$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa File: 436d215e-6d6e-30c3-b32d-eedeac625ace.roa (raw, json) Hash identifier: FNSTgWlM2z4mxfasQmg1paltacn4irRJGHJcAXswGCw= Subject key identifier: D7:35:36:A5:AB:21:C8:FB:07:7D:A7:BF:49:25:C8:33:59:96:77:35 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F49766DE1E60D0D6E4F504F00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 45.74.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:6d:e1:e6:0d:0d:6e:4f:50:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7e12e4c3-aa97-4962-84ae-fcf1ac8ccdbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:07:78:7c:ae:44:38:8e:5e:9c:cd:55:f5:b4: e0:06:29:02:a5:33:a1:32:cb:b2:1c:8d:5e:79:6b: 6e:d7:eb:46:ad:46:fa:f2:8a:6e:c3:a6:dd:17:b6: 55:cb:8f:8c:f6:db:83:92:8e:93:ab:0d:14:5a:b3: a0:2c:9f:81:62:da:13:7e:97:9b:b3:03:a1:cf:ce: 91:78:bf:81:29:84:2e:61:c7:7c:6d:0c:9a:98:f7: 08:31:cb:40:7b:62:8e:a3:b0:0f:af:27:ac:c1:00: 32:3b:2c:b0:ab:75:c5:18:e0:2c:2f:32:52:92:dd: 78:28:7f:36:6c:17:0f:1d:61:29:4f:37:32:a1:8e: 1c:5b:7a:e0:db:0e:41:d3:0a:e1:3d:08:64:df:1e: de:23:5e:78:7e:6e:28:0f:36:fc:82:14:40:24:dd: c9:e4:9f:6c:cc:03:c5:e3:4c:94:f0:0f:b2:42:21: 68:db:e0:33:c2:6f:d8:c0:b0:f1:6b:6f:ab:d5:67: 9a:8a:4d:81:c1:4d:3a:cc:76:eb:63:6e:74:99:66: f7:a4:27:73:d3:26:57:ce:ef:69:26:f9:5d:f9:c4: 6e:e0:e5:e3:5b:b7:d8:0c:57:1c:c8:ec:12:29:40: 1c:f5:0b:77:ce:32:ed:09:9b:0e:db:ad:95:9c:24: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:35:36:A5:AB:21:C8:FB:07:7D:A7:BF:49:25:C8:33:59:96:77:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:00:a2:69:23:20:41:34:5f:79:e7:ff:0b:98:99:a0:cc:f8: fc:db:78:6e:a4:60:ad:4f:00:a9:a4:ad:06:bb:86:52:b4:bb: 28:c0:52:8e:b8:d8:28:8c:e2:3b:fa:22:e2:fe:3c:dd:bf:55: 5a:39:d5:13:2e:98:8f:07:71:f2:d0:4f:58:81:11:cc:cc:f7: 76:23:b2:4d:da:18:e0:1f:59:3a:f7:a7:b4:49:a6:1f:78:9f: 53:f1:8b:32:76:57:f8:d3:6d:4a:c5:65:84:d1:a5:1d:f2:e3: 6c:f0:a9:39:45:65:40:d0:cc:5b:ac:02:5e:a2:08:91:da:a1: 08:ab:69:3d:38:31:95:31:74:4b:12:d2:6b:bd:cb:9e:5b:70: d8:4b:c7:26:6b:df:c4:35:97:4c:30:94:d8:18:2a:b2:09:a2: 87:aa:1c:86:de:15:df:74:1b:f4:9f:c6:d8:b4:05:2b:7b:dd: a2:33:df:34:42:d6:fb:ed:20:ec:49:29:75:f2:d5:eb:51:aa: 16:4f:9a:06:51:74:e3:9a:cf:6e:56:74:8c:02:ae:12:52:04: 8f:c1:27:09:98:17:24:9f:2a:a8:48:74:c9:9d:15:53:10:64: 6d:fc:33:61:04:5b:a0:8e:1b:ab:00:e1:46:8b:c6:3f:4e:de: 33:9f:df:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdm3h5g0Nbk9QTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2UxMmU0YzMtYWE5Ny00OTYyLTg0YWUtZmNmMWFjOGNjZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgd4fK5EOI5enM1V9bTgBikCpTOhMsuyHI1e eWtu1+tGrUb68opuw6bdF7ZVy4+M9tuDko6Tqw0UWrOgLJ+BYtoTfpebswOhz86R eL+BKYQuYcd8bQyamPcIMctAe2KOo7APryeswQAyOyywq3XFGOAsLzJSkt14KH82 bBcPHWEpTzcyoY4cW3rg2w5B0wrhPQhk3x7eI154fm4oDzb8ghRAJN3J5J9szAPF 40yU8A+yQiFo2+Azwm/YwLDxa2+r1Weaik2BwU06zHbrY250mWb3pCdz0yZXzu9p Jvld+cRu4OXjW7fYDFccyOwSKUAc9Qt3zjLtCZsO262VnCQUhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc1NqWrIcj7B32nv0klyDNZlnc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDM2ZDIxNWUtNmQ2ZS0z MGMzLWIzMmQtZWVkZWFjNjI1YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUodMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4AomkjIEE0X3nn/wuYmaDM+PzbeG6kYK1PAKmkrQa7hlK0uyjAUo64 2CiM4jv6IuL+PN2/VVo51RMumI8HcfLQT1iBEczM93Yjsk3aGOAfWTr3p7RJph94 n1PxizJ2V/jTbUrFZYTRpR3y42zwqTlFZUDQzFusAl6iCJHaoQiraT04MZUxdEsS 0mu9y55bcNhLxyZr38Q1l0wwlNgYKrIJooeqHIbeFd90G/Sfxti0BSt73aIz3zRC 1vvtIOxJKXXy1etRqhZPmgZRdOOaz25WdIwCrhJSBI/BJwmYFySfKqhIdMmdFVMQ ZG38M2EEW6COG6sA4UaLxj9O3jOf34c= -----END CERTIFICATE-----Generated at Mon Oct 26 08:45:54 2026 by rpki-client