$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/429b5faf-4da5-3c05-afe4-fc310f70378e.roa File: 429b5faf-4da5-3c05-afe4-fc310f70378e.roa (raw, json) Hash identifier: 6np4h83LUQSwOYilACxJCJQB2HDgjTUmM1BN6IQfpm8= Subject key identifier: E2:31:0F:B7:E1:86:86:42:DF:99:8B:14:83:6A:E1:63:DC:9B:AB:CD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AD23BBE014C9836053B519380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/429b5faf-4da5-3c05-afe4-fc310f70378e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 212238 IP address blocks: 45.74.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:be:01:4c:98:36:05:3b:51:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=79e178da-14b5-4948-9b39-9d758fd0d813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:b9:e0:30:b7:c3:eb:92:67:dd:17:d8:7a: cc:7d:d4:34:32:11:cb:1e:44:97:2d:87:3b:42:a6: 9e:c6:32:c0:24:41:56:03:0a:4e:e7:e7:52:c1:f1: 71:32:0d:cf:aa:8a:ce:35:f9:50:bf:32:a0:fd:c1: 6f:fa:cf:66:1a:45:21:74:45:de:ac:6f:a0:6b:57: 93:10:f1:7b:95:04:ff:45:0c:76:4f:49:79:db:1d: 52:c6:da:83:31:25:5f:81:6e:67:aa:44:db:a3:23: 81:1e:66:bc:06:e7:1f:65:99:0b:cd:64:94:7f:7d: af:44:65:9c:8a:fa:ab:64:31:71:57:31:6e:a7:2d: 4b:b1:3c:ee:4e:34:65:0e:df:71:5b:f1:b6:b9:5e: 51:d7:bc:f0:d7:db:08:19:2e:53:05:32:77:9b:bf: ec:12:64:34:08:df:29:93:e3:7a:10:1f:5d:3d:20: 16:e9:5d:62:b7:90:12:1a:31:45:cf:6f:83:e9:4f: 32:cd:66:37:7d:75:4f:21:15:48:3a:c1:ab:ea:02: a8:35:ac:c6:18:f0:8b:b4:90:62:03:be:70:40:d9: 09:96:01:9f:d5:9e:ff:28:e5:9c:fa:df:81:d9:86: 8c:58:6f:56:ac:14:d4:cc:d5:db:46:a2:ed:2e:71: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:31:0F:B7:E1:86:86:42:DF:99:8B:14:83:6A:E1:63:DC:9B:AB:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/429b5faf-4da5-3c05-afe4-fc310f70378e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ec:4d:59:a4:fc:74:20:a8:4e:e3:2f:56:65:91:8e:96:48: cf:1e:2a:7f:6f:73:83:de:18:78:43:54:ef:ee:cf:7b:a2:20: ce:71:81:34:d3:78:eb:5e:f8:09:02:c1:84:dc:b5:16:5a:24: 8f:3d:6d:0a:72:e5:03:2b:ed:d4:5b:47:92:f6:03:dc:1e:88: 58:7f:bb:77:7f:4e:c7:ba:c2:f4:de:b6:63:a8:5b:0f:a5:08: c4:dd:75:dc:fe:6b:ba:5f:1f:f2:c0:f9:a1:83:97:45:02:64: e4:94:53:79:94:4e:60:dc:ef:f4:4e:27:dd:dc:b9:4b:8e:3f: 5d:6b:f7:09:7d:54:30:c5:a3:53:28:e1:ea:49:69:2b:99:1d: ae:ac:a3:6c:6a:a6:1c:b8:67:75:82:3f:79:3f:f0:fb:60:08: 42:22:5c:5e:ef:0d:9d:53:3c:ea:76:00:70:16:4a:24:2b:e1: eb:d3:e5:76:58:c8:e3:d3:45:be:ed:22:c1:b4:63:28:ff:e5: 41:df:84:89:fc:2f:1b:18:a2:cf:be:d2:e4:0e:ea:2e:5a:39: f2:cd:d4:83:c7:d1:e2:c5:54:a6:36:3a:f1:86:52:c0:d9:ac: 0c:47:fa:8c:fa:b6:13:b2:4c:bd:56:86:80:0d:19:fa:61:39: 0c:49:a3:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO74BTJg2BTtRk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NzllMTc4ZGEtMTRiNS00OTQ4LTliMzktOWQ3NThmZDBkODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgi54DC3w+uSZ90X2HrMfdQ0MhHLHkSXLYc7 QqaexjLAJEFWAwpO5+dSwfFxMg3PqorONflQvzKg/cFv+s9mGkUhdEXerG+ga1eT EPF7lQT/RQx2T0l52x1SxtqDMSVfgW5nqkTboyOBHma8BucfZZkLzWSUf32vRGWc ivqrZDFxVzFupy1LsTzuTjRlDt9xW/G2uV5R17zw19sIGS5TBTJ3m7/sEmQ0CN8p k+N6EB9dPSAW6V1it5ASGjFFz2+D6U8yzWY3fXVPIRVIOsGr6gKoNazGGPCLtJBi A75wQNkJlgGf1Z7/KOWc+t+B2YaMWG9WrBTUzNXbRqLtLnEpSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIxD7fhhoZC35mLFINq4WPcm6vNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDI5YjVmYWYtNGRhNS0z YzA1LWFmZTQtZmMzMTBmNzAzNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHsTVmk/HQgqE7jL1ZlkY6WSM8eKn9vc4PeGHhDVO/uz3uiIM5xgTTT eOte+AkCwYTctRZaJI89bQpy5QMr7dRbR5L2A9weiFh/u3d/Tse6wvTetmOoWw+l CMTdddz+a7pfH/LA+aGDl0UCZOSUU3mUTmDc7/ROJ93cuUuOP11r9wl9VDDFo1Mo 4epJaSuZHa6so2xqphy4Z3WCP3k/8PtgCEIiXF7vDZ1TPOp2AHAWSiQr4evT5XZY yOPTRb7tIsG0Yyj/5UHfhIn8LxsYos++0uQO6i5aOfLN1IPH0eLFVKY2OvGGUsDZ rAxH+oz6thOyTL1WhoANGfphOQxJo8Q= -----END CERTIFICATE-----Generated at Sat Aug 23 20:59:46 2025 by rpki-client