$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cb71659a-da65-3a36-a2dc-3e0bbd1329f0.roa File: cb71659a-da65-3a36-a2dc-3e0bbd1329f0.roa (raw, json) Hash identifier: gIUEzUdUIHZPsHq3h0/TC0yg/SVOk/tmeMAIz73f5q4= Subject key identifier: 85:6C:28:F0:C1:7D:99:70:E2:34:FA:D7:D9:65:32:32:86:1A:79:53 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B36F21FCE25C408A293440068 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cb71659a-da65-3a36-a2dc-3e0bbd1329f0.roa Signing time: Tue 16 Sep 2025 14:49:12 +0000 ROA not before: Tue 16 Sep 2025 14:49:12 +0000 ROA not after: Mon 15 Dec 2025 15:49:12 +0000 asID: 9009 IP address blocks: 45.74.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:f2:1f:ce:25:c4:08:a2:93:44:00:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 16 14:49:12 2025 GMT Not After : Dec 15 15:49:12 2025 GMT Subject: CN=0f4c826f-f760-4eb8-8267-56e3ace9361f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:3c:34:f3:23:a2:a3:e5:56:30:ba:c3:69: 9c:db:42:9a:fb:29:91:fd:3b:4c:45:a2:45:17:b9: 84:48:22:3c:b8:83:ee:74:13:35:98:4f:15:5b:ca: 62:85:71:58:1f:d1:b2:e9:a2:55:4c:68:16:c2:83: 46:ae:22:3d:b6:3e:48:00:35:ab:5a:e2:c9:d3:9e: 0d:f7:5c:14:62:29:60:c8:7c:68:1c:88:3d:fa:b3: f7:89:5a:f6:17:0d:0e:21:36:3e:59:9c:42:10:56: b9:5b:73:0d:2c:60:49:ab:c3:58:f0:01:4f:e9:31: 2d:dd:06:12:14:14:93:7e:87:37:7b:f6:69:6c:c3: 83:b8:f6:e0:f7:1c:b5:89:83:6f:6b:c8:a8:71:e6: b2:fc:79:6e:46:69:82:f7:44:35:2a:8a:bc:cb:89: 0d:32:4e:20:f2:56:22:60:5c:ce:60:97:2a:b4:16: 7b:1b:d2:45:54:f6:7c:b4:71:ad:ec:83:3b:f3:2a: 42:73:86:f6:d0:68:f6:7f:79:34:8b:e0:d7:88:22: 19:99:ce:00:c7:1e:7c:86:44:4c:07:7d:6d:7b:b3: 15:8b:fa:4c:85:55:11:b3:6b:31:9b:92:a1:c3:04: f7:9d:3e:92:02:ce:2b:36:2e:b3:38:df:0f:7a:46: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6C:28:F0:C1:7D:99:70:E2:34:FA:D7:D9:65:32:32:86:1A:79:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cb71659a-da65-3a36-a2dc-3e0bbd1329f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:de:3a:98:60:5a:a1:8a:b0:af:a0:cc:77:41:49:e7:92:eb: e6:b6:a2:9c:23:48:27:d1:65:4d:84:09:a2:ad:ec:bd:4d:e6: 0a:c0:f4:23:69:2b:b7:93:b2:f8:60:3c:78:f6:0e:2b:57:ef: e7:46:3d:c3:0d:1f:b5:42:e7:50:79:86:89:d0:b4:ed:a2:b0: 54:6f:b7:61:45:f0:b8:57:e2:ce:79:26:82:ef:63:ee:7e:07: 5f:09:46:c6:d7:f8:5e:28:6a:03:52:51:35:95:04:92:0f:66: a7:30:52:41:95:c0:3f:ff:8c:2a:21:53:44:21:ab:40:22:b6: 6e:95:86:d4:62:25:93:73:f7:84:8d:34:a7:7d:d7:cb:3e:d6: 5a:b2:88:20:18:91:f5:e3:6d:b0:78:24:cc:c0:04:41:20:6a: 4d:76:c0:60:e7:37:d3:d1:7f:98:13:d7:84:9c:15:c8:71:85: 95:eb:6d:91:46:4f:3f:0d:87:3e:a9:96:42:b4:96:74:61:f6: 5b:3d:96:75:72:3c:d2:81:30:09:67:50:a1:cd:27:7e:c4:c4: ae:34:42:69:d1:ed:0d:68:99:1e:5b:03:2e:84:cf:8b:d5:74: 71:c5:dd:9b:97:64:53:b8:5e:b0:f8:44:a3:e1:79:3e:07:93: f6:88:90:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs28h/OJcQIopNEAGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxNjE0NDkxMloXDTI1MTIxNTE1NDkxMlowLzEtMCsGA1UEAxMk MGY0YzgyNmYtZjc2MC00ZWI4LTgyNjctNTZlM2FjZTkzNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1M8NPMjoqPlVjC6w2mc20Ka+ymR/TtMRaJF F7mESCI8uIPudBM1mE8VW8pihXFYH9Gy6aJVTGgWwoNGriI9tj5IADWrWuLJ054N 91wUYilgyHxoHIg9+rP3iVr2Fw0OITY+WZxCEFa5W3MNLGBJq8NY8AFP6TEt3QYS FBSTfoc3e/ZpbMODuPbg9xy1iYNva8ioceay/HluRmmC90Q1Koq8y4kNMk4g8lYi YFzOYJcqtBZ7G9JFVPZ8tHGt7IM78ypCc4b20Gj2f3k0i+DXiCIZmc4Axx58hkRM B31te7MVi/pMhVURs2sxm5KhwwT3nT6SAs4rNi6zON8PekZrgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVsKPDBfZlw4jT619llMjKGGnlTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2I3MTY1OWEtZGE2NS0z YTM2LWEyZGMtM2UwYmJkMTMyOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHeOphgWqGKsK+gzHdBSeeS6+a2opwjSCfRZU2ECaKt7L1N5grA9CNp K7eTsvhgPHj2DitX7+dGPcMNH7VC51B5honQtO2isFRvt2FF8LhX4s55JoLvY+5+ B18JRsbX+F4oagNSUTWVBJIPZqcwUkGVwD//jCohU0Qhq0Aitm6VhtRiJZNz94SN NKd918s+1lqyiCAYkfXjbbB4JMzABEEgak12wGDnN9PRf5gT14ScFchxhZXrbZFG Tz8Nhz6plkK0lnRh9ls9lnVyPNKBMAlnUKHNJ37ExK40QmnR7Q1omR5bAy6Ez4vV dHHF3ZuXZFO4XrD4RKPheT4Hk/aIkHY= -----END CERTIFICATE-----Generated at Sun Oct 19 07:06:00 2025 by rpki-client