$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203330303538.roa File: 34352e34322e34352e302f32342d3234203d3e203330303538.roa (raw, json) Hash identifier: M+lEH5sxPqSA7D4+eilpb7CjEGNZG7+Q6YvE6AWCqtQ= Subject key identifier: E4:7E:9E:EE:F3:92:6B:7A:CB:71:CD:39:59:46:3D:D6:C7:63:0D:9E Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc Certificate serial: 2A5EC7801FDC15EE1BF0968D9C31E41AF6B03E48 Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203330303538.roa Signing time: Thu 02 Oct 2025 18:24:02 +0000 ROA not before: Thu 02 Oct 2025 18:19:02 +0000 ROA not after: Thu 01 Oct 2026 18:24:02 +0000 asID: 30058 IP address blocks: 45.42.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 23:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5e:c7:80:1f:dc:15:ee:1b:f0:96:8d:9c:31:e4:1a:f6:b0:3e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc Validity Not Before: Oct 2 18:19:02 2025 GMT Not After : Oct 1 18:24:02 2026 GMT Subject: CN=E47E9EEEF3926B7ACB71CD3959463DD6C7630D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:d0:f6:a2:41:2b:0a:84:01:50:d6:6d:74: 88:bc:b3:5e:43:df:5c:be:71:15:66:09:18:b6:53: 8b:69:ae:87:38:0f:66:99:42:27:0b:0e:8e:d1:b7: 24:21:2a:fe:eb:1a:e0:b4:80:05:06:3e:43:77:ea: 2a:c2:d3:8c:71:1a:4b:d0:eb:11:2c:b2:29:fd:20: ed:af:83:22:86:1a:84:b2:63:87:ef:c3:bc:70:eb: 1d:e1:a0:10:44:90:d1:47:2c:01:62:48:27:71:d5: 69:3b:f6:ae:f8:d0:3f:ea:1b:be:84:d7:05:6e:5c: f7:a9:03:e8:1c:d6:bf:f2:9a:dd:51:b1:b0:52:aa: db:9e:cc:2c:8a:cf:d9:37:b4:f2:22:25:d1:92:fa: 99:18:62:70:93:46:ef:32:13:0d:04:2e:e4:c4:04: 64:d6:ce:21:0a:ee:d9:c3:24:8a:a7:8f:fa:3d:0e: 5b:aa:26:de:83:bf:11:da:2b:25:83:3a:bd:df:b0: d1:0b:33:60:95:eb:e8:dc:cf:82:ca:5c:bc:88:2f: df:b8:e8:8c:11:91:ec:93:56:d9:cd:14:b0:09:62: d1:97:31:d2:54:59:e8:79:9b:9f:70:67:8f:e2:52: 05:8d:55:d8:f7:3c:e1:85:0f:a0:84:8f:8c:73:8a: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7E:9E:EE:F3:92:6B:7A:CB:71:CD:39:59:46:3D:D6:C7:63:0D:9E X509v3 Authority Key Identifier: keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203330303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.42.45.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:a9:31:56:7d:5b:3a:32:5e:6e:45:b7:26:09:2a:de:c8:9e: 50:b1:fe:4b:23:e4:86:58:7a:8b:c6:32:ee:4c:3f:b3:76:4b: f7:24:23:97:d6:78:81:46:5e:c1:48:0b:4c:1b:7a:7c:ee:70: c1:e9:46:e2:83:e5:81:1e:ea:e0:3d:ff:b1:80:71:e3:b6:b5: 41:da:1d:96:25:85:ab:4c:4a:19:a5:d9:9d:3f:f0:4d:a3:00: 22:2d:e6:5f:8b:b1:09:38:54:12:f0:0d:fd:f5:57:d8:74:aa: 61:a4:47:65:0e:5b:cf:cd:6b:00:dc:6f:1a:b0:de:f6:25:20: 24:cc:c2:25:4a:86:8d:db:4e:34:f7:05:81:58:95:b3:6c:f6: f6:3e:1e:2e:f3:68:ed:54:33:fb:82:a9:f1:02:7b:4b:6a:d8: 7a:b4:a0:64:c6:5d:fe:13:62:b9:80:d9:0d:f8:61:a2:8c:98: 18:14:c7:cc:00:8b:17:99:7e:cb:f6:8b:88:4b:d5:6e:ad:62: 30:bc:e3:f5:91:eb:5b:ee:fc:44:b0:44:11:93:8d:e2:56:4d: 42:ca:b3:66:7e:b5:b3:6b:f3:92:6a:d2:ce:b0:f0:0c:62:f0: c0:bd:3c:d0:74:08:c0:ba:63:d8:7b:41:97:10:14:0f:54:42: 39:42:b6:b1 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUKl7HgB/cFe4b8JaNnDHkGvawPkgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjUxMDAyMTgxOTAyWhcNMjYxMDAxMTgyNDAy WjAzMTEwLwYDVQQDEyhFNDdFOUVFRUYzOTI2QjdBQ0I3MUNEMzk1OTQ2M0RENkM3 NjMwRDlFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6HQ9qJBKwqE AVDWbXSIvLNeQ99cvnEVZgkYtlOLaa6HOA9mmUInCw6O0bckISr+6xrgtIAFBj5D d+oqwtOMcRpL0OsRLLIp/SDtr4MihhqEsmOH78O8cOsd4aAQRJDRRywBYkgncdVp O/au+NA/6hu+hNcFblz3qQPoHNa/8prdUbGwUqrbnswsis/ZN7TyIiXRkvqZGGJw k0bvMhMNBC7kxARk1s4hCu7ZwySKp4/6PQ5bqibeg78R2islgzq937DRCzNglevo 3M+Cyly8iC/fuOiMEZHsk1bZzRSwCWLRlzHSVFnoeZufcGeP4lIFjVXY9zzhhQ+g hI+Mc4rcMQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFOR+nu7zkmt6y3HNOVlGPdbH Yw2eMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDMzMzAzMDM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtKi0wDQYJKoZIhvcNAQELBQADggEB ADqpMVZ9WzoyXm5FtyYJKt7InlCx/ksj5IZYeovGMu5MP7N2S/ckI5fWeIFGXsFI C0wbenzucMHpRuKD5YEe6uA9/7GAceO2tUHaHZYlhatMShml2Z0/8E2jACIt5l+L sQk4VBLwDf31V9h0qmGkR2UOW8/NawDcbxqw3vYlICTMwiVKho3bTjT3BYFYlbNs 9vY+Hi7zaO1UM/uCqfECe0tq2Hq0oGTGXf4TYrmA2Q34YaKMmBgUx8wAixeZfsv2 i4hL1W6tYjC84/WR61vu/ESwRBGTjeJWTULKs2Z+tbNr85Jq0s6w8Axi8MC9PNB0 CMC6Y9h7QZcQFA9UQjlCtrE= -----END CERTIFICATE-----Generated at Wed Oct 22 12:05:42 2025 by rpki-client