$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/429b5faf-4da5-3c05-afe4-fc310f70378e.roa File: 429b5faf-4da5-3c05-afe4-fc310f70378e.roa (raw, json) Hash identifier: jzLH+B4ZBzGXNxJtAuaPCgRh9uHperOF2cl2VhggWdo= Subject key identifier: C4:62:67:4F:2C:E1:B6:65:3C:1C:D5:CC:85:E2:6D:6F:09:08:06:15 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F9A6871576EB2678880B11420 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/429b5faf-4da5-3c05-afe4-fc310f70378e.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 212238 IP address blocks: 45.74.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:71:57:6e:b2:67:88:80:b1:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=634988a0-04bc-452b-9e04-8cf8df62a964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:8e:63:41:6a:f1:fd:7c:88:10:ee:67:a7: 80:dd:ed:1e:58:50:98:e6:15:eb:80:a2:5e:76:fe: 02:ee:e7:0b:40:5b:be:bd:4c:23:5f:fa:2b:9d:be: e5:50:6f:63:17:cf:44:6b:ed:b5:7b:08:5d:9f:41: 50:91:b9:12:15:6b:dc:6a:97:9d:53:5a:71:85:6c: 2f:32:32:00:79:cf:d8:fe:10:e6:d7:da:8f:79:73: b5:ae:40:fa:b8:80:1d:62:56:1d:54:a8:16:b8:7b: 56:a8:4e:6e:07:a5:5f:55:fa:84:ec:99:af:6c:9b: be:41:11:90:dd:23:f0:b0:70:cf:28:15:43:a7:c2: a6:c2:71:28:a8:e9:20:3f:c5:56:aa:13:3d:17:9e: 58:b0:3f:84:2a:a9:4d:5c:0a:3f:42:8a:8d:74:92: 4f:e8:db:5d:a1:e8:a0:11:93:54:30:fd:60:c0:14: 93:74:41:24:2c:a3:89:cf:45:09:3f:4b:42:a8:db: 9d:71:a2:27:1c:be:34:ed:f5:ce:b7:a4:1b:81:02: 47:ef:47:06:1e:58:71:a8:55:cd:b9:d7:28:c4:c4: 49:f9:19:91:79:8e:cd:c9:1f:02:55:39:0b:be:b8: 8e:bc:a5:fd:c1:a3:fa:2d:06:86:e8:1b:c4:a8:92: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:62:67:4F:2C:E1:B6:65:3C:1C:D5:CC:85:E2:6D:6F:09:08:06:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/429b5faf-4da5-3c05-afe4-fc310f70378e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d2:0e:3e:d6:16:5e:10:49:3a:36:2b:fc:de:41:55:98:99: 69:93:bf:e8:fa:43:9f:c4:9a:85:55:8c:26:1e:80:f2:73:9f: ad:e0:68:22:9f:66:36:76:e6:b0:e5:e9:fa:e0:16:5f:dc:20: b2:fb:19:70:9e:68:71:24:ec:48:ff:1b:2a:d6:83:3d:e4:80: d7:4d:3a:6f:a8:10:f3:9d:f2:e7:5f:f0:19:61:3a:6c:56:cd: 34:39:c5:c6:da:0e:6d:dc:4a:56:7a:9b:46:76:1e:a3:6a:79: 1e:01:e8:d2:0a:64:65:56:15:64:70:36:b2:46:1f:95:5c:ab: 4f:11:5e:5d:d7:27:13:f1:98:01:61:51:d7:5e:54:98:81:6b: 2f:ea:72:c3:44:25:a3:b1:4d:25:ca:69:1f:fc:5a:67:7e:d4: d5:9a:d8:0a:46:17:8a:98:03:f9:6e:8a:ff:5f:49:be:68:60: b9:b2:d0:85:73:7e:ae:f5:0d:71:fb:b0:98:7c:1c:65:e4:66: 87:6f:20:04:e2:89:53:3d:2b:65:7c:96:a5:dc:31:a6:57:04: 1f:47:fd:4d:6c:22:20:02:47:42:ca:b8:0f:e6:98:24:61:78: 32:89:01:3c:85:ca:d1:58:52:1e:a8:5e:84:48:d1:f2:5e:a7: d3:d3:3a:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaHFXbrJniICxFCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NjM0OTg4YTAtMDRiYy00NTJiLTllMDQtOGNmOGRmNjJhOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHGOY0Fq8f18iBDuZ6eA3e0eWFCY5hXrgKJe dv4C7ucLQFu+vUwjX/ornb7lUG9jF89Ea+21ewhdn0FQkbkSFWvcapedU1pxhWwv MjIAec/Y/hDm19qPeXO1rkD6uIAdYlYdVKgWuHtWqE5uB6VfVfqE7JmvbJu+QRGQ 3SPwsHDPKBVDp8KmwnEoqOkgP8VWqhM9F55YsD+EKqlNXAo/QoqNdJJP6Ntdoeig EZNUMP1gwBSTdEEkLKOJz0UJP0tCqNudcaInHL407fXOt6QbgQJH70cGHlhxqFXN udcoxMRJ+RmReY7NyR8CVTkLvriOvKX9waP6LQaG6BvEqJL/mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRiZ08s4bZlPBzVzIXibW8JCAYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDI5YjVmYWYtNGRhNS0z YzA1LWFmZTQtZmMzMTBmNzAzNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjSDj7WFl4QSTo2K/zeQVWYmWmTv+j6Q5/EmoVVjCYegPJzn63gaCKf ZjZ25rDl6frgFl/cILL7GXCeaHEk7Ej/GyrWgz3kgNdNOm+oEPOd8udf8BlhOmxW zTQ5xcbaDm3cSlZ6m0Z2HqNqeR4B6NIKZGVWFWRwNrJGH5Vcq08RXl3XJxPxmAFh UddeVJiBay/qcsNEJaOxTSXKaR/8Wmd+1NWa2ApGF4qYA/luiv9fSb5oYLmy0IVz fq71DXH7sJh8HGXkZodvIATiiVM9K2V8lqXcMaZXBB9H/U1sIiACR0LKuA/mmCRh eDKJATyFytFYUh6oXoRI0fJep9PTOs0= -----END CERTIFICATE-----Generated at Tue Oct 27 00:21:34 2026 by rpki-client