$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa File: 0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa (raw, json) Hash identifier: +1qtL2+n1M30j3R0OlC0B2zsa7D82xZ325OMmtscpxA= Subject key identifier: 46:C9:AE:E5:F8:84:B4:03:72:D0:E2:01:8A:13:71:2B:DB:01:2C:77 Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192 Certificate serial: 010D0C9F4328584B79BCBE166894763242A54C00 Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 5645 IP address blocks: 157.52.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:be:16:68:94:76:32:42:a5:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=74aefacb-5da4-45a3-a0d5-d61f12bf48e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0b:c1:ff:3b:5d:c5:d4:38:49:a2:8f:4b:ce: 10:01:30:ca:c8:04:ef:ed:1c:d7:30:26:02:1d:f5: 62:39:c4:f7:08:90:16:8d:78:74:3b:3a:65:e6:a9: 42:0a:b8:7b:8a:87:a5:c3:f6:e8:2b:03:75:2e:83: 46:bc:0b:97:00:ee:ab:01:2d:0e:56:e2:86:b9:35: 1e:03:3b:fe:9a:d9:3e:59:e7:65:88:16:00:8f:74: eb:0a:92:65:3d:1b:26:77:09:e2:ec:e5:8a:5d:68: c7:ad:9b:fd:7f:3a:af:3b:f6:73:55:c7:17:9d:78: 3b:76:31:48:0a:04:d6:b9:82:95:67:4e:46:fb:fe: cf:b4:55:f1:eb:fa:10:40:35:6b:b4:ce:60:14:48: fb:92:1e:2c:c0:09:5d:72:37:aa:b7:51:9a:89:fe: 51:99:b5:d5:a8:1f:ca:d1:a1:95:a6:54:62:36:e1: 0c:cf:75:07:50:68:38:9d:6c:f7:02:e2:01:22:5f: ce:a2:2f:6d:c8:fa:c1:ca:c0:80:f5:45:f4:13:c5: 0c:36:e1:88:72:23:fd:42:5f:63:32:12:aa:a3:20: 74:6b:a2:1a:01:f5:3a:3b:ae:65:73:aa:0e:54:a3: 58:26:60:3c:1c:38:a3:8c:8c:7c:c5:83:c2:99:d8: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C9:AE:E5:F8:84:B4:03:72:D0:E2:01:8A:13:71:2B:DB:01:2C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0f1294a3-98a4-3ebb-81b4-7f1a9a1d27c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl X509v3 Authority Key Identifier: keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer sbgp-ipAddrBlock: critical IPv4: 157.52.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:31:f0:63:1c:28:59:4a:c5:df:70:b0:2c:cc:49:2b:31:bd: 5c:67:b6:6a:50:87:bc:7b:dc:02:1c:10:a6:b1:08:8d:77:70: 74:75:41:68:67:7b:08:9f:bf:5a:1c:b8:a4:22:42:f8:fd:ea: 2d:69:ca:cf:b0:13:67:7b:24:43:8c:52:2e:4c:75:cf:40:56: b7:14:ba:c9:a5:67:4f:22:cd:dc:85:c6:ee:b7:3d:28:f8:1b: ae:fe:5a:63:49:a0:30:cc:3b:d2:2b:7d:22:19:b2:83:f8:8a: e2:d1:51:38:4a:1b:79:d1:8c:7e:9e:5f:dc:4c:50:ad:19:c7: ec:51:10:51:fc:71:f0:59:94:3a:f0:2a:e1:6e:91:f7:62:ba: 2d:4d:3f:a1:fd:60:dc:42:ee:da:f8:bd:c6:45:b1:2d:3b:70: 80:f0:94:cc:1d:57:75:1d:1c:54:a2:e9:12:77:b5:48:0c:77: 1d:70:0e:b6:d9:cd:a5:fc:68:49:ff:e7:a9:b1:9d:f0:eb:06: 68:35:b8:a7:f2:ee:5f:07:02:2c:48:4a:06:e6:23:1d:20:ba: 5b:0f:83:be:ca:cb:3b:4d:9a:aa:5d:85:3d:c8:3e:4b:ea:87: 83:2a:5d:67:07:29:e3:b5:bc:9a:76:5a:e0:aa:f6:a5:03:6c: 54:75:52:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vL4WaJR2MkKlTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx MTkyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NzRhZWZhY2ItNWRhNC00NWEzLWEwZDUtZDYxZjEyYmY0OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QvB/ztdxdQ4SaKPS84QATDKyATv7RzXMCYC HfViOcT3CJAWjXh0Ozpl5qlCCrh7ioelw/boKwN1LoNGvAuXAO6rAS0OVuKGuTUe Azv+mtk+WedliBYAj3TrCpJlPRsmdwni7OWKXWjHrZv9fzqvO/ZzVccXnXg7djFI CgTWuYKVZ05G+/7PtFXx6/oQQDVrtM5gFEj7kh4swAldcjeqt1Gaif5RmbXVqB/K 0aGVplRiNuEMz3UHUGg4nWz3AuIBIl/Ooi9tyPrBysCA9UX0E8UMNuGIciP9Ql9j MhKqoyB0a6IaAfU6O65lc6oOVKNYJmA8HDijjIx8xYPCmdhWkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbJruX4hLQDctDiAYoTcSvbASx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvMGYxMjk0YTMtOThhNC0z ZWJiLTgxYjQtN2YxYTlhMWQyN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3 MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnTQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0x8GMcKFlKxd9wsCzMSSsxvVxntmpQh7x73AIcEKaxCI13cHR1QWhn ewifv1ocuKQiQvj96i1pys+wE2d7JEOMUi5Mdc9AVrcUusmlZ08izdyFxu63PSj4 G67+WmNJoDDMO9IrfSIZsoP4iuLRUThKG3nRjH6eX9xMUK0Zx+xREFH8cfBZlDrw KuFukfdiui1NP6H9YNxC7tr4vcZFsS07cIDwlMwdV3UdHFSi6RJ3tUgMdx1wDrbZ zaX8aEn/56mxnfDrBmg1uKfy7l8HAixISgbmIx0gulsPg77KyztNmqpdhT3IPkvq h4MqXWcHKeO1vJp2WuCq9qUDbFR1Uvs= -----END CERTIFICATE-----Generated at Thu Oct 30 03:25:11 2025 by rpki-client