$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ec1325c8-1d2d-39a5-802b-2878f8e5035d.roa File: ec1325c8-1d2d-39a5-802b-2878f8e5035d.roa (raw, json) Hash identifier: bo8EKKzZ5qy52pC0889+Y4/RuKrZG7h9AeYBUW6hnoQ= Subject key identifier: B0:61:44:04:B3:A3:90:84:36:23:33:C1:6F:FA:D5:0D:84:49:FF:34 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B36F1AAD50E6ADCC9C3C8AF80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ec1325c8-1d2d-39a5-802b-2878f8e5035d.roa Signing time: Tue 16 Sep 2025 14:48:17 +0000 ROA not before: Tue 16 Sep 2025 14:48:17 +0000 ROA not after: Mon 15 Dec 2025 15:48:17 +0000 asID: 9009 IP address blocks: 45.74.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:f1:aa:d5:0e:6a:dc:c9:c3:c8:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 16 14:48:17 2025 GMT Not After : Dec 15 15:48:17 2025 GMT Subject: CN=a6e1a742-22b4-45aa-be72-09f6973040dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a8:07:f3:b3:ec:96:db:a9:f2:aa:dc:e9:5a: 80:5e:d2:8d:a5:37:9e:ae:f9:ea:b2:32:f7:bc:47: bf:18:43:5e:0f:7e:8a:b6:7f:ce:80:87:12:72:ac: d9:8c:f0:72:fe:bf:04:94:68:d5:cc:2e:85:75:9a: e3:43:9b:65:aa:c5:de:67:0d:b7:9b:b6:4f:b3:fa: 5d:c1:fd:76:c4:bc:aa:66:49:31:8e:3d:19:55:a8: 9e:7d:c1:81:40:b0:21:bd:dc:a4:01:ae:53:2b:57: e3:25:a0:19:97:4f:fb:53:a5:e9:1b:47:d6:5e:d5: c0:fe:02:5e:fb:bb:78:b5:c0:5a:a3:47:19:e1:5f: 50:3a:9f:d3:8c:47:f7:a8:95:19:16:59:9c:c3:d1: 18:af:8b:76:bc:b9:91:f8:4b:2b:83:57:ba:76:2b: 56:7c:6b:6d:18:4b:ba:3b:a6:5d:24:8c:1f:4a:82: f5:70:9e:af:e0:cc:6f:2a:c7:15:1d:14:36:58:f4: c9:18:95:00:5f:4a:10:b4:d0:1c:ed:5e:50:29:30: 51:e5:6d:48:f8:4a:2b:96:f0:21:57:a3:7b:d4:68: 62:9a:30:8c:da:74:d1:f3:49:54:c2:6d:a0:1c:a8: 09:b9:ef:16:b1:5c:b8:1b:d0:1d:1b:da:fc:27:2a: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:61:44:04:B3:A3:90:84:36:23:33:C1:6F:FA:D5:0D:84:49:FF:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ec1325c8-1d2d-39a5-802b-2878f8e5035d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:de:4b:f6:d0:02:19:a8:af:79:f4:66:5e:85:42:7d:46:e0: 27:bf:87:14:cf:82:86:78:93:7c:b8:cf:4b:28:14:5b:19:0a: a4:4b:f7:35:46:cf:c0:5c:16:8f:29:60:52:24:ce:cb:2b:ad: 53:17:68:66:c4:d2:56:31:3f:a1:7a:0b:2e:10:52:f8:7e:4e: 60:af:8e:59:14:90:5e:7f:3a:04:c5:b2:85:09:46:da:28:75: 56:7e:2a:9c:7a:22:fd:84:5d:62:a6:20:b2:97:4a:42:8b:20: d2:02:2f:82:d1:2d:4c:e8:db:c6:2b:00:2b:e9:c1:34:0a:03: cd:bb:c3:54:a1:76:fb:c5:b2:3c:fe:3c:88:c2:86:93:7b:42: f7:25:40:e0:ec:b4:22:bb:a8:1b:8e:f9:87:1b:34:07:8c:72: 14:68:80:9d:b1:ca:26:bf:98:fd:d5:73:e6:66:c5:c4:4a:00: 04:17:c7:e3:ec:7b:6e:db:fb:6e:07:ef:17:1a:bd:93:73:c6: 02:17:a3:3d:21:74:86:d0:30:93:99:02:d7:18:67:f6:c9:a1: ec:d2:75:80:9f:60:7c:e6:1d:bf:b2:41:7c:39:95:10:ae:18: b2:6a:72:38:5a:9a:88:b3:c2:70:96:58:5d:74:04:1b:2c:8a: 22:a0:0e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs28arVDmrcycPIr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxNjE0NDgxN1oXDTI1MTIxNTE1NDgxN1owLzEtMCsGA1UEAxMk YTZlMWE3NDItMjJiNC00NWFhLWJlNzItMDlmNjk3MzA0MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6gH87Psltup8qrc6VqAXtKNpTeervnqsjL3 vEe/GENeD36Ktn/OgIcScqzZjPBy/r8ElGjVzC6FdZrjQ5tlqsXeZw23m7ZPs/pd wf12xLyqZkkxjj0ZVaiefcGBQLAhvdykAa5TK1fjJaAZl0/7U6XpG0fWXtXA/gJe +7t4tcBao0cZ4V9QOp/TjEf3qJUZFlmcw9EYr4t2vLmR+Esrg1e6ditWfGttGEu6 O6ZdJIwfSoL1cJ6v4MxvKscVHRQ2WPTJGJUAX0oQtNAc7V5QKTBR5W1I+EorlvAh V6N71GhimjCM2nTR80lUwm2gHKgJue8WsVy4G9AdG9r8JyrWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBhRASzo5CENiMzwW/61Q2ESf80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWMxMzI1YzgtMWQyZC0z OWE1LTgwMmItMjg3OGY4ZTUwMzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLeS/bQAhmor3n0Zl6FQn1G4Ce/hxTPgoZ4k3y4z0soFFsZCqRL9zVG z8BcFo8pYFIkzssrrVMXaGbE0lYxP6F6Cy4QUvh+TmCvjlkUkF5/OgTFsoUJRtoo dVZ+Kpx6Iv2EXWKmILKXSkKLINICL4LRLUzo28YrACvpwTQKA827w1ShdvvFsjz+ PIjChpN7QvclQODstCK7qBuO+YcbNAeMchRogJ2xyia/mP3Vc+ZmxcRKAAQXx+Ps e27b+24H7xcavZNzxgIXoz0hdIbQMJOZAtcYZ/bJoezSdYCfYHzmHb+yQXw5lRCu GLJqcjhamoizwnCWWF10BBssiiKgDgA= -----END CERTIFICATE-----Generated at Sun Oct 19 07:15:30 2025 by rpki-client