$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa File: 436d215e-6d6e-30c3-b32d-eedeac625ace.roa (raw, json) Hash identifier: 8tNmw7qzdn5pCooI7FqqzcMzQtRrR6Z7GjNnUfM0qd4= Subject key identifier: D9:93:98:BF:16:E4:D5:9F:33:05:7B:AA:80:67:4E:C2:96:D7:B8:80 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A7A4B4AED6950BD4F65EDF080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 9009 IP address blocks: 45.74.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:4a:ed:69:50:bd:4f:65:ed:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=f1ac9adb-9ca7-4a95-8a37-32ea2a6487a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:16:88:98:fc:8c:09:df:2b:54:04:93:a9: b5:bb:5f:ba:79:da:7d:9b:dd:d1:75:60:fc:2a:1e: fe:d4:0c:87:6d:c7:1a:c2:88:b9:fd:0a:38:e7:f9: 56:62:b7:49:33:26:ae:c8:1d:65:bb:22:19:60:08: 82:30:ff:99:b2:3c:e5:a3:60:25:10:d6:cd:32:10: 3f:03:98:e2:ec:f0:5b:e2:ce:7e:48:b9:87:28:48: a1:2b:ab:a0:4c:a7:67:09:f0:8a:e6:a0:31:97:84: c7:f7:ab:f4:ee:43:f4:bd:66:1c:d7:bf:d1:d1:67: 55:f1:45:9d:70:47:85:8a:ba:54:c6:c8:7c:95:14: d6:01:08:f6:7f:52:1b:f6:3e:08:10:5f:fa:d5:4a: 59:5a:d4:fb:fa:77:b0:db:14:5d:e2:7e:dd:bc:c5: 7b:61:eb:4d:8f:00:ba:ba:ea:a4:84:0c:44:2e:3d: 62:97:fd:a8:3a:92:ec:3b:32:e2:38:b7:22:88:fd: 9e:d6:23:a2:b4:19:38:37:f6:fb:1e:77:8e:de:9a: 64:cb:ba:ab:d1:37:2e:5b:85:1a:f7:ed:85:a5:81: 2f:8e:34:78:73:f9:8a:e6:76:88:a2:c6:d8:eb:ca: 45:21:7e:6f:62:c2:07:10:85:d1:0c:e5:4f:79:90: 7f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:93:98:BF:16:E4:D5:9F:33:05:7B:AA:80:67:4E:C2:96:D7:B8:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/436d215e-6d6e-30c3-b32d-eedeac625ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:93:96:46:a5:f1:eb:7a:5a:6b:8f:68:40:cd:5a:24:8c:c0: 34:e3:c5:c7:61:47:4e:63:fe:5b:f7:ba:98:61:b7:6e:34:30: 75:8f:c2:71:d4:46:bb:e7:1d:cf:f5:97:7c:d7:f2:62:3f:4e: fc:46:d0:78:f9:26:b0:ce:11:18:dd:6c:3e:fd:c3:11:f8:9c: dc:7b:f4:44:5b:fa:e9:ab:1e:97:a2:d4:10:d8:12:8b:fe:8c: da:67:a8:a9:7d:e2:7b:6d:a5:3e:f0:46:6a:f2:d3:75:31:49: ef:93:d3:48:11:59:3f:cb:3f:ca:9a:ec:44:2a:2e:f4:47:8c: 2a:f3:be:0d:c2:39:24:fe:a1:b9:d6:34:8a:81:de:71:81:cf: b5:5f:86:6b:6a:35:1c:5b:2a:26:27:0f:d6:83:0f:61:72:97: 67:db:b8:4a:e7:62:69:73:c3:ac:ed:24:b6:f8:68:f6:39:f2: 2c:b0:bb:91:4f:da:31:48:f1:cc:b3:c5:8a:48:44:d9:32:e7: f2:40:52:ec:60:ca:8e:ec:21:d0:2d:6f:4d:86:b7:5e:6d:ff: e0:48:ff:24:3e:18:71:66:4f:fc:e4:8d:53:59:7f:4f:28:5a: 9f:b5:d5:c8:66:d9:70:f2:0b:94:a5:83:6a:32:bd:42:55:31: a9:ff:4e:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0rtaVC9T2Xt8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ZjFhYzlhZGItOWNhNy00YTk1LThhMzctMzJlYTJhNjQ4N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdUWiJj8jAnfK1QEk6m1u1+6edp9m93RdWD8 Kh7+1AyHbccawoi5/Qo45/lWYrdJMyauyB1luyIZYAiCMP+Zsjzlo2AlENbNMhA/ A5ji7PBb4s5+SLmHKEihK6ugTKdnCfCK5qAxl4TH96v07kP0vWYc17/R0WdV8UWd cEeFirpUxsh8lRTWAQj2f1Ib9j4IEF/61UpZWtT7+new2xRd4n7dvMV7YetNjwC6 uuqkhAxELj1il/2oOpLsOzLiOLciiP2e1iOitBk4N/b7HneO3ppky7qr0TcuW4Ua 9+2FpYEvjjR4c/mK5naIosbY68pFIX5vYsIHEIXRDOVPeZB/6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmTmL8W5NWfMwV7qoBnTsKW17iAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDM2ZDIxNWUtNmQ2ZS0z MGMzLWIzMmQtZWVkZWFjNjI1YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUodMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiTlkal8et6WmuPaEDNWiSMwDTjxcdhR05j/lv3uphht240MHWPwnHU RrvnHc/1l3zX8mI/TvxG0Hj5JrDOERjdbD79wxH4nNx79ERb+umrHpei1BDYEov+ jNpnqKl94nttpT7wRmry03UxSe+T00gRWT/LP8qa7EQqLvRHjCrzvg3COST+obnW NIqB3nGBz7VfhmtqNRxbKiYnD9aDD2Fyl2fbuErnYmlzw6ztJLb4aPY58iywu5FP 2jFI8cyzxYpIRNky5/JAUuxgyo7sIdAtb02Gt15t/+BI/yQ+GHFmT/zkjVNZf08o Wp+11chm2XDyC5Slg2oyvUJVMan/Tug= -----END CERTIFICATE-----Generated at Sun Jul 20 11:16:43 2025 by rpki-client