$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5920d0d8-3e8a-32e5-a817-4e58b2849624.roa File: 5920d0d8-3e8a-32e5-a817-4e58b2849624.roa (raw, json) Hash identifier: sJKWXs+3neU93jFxCSb1MuEJm+7eD6hiuZHAyf6+Erc= Subject key identifier: FF:FD:F5:A5:7E:A3:E0:E5:F3:9E:2F:61:C0:87:76:2D:F9:B2:EF:7F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EA78F33C1801032C9957E2480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5920d0d8-3e8a-32e5-a817-4e58b2849624.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9009 IP address blocks: 45.74.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:33:c1:80:10:32:c9:95:7e:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0e3abbda-29c1-4766-bd73-91d28e83aa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:ff:00:12:c8:ed:5a:14:4d:9c:96:07:c6: f2:98:87:46:db:17:de:de:cd:fe:24:6a:fc:f4:8d: 55:fc:46:bc:ba:63:1c:4c:cc:1b:9c:79:07:5b:8d: ca:24:b8:d1:d4:ac:af:ae:62:07:7f:c2:6b:53:ff: d0:1b:62:d5:b3:5a:4f:de:3d:84:04:d7:d4:fa:f1: 7f:27:64:d4:a7:bd:a1:24:17:79:f7:47:69:b5:52: 09:cd:e8:1f:08:37:ef:17:da:81:f6:0a:a7:1a:8a: a3:32:e7:13:5b:66:0a:1f:9a:39:e4:83:85:cf:dd: 65:15:b9:0f:57:38:5d:b8:87:51:c1:28:98:49:be: 4e:3b:d3:4a:b1:eb:d0:9a:36:75:1a:19:b3:5b:88: e6:e0:86:4f:3f:f3:12:7e:92:6c:ff:07:df:ec:16: be:de:95:87:cb:e5:d8:96:0d:f5:4e:b3:b1:5d:be: 8f:92:ed:5f:18:17:52:69:46:79:3d:f0:a8:19:fd: 5f:92:29:32:07:d3:28:08:ef:ec:b9:62:41:04:91: 60:a2:41:f3:74:ca:f8:db:bd:55:1a:d2:5e:22:ae: f1:89:1c:5e:c0:b6:49:ad:95:df:1d:19:02:c8:2c: 84:62:00:92:3d:3d:93:e7:1a:6c:ff:04:af:c7:0a: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FD:F5:A5:7E:A3:E0:E5:F3:9E:2F:61:C0:87:76:2D:F9:B2:EF:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5920d0d8-3e8a-32e5-a817-4e58b2849624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4f:3d:0f:29:4b:a2:9d:87:64:ee:94:a3:0f:51:35:bf:84: 9c:c4:9f:ee:da:e5:d5:41:05:c5:3d:08:03:49:1c:5f:34:ab: ee:0e:92:45:10:87:6a:ed:d3:98:a8:c2:a6:82:72:70:67:e7: bd:51:a8:9c:72:b5:0c:c9:7b:dd:ba:10:f8:db:a1:da:c1:6d: 63:8f:d4:04:ac:67:b9:f8:90:7d:83:31:f6:a7:a0:1f:a6:71: f5:25:aa:de:f4:2c:d6:d0:c6:6a:d4:bc:da:e2:54:1b:7f:67: 1e:7c:e3:6a:13:31:7e:bb:42:0d:1f:3a:82:7e:16:dd:98:82: 0c:d6:8c:4c:8c:77:1e:9f:23:86:85:5f:df:a6:87:01:8b:52: 24:a6:d1:c2:c6:01:af:50:bf:02:d5:22:98:7f:f3:12:d9:4c: 6e:5f:74:54:cf:d3:41:e0:ff:a1:a6:78:5c:b3:dc:fc:f7:fc: 3b:ed:8e:ee:ce:6e:6f:a4:f5:d8:70:51:45:57:41:59:57:73: c8:4f:b6:af:4d:d1:ba:04:af:fd:93:ce:e1:19:b7:62:0d:48: 13:8d:17:79:07:ba:c4:8f:f6:dc:3a:46:35:fe:7a:d2:79:53: 9d:a9:46:56:3d:2f:8b:9a:39:07:72:4b:c1:2d:09:dd:7c:d7: b5:73:75:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njzPBgBAyyZV+JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGUzYWJiZGEtMjljMS00NzY2LWJkNzMtOTFkMjhlODNhYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUr/ABLI7VoUTZyWB8bymIdG2xfe3s3+JGr8 9I1V/Ea8umMcTMwbnHkHW43KJLjR1KyvrmIHf8JrU//QG2LVs1pP3j2EBNfU+vF/ J2TUp72hJBd590dptVIJzegfCDfvF9qB9gqnGoqjMucTW2YKH5o55IOFz91lFbkP VzhduIdRwSiYSb5OO9NKsevQmjZ1GhmzW4jm4IZPP/MSfpJs/wff7Ba+3pWHy+XY lg31TrOxXb6Pku1fGBdSaUZ5PfCoGf1fkikyB9MoCO/suWJBBJFgokHzdMr4271V GtJeIq7xiRxewLZJrZXfHRkCyCyEYgCSPT2T5xps/wSvxwrpOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/99aV+o+Dl854vYcCHdi35su9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTkyMGQwZDgtM2U4YS0z MmU1LWE4MTctNGU1OGIyODQ5NjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdPPQ8pS6Kdh2TulKMPUTW/hJzEn+7a5dVBBcU9CANJHF80q+4OkkUQ h2rt05iowqaCcnBn571RqJxytQzJe926EPjbodrBbWOP1ASsZ7n4kH2DMfanoB+m cfUlqt70LNbQxmrUvNriVBt/Zx5842oTMX67Qg0fOoJ+Ft2YggzWjEyMdx6fI4aF X9+mhwGLUiSm0cLGAa9QvwLVIph/8xLZTG5fdFTP00Hg/6GmeFyz3Pz3/Dvtju7O bm+k9dhwUUVXQVlXc8hPtq9N0boEr/2TzuEZt2INSBONF3kHusSP9tw6RjX+etJ5 U52pRlY9L4uaOQdyS8EtCd1817VzdYc= -----END CERTIFICATE-----Generated at Fri Sep 4 20:54:24 2026 by rpki-client