$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b6a56a92-ee15-361f-b668-cb410777300f.roa File: b6a56a92-ee15-361f-b668-cb410777300f.roa (raw, json) Hash identifier: ZSxafsKWjNo2WTR9/2qds1DiUrA6lRfb6gw+2BYSkIU= Subject key identifier: 80:54:4A:F3:7F:5B:B5:87:4C:7F:BA:74:D8:34:3B:02:49:55:63:8E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F0ED2388F74D180415B0CD880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b6a56a92-ee15-361f-b668-cb410777300f.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 45.74.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:38:8f:74:d1:80:41:5b:0c:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=5a4eb3f9-b903-4974-a945-199dd41042b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:c2:2b:d2:3c:61:2a:4f:10:30:bf:41:28: 84:0e:ab:ec:6f:73:f7:47:9c:75:c0:51:c5:d6:bd: e6:84:c8:bc:05:52:80:a3:58:19:4e:25:53:7e:c5: b0:85:e0:98:cb:81:b2:ff:f1:76:26:ca:2f:4d:44: d1:ed:0d:c3:cd:a6:9d:22:e5:25:5e:fc:4a:38:2f: 0f:c2:a8:0d:e6:2c:8b:0e:b0:b8:ab:c7:1e:88:d7: a5:0e:27:65:ba:ae:ef:dd:59:b9:9a:ae:17:22:7c: 89:c3:be:d5:f2:c0:63:0a:12:47:f2:3b:6c:37:d3: 08:28:de:c9:ac:56:30:ce:31:18:fa:58:ee:77:80: d9:f9:08:63:7b:74:7c:2d:5a:4b:bd:3e:82:4d:1d: a0:0c:41:75:ac:d1:dd:25:6a:eb:38:5a:26:d7:f0: bd:53:d0:08:e9:3c:5f:68:60:f1:c5:89:17:b9:2c: 03:c7:c3:be:9d:91:0c:53:dd:e1:b5:52:86:22:50: 6a:08:a0:1a:c5:c7:f3:90:64:da:2f:d0:7e:01:e7: 09:7b:fc:b9:82:97:9f:af:3c:4a:b2:dd:59:18:85: 55:4f:88:f8:36:84:6e:46:b6:23:20:f0:0d:51:ae: 32:40:3e:94:f2:d4:17:ac:41:50:77:0e:ef:e3:c8: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:54:4A:F3:7F:5B:B5:87:4C:7F:BA:74:D8:34:3B:02:49:55:63:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b6a56a92-ee15-361f-b668-cb410777300f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:43:dd:cf:10:3e:df:7a:db:ac:f0:c7:52:a2:97:c7:72:39: f9:0e:b1:ee:c9:62:f1:e1:19:a3:8f:3c:32:0b:ee:ee:85:75: 50:aa:4d:ff:cb:72:1c:ba:8b:77:99:ae:82:16:e8:5c:31:6a: 12:92:3c:d6:b5:60:7c:0d:db:c8:d4:b8:5a:02:d2:1d:a3:09: c1:87:5e:6c:1b:5f:de:ef:22:fe:da:17:6d:0e:07:15:69:2d: a8:37:77:a8:ed:35:e4:70:c2:cb:d8:5e:80:4d:ec:40:74:32: 1b:aa:b8:42:c1:f6:a5:28:55:32:96:d4:c4:4b:1a:73:30:64: 83:37:d5:a7:30:19:2f:b2:b3:d9:e3:86:a7:38:b5:b5:07:67: 34:4e:2e:a5:b9:8b:6e:77:1a:c2:b9:e9:15:2f:71:c4:b3:3c: f1:00:4e:34:02:a9:73:12:32:80:d8:f0:10:f3:00:d5:46:2f: 7d:46:90:13:0e:28:dd:0a:2d:1c:8d:b8:3c:7a:0a:fe:1f:72: b6:af:3e:eb:21:5d:a8:65:03:71:c1:09:de:91:a5:59:8a:78: 48:5d:a9:88:ed:77:92:60:29:7d:c6:af:bf:a1:33:a4:46:cc: 20:68:0c:42:97:d3:28:e6:00:01:f9:ff:d8:fd:0c:eb:27:4d: c9:36:e8:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jiPdNGAQVsM2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk NWE0ZWIzZjktYjkwMy00OTc0LWE5NDUtMTk5ZGQ0MTA0MmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+zCK9I8YSpPEDC/QSiEDqvsb3P3R5x1wFHF 1r3mhMi8BVKAo1gZTiVTfsWwheCYy4Gy//F2JsovTUTR7Q3DzaadIuUlXvxKOC8P wqgN5iyLDrC4q8ceiNelDidluq7v3Vm5mq4XInyJw77V8sBjChJH8jtsN9MIKN7J rFYwzjEY+ljud4DZ+Qhje3R8LVpLvT6CTR2gDEF1rNHdJWrrOFom1/C9U9AI6Txf aGDxxYkXuSwDx8O+nZEMU93htVKGIlBqCKAaxcfzkGTaL9B+AecJe/y5gpefrzxK st1ZGIVVT4j4NoRuRrYjIPANUa4yQD6U8tQXrEFQdw7v48iTmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBUSvN/W7WHTH+6dNg0OwJJVWOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjZhNTZhOTItZWUxNS0z NjFmLWI2NjgtY2I0MTA3NzczMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChD3c8QPt9626zwx1Kil8dyOfkOse7JYvHhGaOPPDIL7u6FdVCqTf/L chy6i3eZroIW6FwxahKSPNa1YHwN28jUuFoC0h2jCcGHXmwbX97vIv7aF20OBxVp Lag3d6jtNeRwwsvYXoBN7EB0MhuquELB9qUoVTKW1MRLGnMwZIM31acwGS+ys9nj hqc4tbUHZzROLqW5i253GsK56RUvccSzPPEATjQCqXMSMoDY8BDzANVGL31GkBMO KN0KLRyNuDx6Cv4fcravPushXahlA3HBCd6RpVmKeEhdqYjtd5JgKX3Gr7+hM6RG zCBoDEKX0yjmAAH5/9j9DOsnTck26CI= -----END CERTIFICATE-----Generated at Fri Sep 4 22:27:37 2026 by rpki-client