$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/95d1716a-fe63-3171-8194-3ce8643e3f83.roa File: 95d1716a-fe63-3171-8194-3ce8643e3f83.roa (raw, json) Hash identifier: k8JWqnq4P9kx1nRjf3NHnyBJJ1EKKOq5qwFmJZgXk7c= Subject key identifier: C7:E6:8F:24:08:17:D7:7D:B5:F1:B6:04:E1:E7:DB:96:EF:5F:1B:85 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A7E3FAD123C709108BFF47F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/95d1716a-fe63-3171-8194-3ce8643e3f83.roa Signing time: Sat 12 Jul 2025 11:00:55 +0000 ROA not before: Sat 12 Jul 2025 11:00:55 +0000 ROA not after: Fri 10 Oct 2025 11:00:55 +0000 asID: 198584 IP address blocks: 45.74.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:3f:ad:12:3c:70:91:08:bf:f4:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 12 11:00:55 2025 GMT Not After : Oct 10 11:00:55 2025 GMT Subject: CN=a67cba02-5fd6-45a9-a6d9-e6120a94f3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:5a:e6:1b:81:16:0c:bc:4f:50:7f:6f:21: d9:3f:8a:7c:9d:db:ec:e9:d2:66:72:ff:bd:07:24: c3:63:c2:b2:38:d5:65:19:27:6b:db:68:49:3f:2b: 10:23:df:76:5f:10:d4:05:fa:8e:a5:03:26:d0:37: b3:3e:ee:ce:e7:66:4e:ab:89:50:e8:f4:c9:e9:3f: 5c:21:11:e7:5c:70:3e:3b:39:e1:5e:2b:8c:fe:a2: 65:95:c2:4c:71:36:a7:f5:93:93:18:24:6c:27:d0: 2a:2a:fe:6a:a1:8e:c7:5c:35:95:c0:68:51:3c:91: 25:b4:1c:fd:1d:12:a8:01:9f:b0:56:c7:02:e4:27: d1:9c:c8:80:a6:2a:d5:ce:13:31:7c:7f:32:21:74: b8:37:1d:9f:5a:f7:51:57:ad:93:7b:0c:b7:a7:48: 9f:1f:44:ff:e6:e9:73:c7:22:93:41:16:e0:08:1e: 7e:ea:1d:c0:f5:ed:03:d1:1d:9f:00:96:5d:3d:52: 3d:71:19:3a:f7:62:35:34:48:4c:40:dc:95:a9:47: fa:97:1d:67:ed:f7:03:cc:47:3b:61:2d:05:b7:12: 39:d0:91:13:72:54:c3:56:66:ff:13:95:7a:54:bd: 22:16:05:fe:c1:ee:7f:b5:ea:a8:32:53:76:3f:6b: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E6:8F:24:08:17:D7:7D:B5:F1:B6:04:E1:E7:DB:96:EF:5F:1B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/95d1716a-fe63-3171-8194-3ce8643e3f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:70:e1:6e:f7:fb:20:c2:b4:f0:72:5e:0d:05:3f:3b:81:f6: 68:53:d6:c0:f5:0c:88:aa:1f:f5:77:1f:7c:1f:38:7e:cb:27: ba:b5:e4:b2:2d:7d:f6:ba:f3:75:0b:d1:5e:d7:22:95:df:fe: ab:cf:5f:59:70:bf:de:44:ac:79:8b:31:83:d5:b6:fa:b8:15: 59:a2:18:97:92:12:81:18:65:e5:10:40:dc:8f:76:24:f8:b1: 37:b5:7a:3c:65:5c:21:04:4d:63:a2:16:8f:ba:c4:c1:24:48: 00:d5:4a:1d:8d:6d:87:d2:59:64:8c:a8:b4:76:53:9c:55:dc: 77:64:9d:7c:d2:05:f4:e4:b1:e2:57:4c:66:89:a2:28:68:a4: e0:85:d0:78:bc:5a:ff:09:4f:e3:46:9d:aa:26:da:37:4e:ca: db:be:f7:fc:f2:0e:17:3b:3d:ad:83:c8:98:1c:25:79:c3:a9: 09:05:f6:de:7b:1c:87:18:84:09:a9:ba:3a:e9:69:68:58:27: 85:3b:33:67:23:8b:c8:b2:e9:25:6b:a0:9b:61:9d:a5:d8:cd: 29:a7:c0:8f:01:48:8b:8f:03:94:fe:6a:eb:a0:52:fb:34:09: 49:7b:9d:b9:a5:06:4c:0a:4b:10:b9:fa:4d:cf:40:20:02:a5: 82:70:8d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+P60SPHCRCL/0f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxMjExMDA1NVoXDTI1MTAxMDExMDA1NVowLzEtMCsGA1UEAxMk YTY3Y2JhMDItNWZkNi00NWE5LWE2ZDktZTYxMjBhOTRmM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraBa5huBFgy8T1B/byHZP4p8ndvs6dJmcv+9 ByTDY8KyONVlGSdr22hJPysQI992XxDUBfqOpQMm0DezPu7O52ZOq4lQ6PTJ6T9c IRHnXHA+OznhXiuM/qJllcJMcTan9ZOTGCRsJ9AqKv5qoY7HXDWVwGhRPJEltBz9 HRKoAZ+wVscC5CfRnMiApirVzhMxfH8yIXS4Nx2fWvdRV62Tewy3p0ifH0T/5ulz xyKTQRbgCB5+6h3A9e0D0R2fAJZdPVI9cRk692I1NEhMQNyVqUf6lx1n7fcDzEc7 YS0FtxI50JETclTDVmb/E5V6VL0iFgX+we5/teqoMlN2P2sw1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfmjyQIF9d9tfG2BOHn25bvXxuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTVkMTcxNmEtZmU2My0z MTcxLTgxOTQtM2NlODY0M2UzZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9w4W73+yDCtPByXg0FPzuB9mhT1sD1DIiqH/V3H3wfOH7LJ7q15LIt ffa683UL0V7XIpXf/qvPX1lwv95ErHmLMYPVtvq4FVmiGJeSEoEYZeUQQNyPdiT4 sTe1ejxlXCEETWOiFo+6xMEkSADVSh2NbYfSWWSMqLR2U5xV3HdknXzSBfTkseJX TGaJoihopOCF0Hi8Wv8JT+NGnaom2jdOytu+9/zyDhc7Pa2DyJgcJXnDqQkF9t57 HIcYhAmpujrpaWhYJ4U7M2cji8iy6SVroJthnaXYzSmnwI8BSIuPA5T+auugUvs0 CUl7nbmlBkwKSxC5+k3PQCACpYJwjR8= -----END CERTIFICATE-----Generated at Sun Jul 20 22:36:23 2025 by rpki-client