$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa File: e09d4cea-d423-3a06-91f1-682b8b11b34e.roa (raw, json) Hash identifier: IqKUKMiGSzL9HuNkMygZ3TvTW8mTZjoLFNeiYUM6Ozc= Subject key identifier: 56:58:3F:EB:3E:DA:F3:6A:F2:74:26:DF:D0:D3:2A:34:C6:FC:E2:F4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF5214EE2F8F37E2E4E77B780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 212238 IP address blocks: 45.74.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4e:e2:f8:f3:7e:2e:4e:77:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=91e9d8c4-ff36-4ff2-acfa-973424e52880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:7c:e2:4a:90:d1:bf:15:f6:16:fc:41:cd: 80:a4:df:98:51:43:f8:56:b9:1b:a8:56:f6:c5:10: de:d7:78:db:8d:c7:7b:98:31:03:c5:e1:1e:a1:ed: af:12:86:26:31:d2:e9:b5:ed:a9:f3:54:e8:62:ee: a0:8e:91:60:25:d2:63:a4:06:fd:85:7f:8a:62:e7: 74:2f:a9:40:cc:12:f6:2c:ed:b2:4a:1f:2b:ef:92: c3:81:72:a0:05:c2:3c:8a:59:70:c1:c5:bd:2d:6f: db:71:9c:30:48:93:59:36:09:21:c7:3b:84:12:d1: 8f:e7:c3:84:6e:25:c6:00:f9:cc:d2:d5:fd:d3:8e: 2e:50:a8:1a:7c:15:cc:b6:db:b0:42:16:e8:b5:2a: 80:44:c5:f8:ae:d5:7f:8a:21:9c:f8:02:d0:f0:72: 22:30:49:2c:a1:0e:df:1a:b5:1a:c3:b0:61:2b:e3: 37:a7:e1:e8:bd:cf:a6:82:4c:76:6e:29:3d:81:4a: b6:26:dc:3f:d9:4d:16:ef:7e:e4:9e:48:49:3f:3d: 96:4b:ef:6b:f8:cd:7c:c5:66:c0:9a:db:43:47:3d: fc:cb:cc:ed:99:47:c4:ed:2c:03:6e:c4:1c:c0:65: c7:ab:e6:eb:3c:9a:73:ea:56:88:bc:45:39:29:42: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:58:3F:EB:3E:DA:F3:6A:F2:74:26:DF:D0:D3:2A:34:C6:FC:E2:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:da:cf:f7:47:57:d6:07:89:cd:1d:5e:82:5a:75:99:cd:b2: 01:54:a6:0a:ce:8b:57:49:5e:35:f9:5d:3e:e8:8b:aa:76:03: f0:a4:37:fd:81:23:68:b5:33:5b:78:62:dc:29:8c:48:78:30: 60:65:43:72:a9:fb:41:61:43:c7:2e:52:ec:3e:5c:97:ae:8c: b4:17:e7:11:7c:2d:28:3a:bc:b9:09:e5:fe:f1:40:1c:6b:25: 25:87:30:5c:f8:49:86:1d:01:cf:1d:e4:3d:32:91:17:e0:52: 0d:ec:da:4a:e0:26:b6:bd:10:99:85:21:5b:df:49:fc:2d:6f: 9c:b3:75:9f:69:68:04:1b:1d:90:89:bc:5a:59:2a:21:78:24: d7:8e:d7:f9:00:06:d5:d4:d1:00:94:bf:5a:c4:7d:02:22:f9: e1:4b:52:d0:d8:9d:f0:a4:01:48:16:0b:f4:3a:2b:a3:dc:a4: c1:c1:8a:94:00:c1:1e:0b:a8:22:38:ec:5f:c3:a6:b2:5e:84: 76:e9:4c:9a:58:3f:f7:28:0f:8a:a6:14:af:f6:ae:06:79:74: 3e:e5:0d:dc:01:79:b2:87:5c:46:1c:39:76:b3:b1:3a:1e:4f: 17:f6:04:9b:da:92:ee:d1:94:88:35:33:65:1d:e1:91:ca:95: 7a:4b:9e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IU7i+PN+Lk53t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTFlOWQ4YzQtZmYzNi00ZmYyLWFjZmEtOTczNDI0ZTUyODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqN84kqQ0b8V9hb8Qc2ApN+YUUP4VrkbqFb2 xRDe13jbjcd7mDEDxeEeoe2vEoYmMdLpte2p81ToYu6gjpFgJdJjpAb9hX+KYud0 L6lAzBL2LO2ySh8r75LDgXKgBcI8illwwcW9LW/bcZwwSJNZNgkhxzuEEtGP58OE biXGAPnM0tX9044uUKgafBXMttuwQhbotSqARMX4rtV/iiGc+ALQ8HIiMEksoQ7f GrUaw7BhK+M3p+Hovc+mgkx2bik9gUq2Jtw/2U0W737knkhJPz2WS+9r+M18xWbA mttDRz38y8ztmUfE7SwDbsQcwGXHq+brPJpz6laIvEU5KUKfmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZYP+s+2vNq8nQm39DTKjTG/OL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTA5ZDRjZWEtZDQyMy0z YTA2LTkxZjEtNjgyYjhiMTFiMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfaz/dHV9YHic0dXoJadZnNsgFUpgrOi1dJXjX5XT7oi6p2A/CkN/2B I2i1M1t4YtwpjEh4MGBlQ3Kp+0FhQ8cuUuw+XJeujLQX5xF8LSg6vLkJ5f7xQBxr JSWHMFz4SYYdAc8d5D0ykRfgUg3s2krgJra9EJmFIVvfSfwtb5yzdZ9paAQbHZCJ vFpZKiF4JNeO1/kABtXU0QCUv1rEfQIi+eFLUtDYnfCkAUgWC/Q6K6PcpMHBipQA wR4LqCI47F/DprJehHbpTJpYP/coD4qmFK/2rgZ5dD7lDdwBebKHXEYcOXazsToe Txf2BJvaku7RlIg1M2Ud4ZHKlXpLnoc= -----END CERTIFICATE-----Generated at Sun Sep 7 12:34:32 2025 by rpki-client