$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa File: 1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa (raw, json) Hash identifier: an+8FKvFIprtMvnR6Ru/h91rDnqSPzO04dKmcSY1mlg= Subject key identifier: B3:23:14:A3:49:59:D9:62:E7:D3:55:BF:5A:98:E8:EF:49:0F:48:54 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584B7AA9A43FB8E265A7759CF040 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa Signing time: Fri 10 Oct 2025 20:58:08 +0000 ROA not before: Fri 10 Oct 2025 20:58:08 +0000 ROA not after: Thu 08 Jan 2026 21:58:08 +0000 asID: 35860 IP address blocks: 142.248.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:a9:a4:3f:b8:e2:65:a7:75:9c:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Oct 10 20:58:08 2025 GMT Not After : Jan 8 21:58:08 2026 GMT Subject: CN=ca23bfc5-c5c0-44e8-9d0d-ac1dbd4b2d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:ba:8d:3d:00:0f:93:66:8b:94:b2:d6:f6: 4b:12:45:05:ff:71:7a:1b:51:67:35:a7:a1:6e:97: 9b:89:64:3c:93:6a:c3:59:8b:c6:89:82:45:c7:b2: 2f:6b:b3:e8:7d:52:95:35:15:cc:f8:35:01:e1:66: 8c:95:a0:5a:c2:c3:b6:ee:a6:cd:df:c3:8d:8c:0c: b0:2c:fa:13:11:50:f5:aa:de:9c:34:69:24:29:ae: 53:2a:6d:d0:56:b2:35:72:67:52:bd:c2:9a:fc:6f: 36:04:c6:5d:b4:4f:f5:7d:50:6d:b3:91:34:19:7c: 88:53:05:df:d3:3b:b3:5a:02:30:af:24:ef:95:23: 8c:17:91:6f:30:68:bd:56:d9:9d:7c:9e:01:d7:5f: 28:9d:8a:26:51:b4:ef:76:22:58:13:dd:a5:6e:a1: 78:89:6b:51:c5:2e:19:de:08:0d:dd:52:8c:38:92: e4:71:9f:6a:03:82:6c:b3:aa:03:51:d1:22:e4:3c: 84:30:f5:94:7f:25:68:e0:91:85:cd:fe:c7:da:d6: 1b:66:9c:99:76:93:fc:e4:b8:86:da:74:e3:70:47: 0f:b8:eb:83:bc:89:1d:eb:3f:90:e4:99:84:b7:c2: ae:4b:e3:4d:7f:3a:93:ac:cb:7f:76:0e:ee:0c:40: 15:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:23:14:A3:49:59:D9:62:E7:D3:55:BF:5A:98:E8:EF:49:0F:48:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 142.248.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:15:c2:ea:ce:07:43:17:69:47:fb:b9:eb:b3:f7:57:e4:c8: fe:5e:85:de:a6:8c:c9:21:f9:21:cc:35:4d:a5:b7:ba:5a:41: 69:d9:23:50:c4:4d:4d:ba:ad:a7:4c:6d:f7:36:49:3a:ad:f0: a6:87:49:fc:85:52:57:7e:80:7f:3c:54:24:a6:8c:8e:03:ed: 40:5a:ef:58:0e:3a:90:71:d3:aa:05:7f:79:c0:dc:e3:53:5d: 68:dc:f8:7f:b0:f3:4b:0d:c5:ba:e1:b3:fc:90:7a:f9:88:9f: ef:81:9d:55:5a:5b:4a:13:f0:fb:3d:54:b6:f8:e2:8e:67:f0: 42:5a:7e:28:ad:93:6e:4e:9a:42:a7:b5:c6:31:9a:f0:b4:c8: ec:94:a4:75:64:7e:f5:59:4a:27:a8:e2:f5:31:b6:bc:a8:7d: e6:69:a7:ba:3d:47:ac:a7:52:2f:3f:0f:54:32:50:47:03:a1: b2:03:0c:15:48:1e:2d:4f:19:70:5d:91:c0:94:58:69:4f:cc: d5:fe:f9:c2:36:c5:e1:27:38:97:44:f6:4e:40:ba:2d:c4:ae: 69:ed:f2:32:21:48:4c:c6:2f:d1:e3:35:c9:75:4c:98:76:1d: c6:ee:22:e9:0b:b9:6e:3c:5c:be:21:5a:ec:22:ee:f7:2d:02: 1d:98:ba:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6qaQ/uOJlp3Wc8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MTAxMDIwNTgwOFoXDTI2MDEwODIxNTgwOFowLzEtMCsGA1UEAxMk Y2EyM2JmYzUtYzVjMC00NGU4LTlkMGQtYWMxZGJkNGIyZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+u6jT0AD5Nmi5Sy1vZLEkUF/3F6G1FnNaeh bpebiWQ8k2rDWYvGiYJFx7Iva7PofVKVNRXM+DUB4WaMlaBawsO27qbN38ONjAyw LPoTEVD1qt6cNGkkKa5TKm3QVrI1cmdSvcKa/G82BMZdtE/1fVBts5E0GXyIUwXf 0zuzWgIwryTvlSOMF5FvMGi9VtmdfJ4B118onYomUbTvdiJYE92lbqF4iWtRxS4Z 3ggN3VKMOJLkcZ9qA4Jss6oDUdEi5DyEMPWUfyVo4JGFzf7H2tYbZpyZdpP85LiG 2nTjcEcPuOuDvIkd6z+Q5JmEt8KuS+NNfzqTrMt/dg7uDEAVPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMjFKNJWdli59NVv1qY6O9JD0hUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvMWE0NTkxMGItNWY0NC0z MGNlLTlkZmEtOWZkYzFmZTg2Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoVwurOB0MXaUf7ueuz91fkyP5ehd6mjMkh+SHMNU2lt7paQWnZI1DE TU26radMbfc2STqt8KaHSfyFUld+gH88VCSmjI4D7UBa71gOOpBx06oFf3nA3ONT XWjc+H+w80sNxbrhs/yQevmIn++BnVVaW0oT8Ps9VLb44o5n8EJafiitk25OmkKn tcYxmvC0yOyUpHVkfvVZSieo4vUxtryofeZpp7o9R6ynUi8/D1QyUEcDobIDDBVI Hi1PGXBdkcCUWGlPzNX++cI2xeEnOJdE9k5Aui3Ermnt8jIhSEzGL9HjNcl1TJh2 HcbuIukLuW48XL4hWuwi7vctAh2YunA= -----END CERTIFICATE-----Generated at Sat Oct 11 04:20:33 2025 by rpki-client