$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa File: 19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa (raw, json) Hash identifier: x42pHFD9a5rAKdPvCGFa+fvFwFK1DMVYKVg5qj+5i+g= Subject key identifier: 52:2A:56:C6:77:F9:99:3F:83:13:61:39:7B:72:BB:AA:02:04:CB:81 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584B79BCBEB0611949AD24268B80 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 5645 IP address blocks: 192.252.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:be:b0:61:19:49:ad:24:26:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=d45edf7b-8ab6-4d98-a37f-d8ac1d96f17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:94:25:b5:f7:1c:19:aa:db:be:8d:ff:47:21: a3:94:0b:e1:19:d9:01:9d:d6:55:f7:76:97:74:dd: d3:fe:31:aa:0c:cb:52:d7:42:94:8b:42:3a:0f:6a: d7:b4:80:bd:1e:87:ac:c1:9f:6f:a9:7d:99:48:4e: 29:50:f5:5a:1f:da:b4:be:e9:12:6f:e0:91:a9:fd: 9e:61:92:94:95:8b:fb:f1:35:50:37:e3:28:79:24: 9c:23:27:aa:3c:d1:04:4a:2b:cc:e1:e6:cd:30:d0: 8a:94:16:44:24:7c:3b:5d:89:47:69:94:7a:6a:31: f2:3d:77:af:e8:b8:87:0d:cd:c1:ef:d0:2c:43:b8: e4:e1:ed:d3:bc:c6:81:fc:7c:2f:30:68:53:51:73: ec:e3:9e:97:4b:36:15:74:9e:06:97:fa:37:66:b6: 1b:68:b0:14:b5:23:84:9e:5b:b4:7e:72:88:85:5f: 4b:0a:e7:18:8f:ad:94:b8:3d:a6:dd:0a:ff:52:bb: bd:dc:af:b1:68:a9:80:0c:dd:3b:ca:1f:ef:bf:71: d6:5d:a2:24:b2:c9:7d:66:9d:95:31:a9:7d:29:64: eb:1d:14:41:56:65:e7:c7:d0:e1:55:c6:d0:55:ca: ed:d4:3d:b4:37:35:0e:a7:78:ba:d6:8d:8c:ae:e0: 14:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2A:56:C6:77:F9:99:3F:83:13:61:39:7B:72:BB:AA:02:04:CB:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 192.252.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:75:1e:bf:e0:30:9b:97:5d:3b:23:af:a1:48:7b:b2:59:f2: 31:20:bb:d5:af:96:e3:a2:78:cd:91:e6:c1:72:1d:2f:fc:d6: 50:95:61:07:05:c8:cc:0f:20:85:2f:f1:b5:81:e6:0c:30:65: 23:e0:4f:d1:08:f6:38:1c:d1:9a:a4:1d:37:d6:83:af:55:e1: 35:15:01:3f:c2:aa:06:a4:b6:f7:92:37:38:d0:f3:c9:b3:47: 68:17:13:7c:42:de:f6:22:1c:17:6d:6f:97:18:72:b0:22:62: 98:6d:c7:7d:41:bd:eb:be:55:0d:a9:e7:a4:02:84:a0:3f:4d: 4e:d9:94:0c:46:64:b3:2c:b6:12:ca:d0:e9:8d:6c:4d:ea:4b: 4f:e8:21:a7:6d:50:e0:17:b4:c0:f7:9e:b7:8f:d2:40:32:e9: d5:b0:39:20:ae:2a:71:e7:17:fc:88:cf:03:27:f6:59:47:e2: 1e:27:fc:a5:ed:13:fe:13:0f:74:31:aa:b6:7d:13:a5:b5:ac: 69:7f:7c:9e:3c:cf:f5:91:c4:26:b1:c3:59:7a:16:7b:86:0a: 3c:7a:21:71:3f:4a:2b:eb:e9:6c:7c:53:8c:e6:24:07:ba:0c: 77:9b:f2:b3:52:1b:4d:b2:6d:7c:18:65:41:72:53:2b:5b:6b: 37:ea:11:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vL6wYRlJrSQmi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZDQ1ZWRmN2ItOGFiNi00ZDk4LWEzN2YtZDhhYzFkOTZmMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5QltfccGarbvo3/RyGjlAvhGdkBndZV93aX dN3T/jGqDMtS10KUi0I6D2rXtIC9HoeswZ9vqX2ZSE4pUPVaH9q0vukSb+CRqf2e YZKUlYv78TVQN+MoeSScIyeqPNEESivM4ebNMNCKlBZEJHw7XYlHaZR6ajHyPXev 6LiHDc3B79AsQ7jk4e3TvMaB/HwvMGhTUXPs456XSzYVdJ4Gl/o3ZrYbaLAUtSOE nlu0fnKIhV9LCucYj62UuD2m3Qr/Uru93K+xaKmADN07yh/vv3HWXaIkssl9Zp2V Mal9KWTrHRRBVmXnx9DhVcbQVcrt1D20NzUOp3i61o2MruAUdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIqVsZ3+Zk/gxNhOXtyu6oCBMuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMTljNWZhMGEtNGM5NC0z Y2ZlLWE5MTAtOGRlZmZiYWJkYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZ1Hr/gMJuXXTsjr6FIe7JZ8jEgu9WvluOieM2R5sFyHS/81lCVYQcF yMwPIIUv8bWB5gwwZSPgT9EI9jgc0ZqkHTfWg69V4TUVAT/CqgaktveSNzjQ88mz R2gXE3xC3vYiHBdtb5cYcrAiYphtx31Bveu+VQ2p56QChKA/TU7ZlAxGZLMsthLK 0OmNbE3qS0/oIadtUOAXtMD3nreP0kAy6dWwOSCuKnHnF/yIzwMn9llH4h4n/KXt E/4TD3QxqrZ9E6W1rGl/fJ48z/WRxCaxw1l6FnuGCjx6IXE/Sivr6Wx8U4zmJAe6 DHeb8rNSG02ybXwYZUFyUytbazfqEfI= -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:42 2025 by rpki-client