN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTJmYmRhYzgtMjBjMC00ZGE0LTg2 NTQtMjdiNGJmNTkyOTMwLzUyZmJkYWM4LTIwYzAtNGRhNC04NjU0LTI3YjRiZjU5 MjkzMC5jcmwwHwYDVR0jBBgwFoAUg/WmWf8elpbI5bS53/Y9NykwpHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZiZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0 YmY1OTI5MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlNwLBpux2uI09KmwzBhv4IAlSEO1j8dUhsMzfpXMtXEP7ce0Xm76zt Qu1pDhO/1n/rw+BKa6pC+FcDR74dE0IjylfOis/sfBi6KH95yxB1qNKTNcITDUGa LZlbEL61ADSmGAfyMpq8oXm3yv/ABjoz57VJuEnM2Yjt70VqnjAPq0pjIFCzY90f 6k6qLAX2tY6LtCnUsyRLLLFgMYi7pQDEqI6r+DKaKoBFt2xb54zgM95/3obxVurn Eas9h3gqwG8hrpQHWkvPuX0r+oaPMFyRg+HSur7CeiyLPVH3DAkiYKYfL4TMzMs+ Y9oDTWGXCxPnbVm+1Jb6KMlgxWic3Dw= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:21 2025 by rpki-client