$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3a3c2da7-b7f0-39af-8785-a70b19a073f6.roa File: 3a3c2da7-b7f0-39af-8785-a70b19a073f6.roa (raw, json) Hash identifier: 89kOWZWa8e908IbjANkMnbFSr6rOztiLMVaGKNn7kt4= Subject key identifier: DE:3D:DD:57:03:22:EF:88:85:C1:A2:6E:02:91:C7:F1:C4:CA:54:78 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A199256C9B0524ED54E9EF000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3a3c2da7-b7f0-39af-8785-a70b19a073f6.roa Signing time: Fri 06 Jun 2025 09:30:50 +0000 ROA not before: Fri 06 Jun 2025 09:30:50 +0000 ROA not after: Thu 04 Sep 2025 09:30:50 +0000 asID: 329007 IP address blocks: 45.74.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:92:56:c9:b0:52:4e:d5:4e:9e:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 6 09:30:50 2025 GMT Not After : Sep 4 09:30:50 2025 GMT Subject: CN=929c6301-8646-49fb-bc70-12906d6d0954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:42:da:77:4d:75:67:1f:4e:95:e1:d6:d9:23: 8a:c8:05:ac:8a:35:9d:41:26:29:75:8a:bc:30:1e: 37:1e:2b:4f:86:f1:4e:6e:2c:ec:1d:41:6c:96:3d: 83:84:f1:7a:73:04:d2:bd:d5:3b:60:35:7b:63:89: 87:03:87:96:1e:35:ae:e7:e9:5c:9c:27:80:45:e4: 94:e2:6c:89:6e:5b:9b:68:53:92:59:18:b0:a7:e4: 53:cf:fb:c0:cd:8b:2b:eb:33:8c:1d:1e:51:c9:28: 1f:10:ab:3e:2e:39:99:56:e9:9a:ff:c6:c9:fe:34: 3f:cc:89:e9:c8:51:ce:b9:fb:eb:f8:71:da:55:ec: be:47:38:8c:c4:34:63:82:ee:37:f1:e3:40:4f:7a: 73:04:5d:35:b9:03:1d:0a:ba:f2:11:c7:8c:46:4c: 5e:3c:ba:b5:8e:2a:3d:dd:ac:31:31:d5:0b:7e:fd: fb:6d:d0:fa:77:a9:2a:4c:bb:c9:c2:8c:31:3c:81: ac:82:8a:61:c3:bf:75:55:6d:d3:04:23:f1:a1:01: 86:c0:86:67:58:e7:5b:8a:b0:2e:1a:9b:c9:98:cd: 89:36:37:32:9d:89:14:1a:e3:5c:6a:b7:46:1f:d9: 0e:87:48:07:7c:3a:03:7b:bc:a1:a3:e3:d0:7b:d6: 4b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3D:DD:57:03:22:EF:88:85:C1:A2:6E:02:91:C7:F1:C4:CA:54:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3a3c2da7-b7f0-39af-8785-a70b19a073f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:45:a5:e0:3c:0b:83:c7:e6:e3:f5:81:c8:d9:52:57:43:27: cf:ab:3e:d1:5f:ae:18:2b:d1:d3:74:fd:67:d0:11:13:8f:e1: 37:6e:99:c0:65:95:01:1e:20:8c:c4:7c:3f:bf:e8:31:98:af: 60:41:1a:40:38:02:d8:a3:68:be:ed:09:49:a1:1f:de:46:b7: 91:d5:20:ef:a7:c1:91:72:c7:15:ea:c6:6e:64:ba:e3:a7:09: 9a:a4:d1:a9:f0:4d:7a:4b:c3:e3:c6:f0:d0:bd:22:5e:ea:f6: 45:8d:2a:2f:9b:68:6f:1b:5d:3a:b8:5b:32:19:51:49:23:eb: db:7d:5c:32:2d:7e:0d:87:da:58:95:59:74:cf:9e:dd:fa:42: 95:82:8d:60:11:3d:5b:50:29:12:4d:c8:0b:b2:2c:9f:f5:69: 23:fc:7b:2c:26:b6:78:85:5c:01:01:56:d5:f1:f4:8c:f0:e3: e2:3f:55:f8:46:aa:4f:03:f5:cf:1e:d5:f7:23:ed:7e:91:a6: 0e:67:13:43:90:9a:3b:36:0b:28:04:f3:0c:71:d6:80:8b:17: b2:bb:e4:1f:a0:6f:91:84:1f:9b:78:98:65:75:69:61:7d:bc: 9e:79:62:41:41:85:d0:f6:a6:81:c3:f5:21:50:7a:6e:ce:84: 05:b6:79:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZklbJsFJO1U6e8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwNjA5MzA1MFoXDTI1MDkwNDA5MzA1MFowLzEtMCsGA1UEAxMk OTI5YzYzMDEtODY0Ni00OWZiLWJjNzAtMTI5MDZkNmQwOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kLad011Zx9OleHW2SOKyAWsijWdQSYpdYq8 MB43HitPhvFObizsHUFslj2DhPF6cwTSvdU7YDV7Y4mHA4eWHjWu5+lcnCeAReSU 4myJblubaFOSWRiwp+RTz/vAzYsr6zOMHR5RySgfEKs+LjmZVuma/8bJ/jQ/zInp yFHOufvr+HHaVey+RziMxDRjgu438eNAT3pzBF01uQMdCrryEceMRkxePLq1jio9 3awxMdULfv37bdD6d6kqTLvJwowxPIGsgophw791VW3TBCPxoQGGwIZnWOdbirAu GpvJmM2JNjcynYkUGuNcardGH9kOh0gHfDoDe7yho+PQe9ZL5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN493VcDIu+IhcGibgKRx/HEylR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2EzYzJkYTctYjdmMC0z OWFmLTg3ODUtYTcwYjE5YTA3M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZFpeA8C4PH5uP1gcjZUldDJ8+rPtFfrhgr0dN0/WfQEROP4TdumcBl lQEeIIzEfD+/6DGYr2BBGkA4AtijaL7tCUmhH95Gt5HVIO+nwZFyxxXqxm5kuuOn CZqk0anwTXpLw+PG8NC9Il7q9kWNKi+baG8bXTq4WzIZUUkj69t9XDItfg2H2liV WXTPnt36QpWCjWARPVtQKRJNyAuyLJ/1aSP8eywmtniFXAEBVtXx9Izw4+I/VfhG qk8D9c8e1fcj7X6Rpg5nE0OQmjs2CygE8wxx1oCLF7K75B+gb5GEH5t4mGV1aWF9 vJ55YkFBhdD2poHD9SFQem7OhAW2eRg= -----END CERTIFICATE-----Generated at Sun Jun 8 09:14:49 2025 by rpki-client