$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa File: 7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa (raw, json) Hash identifier: LHXNo0NzEQ3ejHzgQp7W2uydPDR+UqF80eOFjEm3dq4= Subject key identifier: 78:55:1B:0C:1B:8C:63:5E:04:9B:7D:92:CD:B4:66:EC:64:1F:87:DE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B0746C01795496297E6E82600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 9009 IP address blocks: 45.74.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c0:17:95:49:62:97:e6:e8:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=2f89ad0c-18c3-4ae9-8b44-e251a7a6e148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:da:c6:0d:9c:84:6a:8f:6e:59:97:a2:93: ad:d1:f6:5b:09:6e:70:e3:bd:51:0c:c9:26:8b:2d: 09:dc:02:85:23:44:31:7d:27:18:f8:d2:49:fa:3a: ce:a8:77:b9:90:be:4e:9b:4f:22:50:b6:61:e0:d2: 24:da:f3:0d:88:a5:eb:4e:29:1c:63:a2:60:55:09: b3:08:d9:74:dd:0c:26:35:6a:f3:72:95:10:2e:dc: 83:04:99:34:ae:62:13:f7:b3:39:a0:ba:a5:35:36: 56:02:7b:a1:8f:ab:d5:59:d6:e8:a7:eb:af:52:3b: c4:22:29:56:c7:9c:73:69:6e:43:c3:99:44:42:e3: e0:fc:6a:f1:8b:63:27:5b:ed:ab:a0:b2:e7:20:d5: 2e:6d:1a:21:57:a8:66:f0:96:82:f2:b4:55:e6:49: 50:9e:0b:82:5a:8f:1a:72:71:d8:10:96:2a:b7:51: 89:98:07:1b:33:2f:59:8d:73:18:07:0e:c7:ce:73: 35:45:18:90:5b:3e:59:03:5b:07:47:98:aa:91:e7: 57:19:5c:ff:83:fc:16:06:a2:41:99:6d:b5:17:21: 01:4d:8c:a3:96:3f:5e:c1:1b:b9:8b:2c:76:8d:ef: 13:9f:23:10:be:ce:89:6e:29:a1:83:32:32:75:ba: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:55:1B:0C:1B:8C:63:5E:04:9B:7D:92:CD:B4:66:EC:64:1F:87:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7d601dad-07e3-3a3b-8042-ed50aa9d861d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d7:eb:11:64:72:99:39:3d:29:b1:33:47:f8:ac:cf:b8:7b: e6:96:db:29:b8:41:b3:68:bd:8e:59:97:e2:da:b4:8a:f1:49: ca:b7:d1:19:20:56:ee:d5:28:88:04:7b:e5:f8:3c:d2:53:c2: e9:59:b2:41:df:34:e0:69:4b:42:32:00:43:02:db:1e:da:fe: d2:e0:1d:5c:a9:fd:0e:71:4d:14:de:ef:b8:51:04:76:0c:0d: da:53:3c:0f:33:0c:0f:ad:cc:af:58:2b:6f:f1:9d:5c:b7:4a: de:96:a3:d4:e5:70:db:a2:08:55:f6:18:60:29:fe:03:6f:72: d6:fe:9d:48:c8:81:88:2d:34:7d:b0:ee:73:8a:ae:2b:80:6c: 09:f7:b7:e5:97:ab:10:3e:e2:f9:d4:a0:11:04:9c:21:fe:c8: 98:a2:a2:1a:ad:d5:b7:34:59:16:9d:e4:04:b3:89:de:38:8d: 33:3d:41:98:37:76:94:1e:fe:0c:01:d8:0b:fa:ef:00:c2:fc: be:c6:65:60:01:7a:d6:fa:51:68:b7:28:ba:5f:e6:df:8f:d6: 1a:a6:b2:f9:7a:af:1b:24:fa:5f:a1:6a:e6:c3:ed:99:be:a4: 3a:3b:59:e5:53:4c:66:8f:98:be:4e:a0:c7:17:10:53:40:58: fa:85:b0:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsAXlUlil+boJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MmY4OWFkMGMtMThjMy00YWU5LThiNDQtZTI1MWE3YTZlMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB7axg2chGqPblmXopOt0fZbCW5w471RDMkm iy0J3AKFI0QxfScY+NJJ+jrOqHe5kL5Om08iULZh4NIk2vMNiKXrTikcY6JgVQmz CNl03QwmNWrzcpUQLtyDBJk0rmIT97M5oLqlNTZWAnuhj6vVWdbop+uvUjvEIilW x5xzaW5Dw5lEQuPg/Grxi2MnW+2roLLnINUubRohV6hm8JaC8rRV5klQnguCWo8a cnHYEJYqt1GJmAcbMy9ZjXMYBw7HznM1RRiQWz5ZA1sHR5iqkedXGVz/g/wWBqJB mW21FyEBTYyjlj9ewRu5iyx2je8TnyMQvs6JbimhgzIydbp41QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhVGwwbjGNeBJt9ks20ZuxkH4feMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2Q2MDFkYWQtMDdlMy0z YTNiLTgwNDItZWQ1MGFhOWQ4NjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvX6xFkcpk5PSmxM0f4rM+4e+aW2ym4QbNovY5Zl+LatIrxScq30Rkg Vu7VKIgEe+X4PNJTwulZskHfNOBpS0IyAEMC2x7a/tLgHVyp/Q5xTRTe77hRBHYM DdpTPA8zDA+tzK9YK2/xnVy3St6Wo9TlcNuiCFX2GGAp/gNvctb+nUjIgYgtNH2w 7nOKriuAbAn3t+WXqxA+4vnUoBEEnCH+yJiiohqt1bc0WRad5ASzid44jTM9QZg3 dpQe/gwB2Av67wDC/L7GZWABetb6UWi3KLpf5t+P1hqmsvl6rxsk+l+haubD7Zm+ pDo7WeVTTGaPmL5OoMcXEFNAWPqFsLs= -----END CERTIFICATE-----Generated at Fri Sep 5 05:58:24 2025 by rpki-client