$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa File: 0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa (raw, json) Hash identifier: qBrG3sQt9t+wWIWTCkKJD/OGfwlBIn5+2JbaHhIRHJw= Subject key identifier: F0:65:64:4F:5F:28:B7:59:25:92:52:76:1F:8F:A1:ED:BE:0D:30:EC Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584A9900C8059C079D788CEAFCC0 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 157.52.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c8:05:9c:07:9d:78:8c:ea:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=510bac6a-cc72-4dfb-93c0-5e71d489e6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:59:f6:00:3c:8b:74:25:0a:a5:d7:25:81: 07:7c:8f:d6:ea:ed:fa:91:d2:d6:2d:7c:d0:10:61: 51:78:07:d3:cb:1d:c6:93:1e:7b:28:40:a8:52:6f: 13:20:9b:7b:53:d6:1f:89:0d:f7:ff:81:37:fd:b9: 21:44:08:52:48:26:45:1b:01:28:23:52:af:5c:db: 59:b8:52:ac:e5:2c:06:40:5a:63:db:91:9b:73:53: 2d:e8:9a:68:d4:63:8c:94:4d:3a:81:1c:e3:2c:9c: e4:10:1d:f2:ab:02:40:3f:d2:4d:3b:e7:e3:48:15: 2d:f6:72:63:55:e6:33:4c:4b:dd:06:1f:2f:66:12: bb:08:da:42:1e:65:db:75:06:70:a8:9a:5d:73:90: 0c:77:64:8e:55:28:9b:d5:d5:ef:c5:24:c0:ef:b6: d1:5a:2e:30:c5:2e:9f:17:6b:05:e2:3e:90:4d:50: 58:2d:58:07:8a:49:c8:a3:d7:36:de:db:98:e2:22: 8a:8f:8a:ac:7c:e5:97:47:59:ec:7e:82:f0:16:bd: 80:29:cc:8b:c2:96:40:9a:c9:35:f0:f1:2c:32:20: 2c:6e:ff:ca:77:25:bb:c0:38:30:e7:80:62:4c:8f: 8c:96:ee:75:0e:52:3a:db:8a:df:d4:ba:c0:d2:be: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:65:64:4F:5F:28:B7:59:25:92:52:76:1F:8F:A1:ED:BE:0D:30:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 157.52.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f6:d3:d6:f1:eb:c2:34:1b:4b:ec:f1:28:b5:62:42:6e:37: 0c:6d:4d:b0:29:33:83:06:00:6e:2d:74:da:93:d5:9b:56:39: 37:c3:d2:cc:7e:3b:d5:b8:33:e6:86:dd:c3:19:61:77:55:af: 38:8a:6c:f6:82:6a:70:b8:11:d9:e0:af:81:30:95:90:78:47: b0:99:4f:2b:f3:4f:ff:d3:b9:31:bb:52:27:ce:7e:bc:e4:74: 8d:d5:3b:0c:c6:4b:cf:8c:82:64:26:7c:b7:2a:2e:31:29:63: 50:d1:68:db:f2:4b:de:b0:f8:b5:a6:34:b3:1f:a0:18:ec:f0: 60:a4:3f:d5:b3:8d:34:89:64:c6:1c:c2:79:4b:a4:09:6b:84: 1e:8e:47:b1:e9:19:b8:a7:0b:a7:6e:f4:c7:fa:13:95:78:05: a3:ff:8c:de:9e:f8:a0:7b:65:06:aa:cf:10:c8:4d:91:03:b6: 9e:99:92:f7:b6:b8:78:e3:bb:2f:88:0a:5e:f6:3a:9e:b5:16: bd:58:c5:01:6e:2a:21:9c:8b:1a:52:46:fa:98:d3:e0:c4:da: 9b:ab:6b:22:94:a7:aa:c0:ac:38:6f:42:da:da:50:47:f2:9d: 99:f0:6c:7c:0a:10:60:05:6d:77:9d:44:d8:ff:df:48:2f:30: 50:12:3d:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMgFnAedeIzq/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NTEwYmFjNmEtY2M3Mi00ZGZiLTkzYzAtNWU3MWQ0ODllNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb9Z9gA8i3QlCqXXJYEHfI/W6u36kdLWLXzQ EGFReAfTyx3Gkx57KECoUm8TIJt7U9YfiQ33/4E3/bkhRAhSSCZFGwEoI1KvXNtZ uFKs5SwGQFpj25Gbc1Mt6Jpo1GOMlE06gRzjLJzkEB3yqwJAP9JNO+fjSBUt9nJj VeYzTEvdBh8vZhK7CNpCHmXbdQZwqJpdc5AMd2SOVSib1dXvxSTA77bRWi4wxS6f F2sF4j6QTVBYLVgHiknIo9c23tuY4iKKj4qsfOWXR1nsfoLwFr2AKcyLwpZAmsk1 8PEsMiAsbv/KdyW7wDgw54BiTI+Mlu51DlI624rf1LrA0r5m6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBlZE9fKLdZJZJSdh+Poe2+DTDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMGYxMjk0YTMtOThhNC0z ZWJiLTgxYjQtN2YxYTlhMWQyN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnTQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX209bx68I0G0vs8Si1YkJuNwxtTbApM4MGAG4tdNqT1ZtWOTfD0sx+ O9W4M+aG3cMZYXdVrziKbPaCanC4Edngr4EwlZB4R7CZTyvzT//TuTG7UifOfrzk dI3VOwzGS8+MgmQmfLcqLjEpY1DRaNvyS96w+LWmNLMfoBjs8GCkP9WzjTSJZMYc wnlLpAlrhB6OR7HpGbinC6du9Mf6E5V4BaP/jN6e+KB7ZQaqzxDITZEDtp6Zkve2 uHjjuy+ICl72Op61Fr1YxQFuKiGcixpSRvqY0+DE2purayKUp6rArDhvQtraUEfy nZnwbHwKEGAFbXedRNj/30gvMFASPa8= -----END CERTIFICATE-----Generated at Mon Jul 28 22:13:35 2025 by rpki-client