$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ceafb21a-8bdb-3db0-87bb-b85fcb55ed1c.roa File: ceafb21a-8bdb-3db0-87bb-b85fcb55ed1c.roa (raw, json) Hash identifier: 2O3HoXEot5kI69Eg+9l0l4EFm8l7ofwY2ixnwD8wUs0= Subject key identifier: D1:B7:2E:B2:91:18:80:4F:FE:7D:B6:21:AD:FC:CE:EC:15:48:C9:DB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F6C583963C1C7F362B3F95A40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ceafb21a-8bdb-3db0-87bb-b85fcb55ed1c.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 9009 IP address blocks: 45.74.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:39:63:c1:c7:f3:62:b3:f9:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=ed66e3a8-9b27-4399-ab6a-90a0923157f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:0e:2c:ca:53:f7:c8:fe:d9:80:c8:ab:6e: a8:2e:08:6e:16:36:ad:67:50:c1:1c:56:9f:61:af: ec:de:86:f3:54:b6:31:e5:1e:7d:2c:27:16:1a:60: 28:7f:3a:97:ee:09:28:35:1c:41:b1:3f:08:01:da: 23:90:5b:0e:a7:42:61:fd:87:2a:9c:2a:91:53:37: 98:2b:c6:d3:98:b0:88:61:f4:b5:f8:46:25:71:68: 67:f3:6e:91:97:ab:c9:21:37:14:44:18:01:73:e5: fb:2f:cb:eb:f9:f0:41:eb:83:2b:4e:fa:5f:68:0d: 27:00:e0:62:f8:8a:33:08:a6:5b:47:66:cb:85:18: 0a:da:c6:75:72:d8:47:b5:b5:b5:6c:70:ae:24:5a: 07:38:34:f6:cc:6a:d0:b9:a6:75:4a:80:2d:3a:a0: 2c:03:c0:a4:62:58:de:9a:0b:4e:a6:b7:fe:1f:0c: 42:cd:00:c5:ff:46:f3:99:a5:56:c9:9c:ce:ff:ca: 5b:8d:5a:e7:84:8a:d8:ef:d8:6c:39:79:8e:40:be: 7b:7d:84:4a:54:f4:a5:95:f4:15:27:46:72:63:e3: e7:aa:5e:13:18:fb:6e:cc:a7:d6:d7:ce:8e:0d:ef: a9:05:08:07:8d:9f:23:20:43:f9:60:c3:06:34:e1: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B7:2E:B2:91:18:80:4F:FE:7D:B6:21:AD:FC:CE:EC:15:48:C9:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ceafb21a-8bdb-3db0-87bb-b85fcb55ed1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d5:63:72:fa:42:a9:c6:4e:80:ae:03:32:ab:f0:13:89:98: 72:c0:26:ec:4b:cb:e5:3b:aa:a8:b0:b2:05:84:53:b4:dc:08: 0c:9c:a6:c1:74:c1:de:04:83:f5:2b:53:dd:5b:fa:e5:b4:27: c3:78:77:f4:9d:35:aa:8d:21:fb:79:a3:c1:56:d2:09:cf:25: 12:c2:81:c7:63:eb:06:6e:f8:04:95:ba:9c:1b:c8:42:66:e0: cd:a9:10:3d:e1:0b:aa:83:cc:e4:32:44:89:c6:a9:45:2e:c1: 71:57:40:62:b2:1e:68:aa:84:3f:4d:ee:a6:f3:54:96:41:25: f1:6d:e5:49:f0:fe:e1:be:2d:b6:1e:3b:94:37:5f:8c:43:86: 3b:59:34:7e:d4:c3:1a:c1:ed:5a:6a:7a:d3:fb:46:03:5a:7a: ec:7f:f0:48:27:31:a0:31:d8:08:97:af:42:d5:45:8a:53:f5: cc:ff:1c:48:a4:a4:0b:6f:ec:88:86:73:b0:64:2c:e9:bc:ff: b3:55:37:3c:45:e6:82:bb:85:2e:0d:68:c7:54:e7:0b:ad:3f: b1:ed:99:ee:e1:d0:07:5b:e7:eb:ed:cd:e3:23:20:03:13:a6: 03:4f:ef:a9:ff:2a:ea:f3:72:c3:99:ad:5e:dc:00:6d:42:ec: c3:9b:20:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDljwcfzYrP5WkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZWQ2NmUzYTgtOWIyNy00Mzk5LWFiNmEtOTBhMDkyMzE1N2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ8OLMpT98j+2YDIq26oLghuFjatZ1DBHFaf Ya/s3obzVLYx5R59LCcWGmAofzqX7gkoNRxBsT8IAdojkFsOp0Jh/YcqnCqRUzeY K8bTmLCIYfS1+EYlcWhn826Rl6vJITcURBgBc+X7L8vr+fBB64MrTvpfaA0nAOBi +IozCKZbR2bLhRgK2sZ1cthHtbW1bHCuJFoHODT2zGrQuaZ1SoAtOqAsA8CkYlje mgtOprf+HwxCzQDF/0bzmaVWyZzO/8pbjVrnhIrY79hsOXmOQL57fYRKVPSllfQV J0ZyY+Pnql4TGPtuzKfW186ODe+pBQgHjZ8jIEP5YMMGNOFyXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG3LrKRGIBP/n22Ia38zuwVSMnbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2VhZmIyMWEtOGJkYi0z ZGIwLTg3YmItYjg1ZmNiNTVlZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnVY3L6QqnGToCuAzKr8BOJmHLAJuxLy+U7qqiwsgWEU7TcCAycpsF0 wd4Eg/UrU91b+uW0J8N4d/SdNaqNIft5o8FW0gnPJRLCgcdj6wZu+ASVupwbyEJm 4M2pED3hC6qDzOQyRInGqUUuwXFXQGKyHmiqhD9N7qbzVJZBJfFt5Unw/uG+LbYe O5Q3X4xDhjtZNH7UwxrB7VpqetP7RgNaeux/8EgnMaAx2AiXr0LVRYpT9cz/HEik pAtv7IiGc7BkLOm8/7NVNzxF5oK7hS4NaMdU5wutP7Htme7h0Adb5+vtzeMjIAMT pgNP76n/KurzcsOZrV7cAG1C7MObIE0= -----END CERTIFICATE-----Generated at Mon Oct 26 10:26:27 2026 by rpki-client