$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3cd20a04-1bc3-360f-905e-e0e042ed0e71.roa File: 3cd20a04-1bc3-360f-905e-e0e042ed0e71.roa (raw, json) Hash identifier: aKAaEeS8lZgyrqxEZvjRYpPk4CELqZ4DBYChA0e1PfM= Subject key identifier: CB:2A:03:D8:84:40:45:E0:01:0C:A4:AD:94:78:05:1B:D3:C9:E6:41 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EF1D5C078726ECE4086E9CF80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3cd20a04-1bc3-360f-905e-e0e042ed0e71.roa Signing time: Mon 24 Aug 2026 15:49:00 +0000 ROA not before: Mon 24 Aug 2026 15:49:00 +0000 ROA not after: Sun 22 Nov 2026 16:49:00 +0000 asID: 202412 IP address blocks: 45.74.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:d5:c0:78:72:6e:ce:40:86:e9:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 24 15:49:00 2026 GMT Not After : Nov 22 16:49:00 2026 GMT Subject: CN=7a7ab7e1-edef-4344-868e-cbb9545009fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b6:a3:5e:5e:6a:46:72:b4:5a:bf:ce:01:de: 2f:24:78:f1:91:f7:26:77:79:f0:b1:9c:e0:90:e0: ec:4e:2a:54:a6:42:5e:91:ec:ae:29:64:b7:f9:d9: 60:60:b1:7c:eb:12:6a:37:6f:8d:12:6b:8c:45:4e: f9:dc:da:6b:a9:cc:9a:b1:08:35:a7:04:33:b1:fb: cc:4b:bb:8b:41:53:83:0c:e1:55:d2:39:67:65:65: ae:8b:23:bd:ba:f5:f3:b2:d9:bd:85:10:8c:80:97: ee:88:ca:b7:67:d0:bc:2a:08:e0:b8:5c:b8:23:6a: b3:91:91:81:84:ff:b3:a1:1f:5d:ef:69:fe:0e:f5: 12:2e:76:92:3e:b4:62:69:3c:14:72:65:a3:60:95: 25:4d:ac:74:ed:50:7d:69:57:e1:87:b6:ba:39:3b: fd:8d:cf:81:8e:ce:19:49:70:c3:05:4f:d1:da:48: 61:3c:c9:ba:f8:96:de:b5:50:26:97:ca:cc:fd:16: 85:c1:f3:6f:46:b1:44:9a:df:6a:aa:ca:51:45:0a: 25:40:b8:fa:4d:43:9e:91:ed:27:1e:19:2e:36:5e: 79:4f:87:5f:05:45:e0:e8:93:6e:11:2b:9a:f8:6d: 88:b7:7c:c8:f1:03:59:19:aa:d1:a8:b5:2f:15:46: c1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2A:03:D8:84:40:45:E0:01:0C:A4:AD:94:78:05:1B:D3:C9:E6:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3cd20a04-1bc3-360f-905e-e0e042ed0e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4a:4c:54:6f:3a:c0:57:4f:0b:91:d6:5f:58:73:ca:7f:22: 83:17:dc:42:25:e9:07:95:aa:4e:5a:31:3a:91:cc:5f:4a:89: 3c:30:42:8b:91:a0:5b:a0:24:9a:ec:b0:f6:e7:01:23:8d:41: ef:df:4c:89:c6:ac:3e:41:64:b6:6a:e6:7c:c5:da:f1:77:51: 33:52:bd:1d:36:21:a6:c3:f1:05:58:99:0b:97:c2:a2:9b:9b: d4:f9:c5:99:b2:14:ad:a3:2a:a1:ba:e1:d0:8d:c3:0c:ad:a7: 1c:5f:87:c4:60:a1:22:f2:ab:9c:81:ad:bf:29:5e:8b:64:c6: c1:82:88:54:15:86:da:31:87:eb:9a:f8:00:3a:ef:5f:6f:b4: 76:12:e0:87:c2:bb:e6:5a:a4:9f:ea:01:ec:16:59:3d:83:b4: dd:54:a0:8f:d5:27:7c:d5:9c:e2:e0:8d:5c:67:d2:59:bc:5d: eb:a9:8b:88:35:7f:08:39:14:cd:ee:81:b8:9f:c3:ac:4d:ac: f8:32:e4:99:bf:87:70:5a:af:5a:1b:45:34:38:f4:f6:e7:df: 93:79:9d:c8:94:13:93:b3:e0:0b:47:e6:d4:12:20:e1:a4:4e: 75:e4:57:a2:91:13:af:f9:02:40:ae:5d:6a:94:ee:ff:e7:a8: 54:8d:fd:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7x1cB4cm7OQIbpz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgyNDE1NDkwMFoXDTI2MTEyMjE2NDkwMFowLzEtMCsGA1UEAxMk N2E3YWI3ZTEtZWRlZi00MzQ0LTg2OGUtY2JiOTU0NTAwOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirajXl5qRnK0Wr/OAd4vJHjxkfcmd3nwsZzg kODsTipUpkJekeyuKWS3+dlgYLF86xJqN2+NEmuMRU753NprqcyasQg1pwQzsfvM S7uLQVODDOFV0jlnZWWuiyO9uvXzstm9hRCMgJfuiMq3Z9C8KgjguFy4I2qzkZGB hP+zoR9d72n+DvUSLnaSPrRiaTwUcmWjYJUlTax07VB9aVfhh7a6OTv9jc+Bjs4Z SXDDBU/R2khhPMm6+JbetVAml8rM/RaFwfNvRrFEmt9qqspRRQolQLj6TUOeke0n HhkuNl55T4dfBUXg6JNuESua+G2It3zI8QNZGarRqLUvFUbBXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsqA9iEQEXgAQykrZR4BRvTyeZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2NkMjBhMDQtMWJjMy0z NjBmLTkwNWUtZTBlMDQyZWQwZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhKTFRvOsBXTwuR1l9Yc8p/IoMX3EIl6QeVqk5aMTqRzF9KiTwwQouR oFugJJrssPbnASONQe/fTInGrD5BZLZq5nzF2vF3UTNSvR02IabD8QVYmQuXwqKb m9T5xZmyFK2jKqG64dCNwwytpxxfh8RgoSLyq5yBrb8pXotkxsGCiFQVhtoxh+ua +AA6719vtHYS4IfCu+ZapJ/qAewWWT2DtN1UoI/VJ3zVnOLgjVxn0lm8Xeupi4g1 fwg5FM3ugbifw6xNrPgy5Jm/h3Bar1obRTQ49Pbn35N5nciUE5Oz4AtH5tQSIOGk TnXkV6KRE6/5AkCuXWqU7v/nqFSN/f4= -----END CERTIFICATE-----Generated at Fri Sep 4 22:17:54 2026 by rpki-client