$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/600cfd5e-2d83-3f77-8bb6-483e14862c89.roa File: 600cfd5e-2d83-3f77-8bb6-483e14862c89.roa (raw, json) Hash identifier: nt/lb80C8SsDaXnL78VNdiLx+RnpQ17sAT0i5zy9Dfo= Subject key identifier: 9B:CE:CF:14:06:E1:D2:F9:17:75:EC:2C:57:DD:93:1C:48:60:DB:30 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A7B9D14DE449CA5029C049180 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/600cfd5e-2d83-3f77-8bb6-483e14862c89.roa Signing time: Fri 11 Jul 2025 12:21:41 +0000 ROA not before: Fri 11 Jul 2025 12:21:41 +0000 ROA not after: Thu 09 Oct 2025 12:21:41 +0000 asID: 9009 IP address blocks: 45.74.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:9d:14:de:44:9c:a5:02:9c:04:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 11 12:21:41 2025 GMT Not After : Oct 9 12:21:41 2025 GMT Subject: CN=2e69c7c6-8c83-4dfb-b9ef-01de6262d537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:62:90:a9:02:9a:c1:df:69:02:eb:18:2d: 92:2e:7e:46:5f:ce:8e:47:0b:b3:1b:2a:7e:58:24: 54:f0:42:e0:72:8c:c0:98:bf:f2:17:c6:a8:c1:3c: 76:ca:94:22:28:77:83:20:57:e5:20:d0:58:ad:da: 11:ae:74:79:d2:43:7b:7c:c2:5c:56:e7:e5:20:d3: f4:6e:a9:3a:b9:65:42:cd:f8:14:38:df:c1:86:d8: a6:e8:75:0b:cc:87:49:a3:bf:f1:47:aa:2a:6a:c9: 71:10:7d:ef:0e:2c:08:79:5d:03:91:11:0d:bc:e4: dc:7c:7d:ef:18:85:b2:a8:e4:dc:d5:eb:aa:b7:7d: 4e:6f:5e:9c:4b:bb:80:3b:a8:15:c2:90:85:12:59: 0e:4c:b0:ea:64:b7:48:c7:ca:df:73:3b:bf:da:ef: 61:23:f7:1c:48:55:b7:bf:1e:91:4f:29:3f:b5:41: d5:33:9c:54:99:ac:52:79:0f:1d:cd:9d:2c:0f:68: 72:81:75:ed:c3:88:ae:0c:c0:0a:aa:3d:7e:67:93: 79:61:b0:9c:84:87:a9:7f:db:87:ec:8f:1d:a0:48: 0f:d3:e5:a1:a3:e0:21:15:5b:e5:bd:37:05:8d:11: bf:ca:71:c8:c8:ec:24:51:fa:6e:0f:64:4e:16:23: 04:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CE:CF:14:06:E1:D2:F9:17:75:EC:2C:57:DD:93:1C:48:60:DB:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/600cfd5e-2d83-3f77-8bb6-483e14862c89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e2:e9:83:be:96:0c:47:0b:7f:ab:ce:90:8d:39:f3:1c:7c: 99:1a:d8:11:32:43:81:55:e8:89:3a:93:f5:79:d1:54:b2:4a: 31:26:63:f9:e6:52:1c:b2:b3:37:3d:16:38:28:53:fb:9a:ad: 3b:f5:93:b8:f1:e9:fb:33:ed:2f:7c:cc:e9:34:56:88:63:37: d8:52:a4:99:87:30:45:a4:f5:11:a3:4b:88:64:6b:fd:65:93: 58:78:a0:c6:e0:10:14:b9:98:b7:8e:3b:01:d0:49:94:2e:fe: 68:44:ad:99:ff:e9:2b:65:65:4e:2a:5f:32:d6:92:44:7f:3a: ec:d5:04:1b:ac:09:9a:83:dc:ea:73:47:7f:b6:e6:49:22:1b: 4b:11:b9:cc:88:38:c6:98:fe:29:bb:2d:26:10:f1:87:64:3d: a7:27:7f:c2:9b:90:40:8d:63:13:c8:9f:cb:ba:47:f7:39:3b: 72:4d:a7:1e:1a:6f:2c:3b:30:7a:c7:d5:62:00:78:98:d4:00: b5:95:b5:55:dd:48:c1:f2:18:96:d2:7f:ce:89:43:9c:66:ac: 04:13:97:f6:ff:83:4c:fe:7f:4a:ad:33:d7:be:55:87:62:2b: 6b:9a:2b:60:9e:bd:2d:d3:92:9e:04:42:4f:9d:86:cc:ab:0e: 93:06:d6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7nRTeRJylApwEkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxMTEyMjE0MVoXDTI1MTAwOTEyMjE0MVowLzEtMCsGA1UEAxMk MmU2OWM3YzYtOGM4My00ZGZiLWI5ZWYtMDFkZTYyNjJkNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo1ikKkCmsHfaQLrGC2SLn5GX86ORwuzGyp+ WCRU8ELgcozAmL/yF8aowTx2ypQiKHeDIFflINBYrdoRrnR50kN7fMJcVuflINP0 bqk6uWVCzfgUON/Bhtim6HULzIdJo7/xR6oqaslxEH3vDiwIeV0DkRENvOTcfH3v GIWyqOTc1euqt31Ob16cS7uAO6gVwpCFElkOTLDqZLdIx8rfczu/2u9hI/ccSFW3 vx6RTyk/tUHVM5xUmaxSeQ8dzZ0sD2hygXXtw4iuDMAKqj1+Z5N5YbCchIepf9uH 7I8doEgP0+Who+AhFVvlvTcFjRG/ynHIyOwkUfpuD2ROFiMEIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvOzxQG4dL5F3XsLFfdkxxIYNswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjAwY2ZkNWUtMmQ4My0z Zjc3LThiYjYtNDgzZTE0ODYyYzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbi6YO+lgxHC3+rzpCNOfMcfJka2BEyQ4FV6Ik6k/V50VSySjEmY/nm Uhyyszc9FjgoU/uarTv1k7jx6fsz7S98zOk0VohjN9hSpJmHMEWk9RGjS4hka/1l k1h4oMbgEBS5mLeOOwHQSZQu/mhErZn/6StlZU4qXzLWkkR/OuzVBBusCZqD3Opz R3+25kkiG0sRucyIOMaY/im7LSYQ8YdkPacnf8KbkECNYxPIn8u6R/c5O3JNpx4a byw7MHrH1WIAeJjUALWVtVXdSMHyGJbSf86JQ5xmrAQTl/b/g0z+f0qtM9e+VYdi K2uaK2CevS3Tkp4EQk+dhsyrDpMG1ok= -----END CERTIFICATE-----Generated at Sun Jul 20 11:15:39 2025 by rpki-client