$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2193fd36-5a46-33e2-a5c2-407dd9f5762c.roa File: 2193fd36-5a46-33e2-a5c2-407dd9f5762c.roa (raw, json) Hash identifier: P2Y9IeRfhS+bHYADTgQ5247pwPxDz/YlwUOK7o/MWMo= Subject key identifier: BB:49:92:31:88:84:9C:7D:93:B5:91:0C:2C:AD:6C:E2:21:A0:B0:1C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E06BA789FC48A78D542C59A00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2193fd36-5a46-33e2-a5c2-407dd9f5762c.roa Signing time: Mon 01 Jun 2026 10:39:05 +0000 ROA not before: Mon 01 Jun 2026 10:39:05 +0000 ROA not after: Sun 30 Aug 2026 10:39:05 +0000 asID: 206560 IP address blocks: 45.74.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:06:ba:78:9f:c4:8a:78:d5:42:c5:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 1 10:39:05 2026 GMT Not After : Aug 30 10:39:05 2026 GMT Subject: CN=ebf1e4e3-2c1d-44bc-8a9b-4b109f7db30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4a:6d:bd:93:01:4b:ef:f3:ce:32:1f:4d:58: 84:76:ba:1b:43:67:68:9d:51:7a:49:af:70:4e:a3: ba:4a:c4:d5:98:38:23:38:05:74:25:db:1e:f1:cb: a4:81:6c:57:bd:13:19:78:1c:8c:e3:fb:fe:c4:fa: 53:08:dc:81:64:cc:2b:e4:0e:8d:2e:c2:71:ac:54: ba:9f:41:0a:e1:b2:3a:68:e1:af:b9:f2:47:08:fd: 89:6e:3c:50:41:12:81:bf:6d:30:5b:a2:69:a5:ba: b6:72:de:0e:ac:2d:1a:c7:bb:78:df:fa:4c:36:df: 27:31:79:65:ee:25:9c:5f:24:1a:e0:3c:98:3b:cb: 35:60:6c:45:18:af:e0:74:66:0b:56:0d:6e:9f:c7: 01:6d:d2:6f:97:d4:df:85:7e:c5:5c:03:2c:d6:d3: 47:4e:bf:a4:ef:c9:e2:af:e6:ae:4d:9a:fd:a4:10: 99:3e:44:99:0c:05:9e:81:a2:20:ae:85:64:d6:a3: 75:9f:db:a8:a8:88:84:49:60:5b:4e:05:4f:e0:ba: b0:a5:d6:3d:f2:1a:0b:e5:01:0e:06:00:8c:15:14: 0f:64:d2:ee:cc:ba:8e:1c:39:51:a8:e3:15:9c:56: 65:79:a9:af:30:90:fc:9b:4c:a3:2e:31:bf:ff:7d: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:49:92:31:88:84:9C:7D:93:B5:91:0C:2C:AD:6C:E2:21:A0:B0:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2193fd36-5a46-33e2-a5c2-407dd9f5762c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7b:07:71:66:cb:16:f6:0c:94:5a:d7:29:37:10:6e:1b:f1: 66:5e:f6:ba:27:19:1e:a0:00:bd:af:c0:3a:49:40:5b:dc:2b: 6f:9e:d1:98:c2:da:87:f8:92:ed:40:d7:96:99:a5:f8:51:78: c0:1a:d0:e6:00:10:85:42:b3:16:0f:85:f8:bc:1a:a9:b3:eb: 1a:c5:b7:6b:d4:db:02:c1:16:d1:7a:d1:be:a9:9a:68:4e:7b: 63:75:34:77:3f:fc:66:78:0a:79:40:42:5a:28:43:53:55:42: fb:53:28:a2:ee:c1:ee:42:cd:ab:fe:4f:ba:2d:0d:d9:4b:fd: a4:27:d8:6f:15:37:cc:6c:d0:87:cd:69:68:09:23:34:3b:ef: bd:48:d0:70:e9:51:c6:db:aa:b0:2b:7d:fd:6e:42:83:03:54: 3b:49:9a:12:e9:60:76:5f:90:d6:45:2a:bb:84:ab:40:5b:ff: b8:d7:96:b5:b7:dd:36:be:3d:ff:24:f6:8e:76:0f:24:b2:08: a1:9a:bd:0d:f3:21:fe:3a:7b:c9:6f:dc:1d:c4:2e:8b:90:54: d6:bc:02:63:23:e1:ec:96:5f:c9:9e:2f:98:89:43:71:a2:d5: 58:41:f7:0a:d0:37:86:16:e8:d6:c6:44:97:f9:de:ae:41:40: 34:e1:10:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4GunifxIp41ULFmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYwMTEwMzkwNVoXDTI2MDgzMDEwMzkwNVowLzEtMCsGA1UEAxMk ZWJmMWU0ZTMtMmMxZC00NGJjLThhOWItNGIxMDlmN2RiMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUptvZMBS+/zzjIfTViEdrobQ2donVF6Sa9w TqO6SsTVmDgjOAV0Jdse8cukgWxXvRMZeByM4/v+xPpTCNyBZMwr5A6NLsJxrFS6 n0EK4bI6aOGvufJHCP2JbjxQQRKBv20wW6Jppbq2ct4OrC0ax7t43/pMNt8nMXll 7iWcXyQa4DyYO8s1YGxFGK/gdGYLVg1un8cBbdJvl9TfhX7FXAMs1tNHTr+k78ni r+auTZr9pBCZPkSZDAWegaIgroVk1qN1n9uoqIiESWBbTgVP4LqwpdY98hoL5QEO BgCMFRQPZNLuzLqOHDlRqOMVnFZleamvMJD8m0yjLjG//33bIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtJkjGIhJx9k7WRDCytbOIhoLAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjE5M2ZkMzYtNWE0Ni0z M2UyLWE1YzItNDA3ZGQ5ZjU3NjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh7B3Fmyxb2DJRa1yk3EG4b8WZe9ronGR6gAL2vwDpJQFvcK2+e0ZjC 2of4ku1A15aZpfhReMAa0OYAEIVCsxYPhfi8Gqmz6xrFt2vU2wLBFtF60b6pmmhO e2N1NHc//GZ4CnlAQlooQ1NVQvtTKKLuwe5Czav+T7otDdlL/aQn2G8VN8xs0IfN aWgJIzQ7771I0HDpUcbbqrArff1uQoMDVDtJmhLpYHZfkNZFKruEq0Bb/7jXlrW3 3Ta+Pf8k9o52DySyCKGavQ3zIf46e8lv3B3ELouQVNa8AmMj4eyWX8meL5iJQ3Gi 1VhB9wrQN4YW6NbGRJf53q5BQDThEOg= -----END CERTIFICATE-----Generated at Thu Jun 4 09:01:15 2026 by rpki-client