$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa File: ceb06be8-602c-3b37-8ee5-ecc299990815.roa (raw, json) Hash identifier: sA6ozfXLvd/cxO0vwe9U0fe8mwPy3OFrCKCuEEgSSLA= Subject key identifier: C1:CE:41:67:5E:82:57:07:0E:67:C4:25:81:BE:89:FB:C7:11:86:55 Certificate issuer: /CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Certificate serial: 010D0C9F4328584A7D15FC520DD2B495F1873F00 Authority key identifier: 83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 394491 IP address blocks: 45.45.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:fc:52:0d:d2:b4:95:f1:87:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52fbdac8-20c0-4da4-8654-27b4bf592930 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=e6fd0ce2-527f-4952-a84b-ff941c7a0e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:ce:83:3c:80:0a:dc:6c:72:4e:a9:c4:19: c6:16:2c:fc:6d:4e:78:7d:e7:17:2e:35:90:62:0d: 9d:e2:fd:1f:81:7b:c7:61:39:89:f2:59:27:11:c3: 58:ed:0e:e6:a1:2c:96:da:01:5c:be:60:56:d0:2e: 41:71:5f:3a:0b:07:43:76:e4:c3:18:88:1c:17:fd: ac:95:cd:23:bf:59:08:8d:7f:2c:65:6c:d8:7f:14: b7:0d:c9:b4:ce:76:5a:79:b7:4b:c7:9e:8c:fd:c4: 7e:3d:9c:c6:00:d4:76:bd:00:6a:ee:34:08:7b:66: e5:35:21:c0:b1:18:50:cc:ed:9e:ad:72:69:e4:71: 48:e2:51:6a:37:64:cb:21:dd:c4:57:9e:31:87:02: da:04:8a:c8:22:30:62:6f:a0:d6:30:7e:d1:65:20: d4:09:bf:0b:82:d1:b4:63:69:4a:3b:0a:4c:fa:50: c8:2c:0f:5e:3d:d6:1c:0c:24:1b:03:31:66:6d:19: c1:06:6d:6a:da:c5:9e:37:a8:fb:3c:53:5e:c7:d7: a6:43:c1:ae:80:2b:0b:6a:3e:a7:b2:d3:3a:4b:4f: 0d:ab:56:76:8c:c7:17:4b:46:6e:bd:79:ca:f1:44: 79:50:cf:a8:07:fe:04:d8:93:92:41:62:29:69:f7: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CE:41:67:5E:82:57:07:0E:67:C4:25:81:BE:89:FB:C7:11:86:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/ceb06be8-602c-3b37-8ee5-ecc299990815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930/52fbdac8-20c0-4da4-8654-27b4bf592930.crl X509v3 Authority Key Identifier: keyid:83:F5:A6:59:FF:1E:96:96:C8:E5:B4:B9:DF:F6:3D:37:29:30:A4:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/52fbdac8-20c0-4da4-8654-27b4bf592930.cer sbgp-ipAddrBlock: critical IPv4: 45.45.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1c:bb:6f:a6:d8:e8:14:55:5c:07:5b:66:90:36:9f:50:4f: 9b:9d:a9:fc:91:f7:57:a1:83:9e:50:ea:0f:51:40:9e:df:31: ab:92:67:82:b7:1b:68:18:89:3f:37:d0:99:fe:9a:0e:23:a0: 1b:4e:bd:3b:4b:f4:99:53:f0:2d:a3:36:16:53:c0:45:4d:f3: 4e:dd:95:03:e8:11:25:6e:49:64:3f:50:20:62:7d:ac:eb:c4: 7c:c9:87:27:c0:47:c4:21:d8:b1:ce:73:34:05:8e:2c:7b:49: 98:14:03:fd:b9:65:7a:68:01:d5:7c:16:81:bd:43:f1:db:9c: 7a:3f:f6:f9:df:6e:cc:b3:8c:a8:e6:6c:d0:58:56:d4:c5:58: 88:43:ef:ac:26:b7:58:e5:49:eb:76:fd:03:5a:4d:a6:77:f3: 24:cf:88:00:f6:7d:96:3f:da:c0:cf:99:18:0c:ba:e3:a9:95: 14:fe:e7:0c:ae:5f:55:28:6e:43:89:8e:c7:0a:63:77:4d:42: f0:c6:d8:b0:db:b3:78:1f:93:ff:2a:23:fc:8f:8c:d1:12:52: 27:7d:9e:7e:85:a5:88:e7:6a:c7:4f:f0:be:39:cd:98:e1:ea: df:ce:1b:b3:30:b9:81:3f:fc:28:c2:43:68:a5:27:89:fe:02: 5d:bf:c4:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfxSDdK0lfGHPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmYmRhYzgtMjBjMC00ZGE0LTg2NTQtMjdiNGJmNTky OTMwMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk ZTZmZDBjZTItNTI3Zi00OTUyLWE4NGItZmY5NDFjN2EwZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDfOgzyACtxsck6pxBnGFiz8bU54fecXLjWQ Yg2d4v0fgXvHYTmJ8lknEcNY7Q7moSyW2gFcvmBW0C5BcV86CwdDduTDGIgcF/2s lc0jv1kIjX8sZWzYfxS3Dcm0znZaebdLx56M/cR+PZzGANR2vQBq7jQIe2blNSHA sRhQzO2erXJp5HFI4lFqN2TLId3EV54xhwLaBIrIIjBib6DWMH7RZSDUCb8LgtG0 Y2lKOwpM+lDILA9ePdYcDCQbAzFmbRnBBm1q2sWeN6j7PFNex9emQ8GugCsLaj6n stM6S08Nq1Z2jMcXS0ZuvXnK8UR5UM+oB/4E2JOSQWIpafcZTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHOQWdeglcHDmfEJYG+ifvHEYZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZi ZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0YmY1OTI5MzAvY2ViMDZiZTgtNjAyYy0z YjM3LThlZTUtZWNjMjk5OTkwODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTJmYmRhYzgtMjBjMC00ZGE0LTg2 NTQtMjdiNGJmNTkyOTMwLzUyZmJkYWM4LTIwYzAtNGRhNC04NjU0LTI3YjRiZjU5 MjkzMC5jcmwwHwYDVR0jBBgwFoAUg/WmWf8elpbI5bS53/Y9NykwpHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81MmZiZGFjOC0yMGMwLTRkYTQtODY1NC0yN2I0 YmY1OTI5MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAocu2+m2OgUVVwHW2aQNp9QT5udqfyR91ehg55Q6g9RQJ7fMauSZ4K3 G2gYiT830Jn+mg4joBtOvTtL9JlT8C2jNhZTwEVN807dlQPoESVuSWQ/UCBifazr xHzJhyfAR8Qh2LHOczQFjix7SZgUA/25ZXpoAdV8FoG9Q/HbnHo/9vnfbsyzjKjm bNBYVtTFWIhD76wmt1jlSet2/QNaTaZ38yTPiAD2fZY/2sDPmRgMuuOplRT+5wyu X1UobkOJjscKY3dNQvDG2LDbs3gfk/8qI/yPjNESUid9nn6FpYjnasdP8L45zZjh 6t/OG7MwuYE//CjCQ2ilJ4n+Al2/xBQ= -----END CERTIFICATE-----Generated at Wed Aug 6 16:27:09 2025 by rpki-client