
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa
File: ceb06be8-602c-3b37-8ee5-ecc299990815.roa (raw, json)
Hash identifier: AabT/XWh3D85mwZPNImi0s+VqjVzlhXMurSRQMRZm/o=
Subject key identifier: 30:EC:56:D9:46:DD:12:FE:78:D6:3D:56:33:C3:07:95:1B:7C:43:06
Certificate issuer: /CN=52fbdac8-20c0-4da4-8654-27b4bf592930
Certificate serial: 010D0C9F4328584B5DD1EDA483242E3D86D398C0
Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa
Signing time: Tue 30 Sep 2025 13:00:40 +0000
ROA not before: Tue 30 Sep 2025 13:00:40 +0000
ROA not after: Mon 29 Dec 2025 14:00:40 +0000
asID: 394491
IP address blocks: 45.45.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:5d:d1:ed:a4:83:24:2e:3d:86:d3:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930
Validity
Not Before: Sep 30 13:00:40 2025 GMT
Not After : Dec 29 14:00:40 2025 GMT
Subject: CN=a3cf9671-4a72-47bd-a952-889a0d88cf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:54:99:32:42:6c:90:51:4e:ce:0f:f5:10:
3c:d9:eb:3a:06:5d:16:b1:d6:27:32:ba:7c:44:30:
32:eb:d6:fe:4a:6f:e9:dc:81:82:4b:9b:da:15:6d:
98:10:c3:e7:24:0a:28:e7:16:73:3e:2d:96:d9:35:
67:d6:c3:32:5c:68:19:1a:93:c8:a8:55:6c:ea:cf:
b5:6e:fb:08:3a:1f:1f:c5:77:d6:3c:0a:c5:50:56:
69:e1:82:5e:3a:ba:19:52:91:c6:8b:4f:f8:bf:c6:
f5:92:e6:82:fc:2e:f2:49:3a:76:f6:61:aa:56:12:
0d:e1:eb:7d:28:56:a8:7e:93:bd:15:7a:3b:72:c0:
c9:80:1b:71:89:fd:c3:14:f9:e8:de:70:08:93:37:
2b:a6:59:5d:58:08:0d:14:22:b7:67:74:5c:38:e6:
7e:57:03:ff:1c:cc:33:cd:69:05:fb:5d:e7:ca:3e:
8d:80:eb:09:20:b7:81:cf:6e:04:fc:0e:3d:4f:be:
59:a7:c1:2e:36:4f:5c:8f:4a:1a:f4:f6:08:37:24:
ae:c6:fc:64:96:2f:1e:10:c8:f8:c1:0e:33:2f:3c:
1f:cc:04:19:c1:ba:8a:2b:5a:90:1b:ec:c1:b1:5f:
ba:fc:7d:60:02:4e:d5:d3:49:14:39:5f:cc:ba:6a:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:56:D9:46:DD:12:FE:78:D6:3D:56:33:C3:07:95:1B:7C:43:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl
X509v3 Authority Key Identifier:
keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:3c:12:4e:8e:20:b5:c0:41:8c:6a:6d:1a:d2:76:c5:87:24:
de:1f:3c:8a:73:b9:81:09:c9:06:ca:85:dd:48:83:2e:0b:77:
0a:0d:33:64:63:d8:2c:a7:0d:85:d9:a5:4b:a1:c5:cd:ae:9f:
ea:a1:04:e8:9b:c0:35:02:e2:4b:20:06:e3:94:eb:09:a5:4d:
18:18:6f:ca:1d:4b:9c:40:d4:30:4a:54:64:c1:91:30:38:01:
a5:c5:55:d8:82:72:df:a1:44:70:c6:64:89:21:ba:d1:03:e6:
16:79:b4:65:4b:d2:c8:07:d1:b3:03:ab:91:7b:a5:b9:e7:19:
e6:ac:ce:c5:9b:07:2e:11:d9:ba:93:8c:71:f1:63:7c:cb:5f:
99:a2:c8:6b:53:d8:9c:b4:86:6a:fa:bf:e5:b6:07:29:ec:28:
29:d4:42:36:ea:58:d8:5d:c3:7a:2e:96:f3:98:70:fa:7a:2a:
6f:9d:bb:57:f7:21:11:2b:c5:7a:22:b5:21:72:dc:16:39:1b:
31:3f:62:05:0b:33:46:0c:f8:e0:e0:ec:f2:82:71:ae:e6:47:
04:fa:c0:87:3b:b3:a1:a4:30:a0:bb:46:64:50:bc:6f:db:f2:
bf:7c:f2:8d:4b:9b:2f:95:22:43:bc:3c:5b:71:28:4d:3a:99:
4b:5c:9e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:50:42 2025 by rpki-client