$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/db6a7967-ac82-32c4-a950-f87462cfbb27.roa File: db6a7967-ac82-32c4-a950-f87462cfbb27.roa (raw, json) Hash identifier: XPIzDxCv1nVeH5RP8XdnrNs0PQ9huXv2kj21yE/1NgQ= Subject key identifier: 50:AF:BC:C2:64:4A:86:DD:81:3E:BE:89:E5:6F:8B:BA:52:0F:5F:1B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EF3B7F0E945D760E5B93A8480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/db6a7967-ac82-32c4-a950-f87462cfbb27.roa Signing time: Tue 25 Aug 2026 08:00:34 +0000 ROA not before: Tue 25 Aug 2026 08:00:34 +0000 ROA not after: Mon 23 Nov 2026 09:00:34 +0000 asID: 205960 IP address blocks: 45.74.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f3:b7:f0:e9:45:d7:60:e5:b9:3a:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 25 08:00:34 2026 GMT Not After : Nov 23 09:00:34 2026 GMT Subject: CN=f1d86f85-f4e8-436c-be1b-980af45654ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:23:60:a3:a2:80:69:2d:f0:0b:76:1e:4f: fb:54:51:91:17:cb:28:47:a7:32:b1:8b:92:8f:ef: d1:fa:39:ab:e9:43:3c:2a:3b:0c:b3:90:3f:17:60: 78:93:68:07:cf:6b:3b:2b:cb:b4:47:14:e6:10:e2: ea:f9:e1:9c:db:06:1f:d9:a1:83:d4:e4:95:8b:2a: e4:c1:a9:92:fa:ac:57:eb:7a:27:3a:66:48:78:e2: 34:99:52:ac:b2:52:bd:8c:d8:65:e4:78:d1:9e:25: 35:f7:2e:5e:85:f9:3b:ab:a6:06:a7:de:9d:b4:71: f9:42:2f:07:2d:03:10:29:08:34:89:9c:80:4d:05: c3:e3:6a:c9:6e:b2:eb:4d:f5:9b:d6:9a:e1:04:9e: f3:9b:67:f5:e9:31:57:58:39:f6:a7:a1:4e:e3:59: 0f:20:e6:5e:c7:e0:64:c6:31:d0:a8:61:72:00:e4: 3f:fc:53:89:e6:9d:6d:f4:8e:04:91:2c:dd:bf:b9: 1b:76:f8:7f:c6:44:45:d4:7e:9c:1f:0b:81:f6:3f: 55:72:e1:9d:a5:bb:2e:7e:ab:16:dd:50:02:f1:13: b2:22:55:38:27:2d:5d:bc:e3:1f:4d:70:ce:53:43: a3:ba:d3:ed:7e:7d:01:2d:82:9c:62:d3:f6:3a:62: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AF:BC:C2:64:4A:86:DD:81:3E:BE:89:E5:6F:8B:BA:52:0F:5F:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/db6a7967-ac82-32c4-a950-f87462cfbb27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:3d:7b:f4:0f:f3:de:b5:94:c1:4e:b4:73:76:c4:b5:4f:23: e2:ed:54:bc:34:60:0a:48:b8:87:91:14:70:b9:97:47:86:79: dd:20:2b:52:e5:66:2f:b8:8f:36:46:b7:33:2e:81:8c:05:1f: 44:53:a3:ff:4e:d6:1a:96:d4:a3:a8:13:63:34:b0:2d:58:c7: ce:a1:e1:b7:d8:cb:b9:0f:4a:65:4b:93:6c:d5:d7:7e:d1:47: 65:bf:c6:ce:9c:0d:fa:cc:d5:a0:4b:b9:83:98:aa:72:23:97: 16:54:d8:e9:33:16:a6:5a:30:6b:01:99:d1:15:4c:6c:88:a2: f7:5b:9a:28:04:0c:2d:75:95:97:c8:31:20:bd:08:9f:36:8d: 60:28:eb:08:47:19:42:23:2c:37:96:b5:c7:76:89:02:d2:28: f7:b3:cc:6f:10:76:ac:9b:4b:3a:b7:80:e6:fe:18:55:86:d6: 95:66:51:25:e4:68:28:28:4f:e2:99:47:e2:aa:69:d6:3a:05: 57:ea:b6:c5:68:e1:37:6d:4c:a8:33:60:00:5f:36:43:2c:fe: fe:86:b9:cb:13:e3:a0:aa:e4:60:7f:b4:5d:e6:f8:82:5d:70: f7:36:bd:68:7c:88:a0:b4:3e:ca:14:a9:97:20:c1:e5:6d:69: 51:3e:19:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7zt/DpRddg5bk6hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgyNTA4MDAzNFoXDTI2MTEyMzA5MDAzNFowLzEtMCsGA1UEAxMk ZjFkODZmODUtZjRlOC00MzZjLWJlMWItOTgwYWY0NTY1NGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1ojYKOigGkt8At2Hk/7VFGRF8soR6cysYuS j+/R+jmr6UM8KjsMs5A/F2B4k2gHz2s7K8u0RxTmEOLq+eGc2wYf2aGD1OSViyrk wamS+qxX63onOmZIeOI0mVKsslK9jNhl5HjRniU19y5ehfk7q6YGp96dtHH5Qi8H LQMQKQg0iZyATQXD42rJbrLrTfWb1prhBJ7zm2f16TFXWDn2p6FO41kPIOZex+Bk xjHQqGFyAOQ//FOJ5p1t9I4EkSzdv7kbdvh/xkRF1H6cHwuB9j9VcuGdpbsufqsW 3VAC8ROyIlU4Jy1dvOMfTXDOU0OjutPtfn0BLYKcYtP2OmKVEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCvvMJkSobdgT6+ieVvi7pSD18bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGI2YTc5NjctYWM4Mi0z MmM0LWE5NTAtZjg3NDYyY2ZiYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD89e/QP8961lMFOtHN2xLVPI+LtVLw0YApIuIeRFHC5l0eGed0gK1Ll Zi+4jzZGtzMugYwFH0RTo/9O1hqW1KOoE2M0sC1Yx86h4bfYy7kPSmVLk2zV137R R2W/xs6cDfrM1aBLuYOYqnIjlxZU2OkzFqZaMGsBmdEVTGyIovdbmigEDC11lZfI MSC9CJ82jWAo6whHGUIjLDeWtcd2iQLSKPezzG8QdqybSzq3gOb+GFWG1pVmUSXk aCgoT+KZR+KqadY6BVfqtsVo4TdtTKgzYABfNkMs/v6GucsT46Cq5GB/tF3m+IJd cPc2vWh8iKC0PsoUqZcgweVtaVE+GeA= -----END CERTIFICATE-----Generated at Sat Sep 5 00:21:37 2026 by rpki-client