$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a33c5291-75f3-36ff-9d29-a268d64418b3.roa File: a33c5291-75f3-36ff-9d29-a268d64418b3.roa (raw, json) Hash identifier: BOjLf2IO6/TeNZlZ01sD4rJBoyt+qL2lfFOxyAqMIM4= Subject key identifier: A1:B6:84:CC:3E:02:7F:BB:02:29:7A:09:A7:BC:E3:45:85:A7:1F:15 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E680E22489AD91C3EDADE5580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a33c5291-75f3-36ff-9d29-a268d64418b3.roa Signing time: Mon 06 Jul 2026 07:21:04 +0000 ROA not before: Mon 06 Jul 2026 07:21:04 +0000 ROA not after: Sun 04 Oct 2026 07:21:04 +0000 asID: 219326 IP address blocks: 45.74.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:0e:22:48:9a:d9:1c:3e:da:de:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 6 07:21:04 2026 GMT Not After : Oct 4 07:21:04 2026 GMT Subject: CN=b2e796c6-5ac6-4fbf-aaeb-60e0f5bfb7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:47:44:d7:a4:1a:b9:ba:63:b6:65:c3:d8:17: 8b:e4:52:6a:d5:94:29:ef:1a:6d:d6:f3:3b:13:ef: 03:8e:de:7f:70:bf:6a:cf:41:f2:ae:59:d2:8e:c3: 16:c0:00:21:16:bf:9f:1d:91:8d:b1:6a:24:e8:10: f8:32:c4:83:c2:86:60:28:01:c2:35:e5:71:78:97: 90:8a:8b:6d:31:1a:08:d2:65:04:92:e8:a8:70:27: 24:6d:30:4a:9e:23:3f:97:94:93:ce:a3:75:d8:20: 1b:fa:62:f5:0d:b5:10:56:ba:cb:2d:37:dd:40:b9: aa:cf:14:fe:80:8d:4a:a2:4a:d9:c0:29:86:0a:6e: 49:7e:f4:99:1a:32:c7:27:29:c5:95:a2:f8:d6:2f: 7f:f5:fa:15:8f:83:5c:9f:22:54:92:9f:18:64:2c: 78:1d:08:af:4f:ce:af:80:52:3a:c2:45:ae:dd:b5: 96:37:a2:a7:c3:9e:1e:0c:a3:05:c6:cd:69:cc:a0: 27:a4:c8:7f:31:3c:22:f7:a0:29:9a:07:39:54:c0: ac:5f:bf:61:9a:0f:4f:fc:46:2e:a5:bb:a3:95:14: 68:59:42:fd:2e:79:d3:c6:95:15:c1:0a:3f:94:55: 5f:b5:a8:d2:82:10:94:60:d8:21:83:aa:15:97:f9: a3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B6:84:CC:3E:02:7F:BB:02:29:7A:09:A7:BC:E3:45:85:A7:1F:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a33c5291-75f3-36ff-9d29-a268d64418b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0a:8b:36:76:f6:d2:f5:2a:fb:b9:56:62:a1:6c:1b:11:12: 0a:9e:8f:dc:a2:06:85:ca:38:a8:15:b0:40:d2:54:84:ba:f0: e2:00:3b:74:92:31:bb:c9:e0:ac:f8:b0:61:a8:85:a1:fd:07: 83:68:5c:b2:6d:82:a9:a0:f3:a4:95:1e:8b:c4:68:f8:36:1b: d6:dd:20:e6:7b:7d:7e:ac:87:f5:6a:58:d4:70:84:af:3d:36: b8:6d:af:5e:f6:69:eb:0c:3e:65:20:8d:13:39:af:00:1d:f7: 29:2d:03:52:35:08:40:7f:03:e1:f7:c3:1c:40:d5:51:c8:c7: 16:9e:5b:a8:de:ad:74:37:3c:8f:a9:c6:34:6f:3a:99:c2:e0: cd:2c:b3:9a:4c:b7:58:c4:a7:1d:36:9e:e5:76:ae:e0:ef:c1: ac:09:c4:42:4b:cd:cd:5d:e6:90:dc:3a:3a:89:41:99:c1:28: 5c:37:5f:2b:74:28:49:4e:76:0d:61:0a:e9:7a:14:a0:a9:9e: 90:91:7f:78:d1:b4:c0:1e:11:00:82:ab:d9:e2:58:47:4d:f4: 7a:be:1c:f0:d7:72:b4:d2:cf:c3:f9:19:2c:1d:77:34:9a:a0: c5:62:57:50:47:ce:9d:4f:41:59:6d:1c:f6:84:d0:63:be:34: 70:8f:e2:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oDiJImtkcPtreVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwNjA3MjEwNFoXDTI2MTAwNDA3MjEwNFowLzEtMCsGA1UEAxMk YjJlNzk2YzYtNWFjNi00ZmJmLWFhZWItNjBlMGY1YmZiN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkdE16QaubpjtmXD2BeL5FJq1ZQp7xpt1vM7 E+8Djt5/cL9qz0HyrlnSjsMWwAAhFr+fHZGNsWok6BD4MsSDwoZgKAHCNeVxeJeQ iottMRoI0mUEkuiocCckbTBKniM/l5STzqN12CAb+mL1DbUQVrrLLTfdQLmqzxT+ gI1KokrZwCmGCm5JfvSZGjLHJynFlaL41i9/9foVj4NcnyJUkp8YZCx4HQivT86v gFI6wkWu3bWWN6Knw54eDKMFxs1pzKAnpMh/MTwi96Apmgc5VMCsX79hmg9P/EYu pbujlRRoWUL9LnnTxpUVwQo/lFVftajSghCUYNghg6oVl/mjRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG2hMw+An+7Ail6Cae840WFpx8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTMzYzUyOTEtNzVmMy0z NmZmLTlkMjktYTI2OGQ2NDQxOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMKizZ29tL1Kvu5VmKhbBsREgqej9yiBoXKOKgVsEDSVIS68OIAO3SS MbvJ4Kz4sGGohaH9B4NoXLJtgqmg86SVHovEaPg2G9bdIOZ7fX6sh/VqWNRwhK89 Nrhtr172aesMPmUgjRM5rwAd9yktA1I1CEB/A+H3wxxA1VHIxxaeW6jerXQ3PI+p xjRvOpnC4M0ss5pMt1jEpx02nuV2ruDvwawJxEJLzc1d5pDcOjqJQZnBKFw3Xyt0 KElOdg1hCul6FKCpnpCRf3jRtMAeEQCCq9niWEdN9Hq+HPDXcrTSz8P5GSwddzSa oMViV1BHzp1PQVltHPaE0GO+NHCP4jU= -----END CERTIFICATE-----Generated at Tue Jul 21 14:53:35 2026 by rpki-client