$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa File: 331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa (raw, json) Hash identifier: BtcLTm8kX1Zl70qsOn8gL1WMYUHmpAh7CaAhysKbQWU= Subject key identifier: 17:64:25:08:AB:E9:9E:DD:DF:F2:87:90:5B:C9:42:51:D6:E2:CC:13 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AFD812FAD9D76A5CE46498F00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa Signing time: Wed 27 Aug 2025 01:00:32 +0000 ROA not before: Wed 27 Aug 2025 01:00:32 +0000 ROA not after: Tue 25 Nov 2025 02:00:32 +0000 asID: 137409 IP address blocks: 45.74.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:81:2f:ad:9d:76:a5:ce:46:49:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 27 01:00:32 2025 GMT Not After : Nov 25 02:00:32 2025 GMT Subject: CN=72ce6a92-831b-4b16-bceb-6d816161e301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:23:83:26:bd:48:95:a5:11:06:09:09:ec: 32:2f:4a:0a:59:b2:4a:31:df:08:14:05:94:a5:80: d1:7f:10:86:ee:25:98:69:2c:51:bc:91:f2:b7:8d: dd:1b:84:ba:7d:79:60:92:84:88:d9:ef:2c:7d:5e: 86:fc:51:52:ce:d3:f4:f2:e3:41:97:90:e9:40:fd: 51:f8:c5:d5:31:da:31:9e:31:bd:a4:6d:24:02:4c: 26:5a:6a:42:16:e0:74:da:a8:8b:57:56:2a:de:ba: f9:62:c0:75:c0:c7:86:01:03:4f:30:0a:9a:ac:06: 10:91:92:64:de:88:0e:c2:ab:c5:8f:d3:aa:16:0e: cf:08:7f:38:fa:d5:f9:83:fd:aa:bd:e0:4a:39:6e: b4:6a:e5:cf:25:be:75:1a:07:b3:9e:d5:60:b7:e3: 44:f5:41:4e:30:fd:f1:3f:22:9b:46:91:1c:6a:d9: 59:4a:b7:6b:12:f0:61:6e:25:7d:e7:4c:51:bc:bd: a8:b5:8d:67:55:1a:a7:6d:37:c9:06:9e:49:7f:bd: e4:9d:a0:37:2e:67:75:9e:13:b3:af:60:d2:f9:7b: dd:c4:bb:54:43:12:eb:a7:88:5a:a7:f4:6d:5a:fb: 90:8a:4c:a4:1a:aa:7f:8d:0c:ee:28:a1:e2:c1:f4: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:64:25:08:AB:E9:9E:DD:DF:F2:87:90:5B:C9:42:51:D6:E2:CC:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/331e8ec2-9b76-3ad2-adc4-8b38edd7012a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:83:78:82:13:0b:9a:c4:64:83:66:6b:f2:88:81:9d:9c:5a: 28:ab:8d:c1:08:ed:32:ee:ac:f8:1f:f9:ca:6e:b8:54:33:d2: f4:1a:93:12:1b:56:08:92:77:86:50:36:4a:c8:19:40:8d:6a: cc:13:a8:50:1b:80:87:48:06:ab:d2:0f:5d:2d:c8:0e:df:1e: 0f:34:30:ab:18:35:67:ef:d8:99:ad:90:67:91:dd:98:7f:80: 52:89:8e:6d:4e:8a:77:dd:8f:45:ba:c1:4b:6e:4b:fd:2b:3d: 78:a4:98:c8:14:fe:e0:44:82:5f:5f:5f:5d:75:d6:fc:c2:02: fe:d2:b1:c0:80:50:d4:53:fb:4c:c3:6f:3a:e3:d0:d7:29:a8: a5:dd:d1:74:8d:a0:0a:2b:dc:f0:b7:5a:3f:0a:ad:c9:ca:fc: 3b:2a:f6:15:4b:f4:35:38:c5:c4:07:e4:0e:1d:70:df:f4:13: 2a:be:f9:5f:8e:a2:d5:ad:26:84:75:38:d0:35:28:40:64:12: d6:e8:ac:48:5a:99:7c:6c:0d:98:2c:0a:52:0f:a2:d7:ad:52: 3d:52:db:58:f5:5d:aa:27:bd:c0:78:ff:de:66:4c:46:01:9a: 18:36:15:53:e8:c8:6f:13:1b:41:af:f6:cb:ae:11:08:7a:f5: 8c:5f:61:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9gS+tnXalzkZJjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyNzAxMDAzMloXDTI1MTEyNTAyMDAzMlowLzEtMCsGA1UEAxMk NzJjZTZhOTItODMxYi00YjE2LWJjZWItNmQ4MTYxNjFlMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOsjgya9SJWlEQYJCewyL0oKWbJKMd8IFAWU pYDRfxCG7iWYaSxRvJHyt43dG4S6fXlgkoSI2e8sfV6G/FFSztP08uNBl5DpQP1R +MXVMdoxnjG9pG0kAkwmWmpCFuB02qiLV1Yq3rr5YsB1wMeGAQNPMAqarAYQkZJk 3ogOwqvFj9OqFg7PCH84+tX5g/2qveBKOW60auXPJb51GgezntVgt+NE9UFOMP3x PyKbRpEcatlZSrdrEvBhbiV950xRvL2otY1nVRqnbTfJBp5Jf73knaA3Lmd1nhOz r2DS+XvdxLtUQxLrp4hap/RtWvuQikykGqp/jQzuKKHiwfTFcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdkJQir6Z7d3/KHkFvJQlHW4swTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzMxZThlYzItOWI3Ni0z YWQyLWFkYzQtOGIzOGVkZDcwMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImDeIITC5rEZINma/KIgZ2cWiirjcEI7TLurPgf+cpuuFQz0vQakxIb VgiSd4ZQNkrIGUCNaswTqFAbgIdIBqvSD10tyA7fHg80MKsYNWfv2JmtkGeR3Zh/ gFKJjm1Oinfdj0W6wUtuS/0rPXikmMgU/uBEgl9fX1111vzCAv7SscCAUNRT+0zD bzrj0NcpqKXd0XSNoAor3PC3Wj8KrcnK/Dsq9hVL9DU4xcQH5A4dcN/0Eyq++V+O otWtJoR1ONA1KEBkEtborEhamXxsDZgsClIPotetUj1S21j1XaonvcB4/95mTEYB mhg2FVPoyG8TG0Gv9suuEQh69YxfYW0= -----END CERTIFICATE-----Generated at Sat Sep 6 02:44:11 2025 by rpki-client