$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa File: a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa (raw, json) Hash identifier: 2o4cHSwXrMuh8spyu6+8YnhYPzGuVugdTMUOb1esyyw= Subject key identifier: 28:72:3E:E6:CD:D9:53:43:DA:66:84:D2:45:F5:E7:78:BC:69:0C:B4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B87B21F152B6314AF95798F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 45.74.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1f:15:2b:63:14:af:95:79:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=b842e50e-8db0-467e-b22d-dfc6c98c0b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9c:df:9f:0c:b5:c1:14:6a:8b:fb:6b:20:94: 51:70:40:05:58:f0:d3:ea:ff:f4:6b:32:18:64:d2: 7a:b3:a5:d5:db:38:ec:c5:af:27:3d:d9:35:eb:f8: 41:3d:3c:88:76:7b:33:ca:76:bf:07:2a:03:70:3a: 2e:f0:7e:16:3b:0a:be:83:ef:3b:df:a9:49:8f:b5: 09:38:48:a0:71:58:1a:a1:0b:ee:2e:1c:04:2a:89: ee:a5:e9:02:8f:b6:e8:8a:e3:b0:f7:aa:e8:53:4e: 89:9c:e6:94:d0:00:82:8d:3f:b2:c1:4c:87:af:e8: 28:58:60:37:48:85:e0:a8:86:ec:2c:bc:eb:05:6c: 56:b6:b6:30:ab:23:c9:e8:6f:24:bb:e7:df:b9:56: 7a:a0:04:8d:20:d2:95:c8:da:83:da:41:5a:22:18: a3:09:d7:2a:20:6a:5c:9d:0f:20:a6:33:4c:13:89: 65:a0:27:f4:fe:bc:8e:31:43:80:e5:53:59:b9:a2: d2:92:13:ef:2c:65:9d:27:06:e1:b6:b6:70:8f:45: 92:a5:74:08:1d:53:46:e8:df:46:72:aa:9a:6e:14: 64:1d:87:8b:bd:1d:ca:fd:19:f7:9f:ea:ee:b4:61: 7d:cf:6f:ef:5d:05:e6:e9:0d:61:be:d6:dd:c6:63: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:72:3E:E6:CD:D9:53:43:DA:66:84:D2:45:F5:E7:78:BC:69:0C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:95:46:c0:6f:b5:e2:0a:9b:ae:55:5d:c7:ea:5b:7e:54:7f: fa:7e:3c:dc:d5:6a:2a:72:cb:9a:6a:40:25:56:a3:45:32:2d: bd:12:36:cd:60:33:ad:57:23:fa:60:6e:f6:52:07:b5:41:74: fc:bc:87:6a:d8:00:ea:15:c4:b0:2f:14:25:8d:85:69:65:29: 00:1e:24:01:8d:bc:2e:af:e1:69:57:bb:6c:44:9b:d4:8e:ba: a9:2c:b3:c0:8d:03:91:72:09:b4:ae:1b:b6:b6:66:27:7e:d8: ea:45:23:23:d6:38:72:80:87:2a:8a:6c:bb:d8:0c:0d:1c:8d: a5:78:96:1b:ba:43:5b:17:7b:ec:c4:d9:ba:79:76:de:a3:85: ed:4f:6f:83:c1:f0:00:f0:ae:bf:5e:ca:b9:d9:a6:97:6a:b9: e6:4d:7b:ee:7b:9f:95:bb:93:38:54:e3:34:0c:77:ff:45:70: bb:d5:97:55:9f:5c:ec:2f:d7:45:09:5f:e8:ca:b6:7e:81:4b: fa:b6:0a:75:f7:7d:3f:a0:e6:22:30:92:10:10:5f:6d:4c:fc: 69:a9:e3:be:17:91:45:30:b6:89:d8:f5:8c:1b:e9:2d:8d:9f: 32:86:a0:d1:84:5c:0a:a8:8a:51:b3:f4:b5:f6:55:ab:28:71: e4:12:b4:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh8VK2MUr5V5j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk Yjg0MmU1MGUtOGRiMC00NjdlLWIyMmQtZGZjNmM5OGMwYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJzfnwy1wRRqi/trIJRRcEAFWPDT6v/0azIY ZNJ6s6XV2zjsxa8nPdk16/hBPTyIdnszyna/ByoDcDou8H4WOwq+g+8736lJj7UJ OEigcVgaoQvuLhwEKonupekCj7boiuOw96roU06JnOaU0ACCjT+ywUyHr+goWGA3 SIXgqIbsLLzrBWxWtrYwqyPJ6G8ku+ffuVZ6oASNINKVyNqD2kFaIhijCdcqIGpc nQ8gpjNME4lloCf0/ryOMUOA5VNZuaLSkhPvLGWdJwbhtrZwj0WSpXQIHVNG6N9G cqqabhRkHYeLvR3K/Rn3n+rutGF9z2/vXQXm6Q1hvtbdxmOj+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChyPubN2VND2maE0kX153i8aQy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTA5NThkYzQtY2ViYy0z OWFiLWJmMDEtOGMxOGVmYWFkMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyVRsBvteIKm65VXcfqW35Uf/p+PNzVaipyy5pqQCVWo0UyLb0SNs1g M61XI/pgbvZSB7VBdPy8h2rYAOoVxLAvFCWNhWllKQAeJAGNvC6v4WlXu2xEm9SO uqkss8CNA5FyCbSuG7a2Zid+2OpFIyPWOHKAhyqKbLvYDA0cjaV4lhu6Q1sXe+zE 2bp5dt6jhe1Pb4PB8ADwrr9eyrnZppdqueZNe+57n5W7kzhU4zQMd/9FcLvVl1Wf XOwv10UJX+jKtn6BS/q2CnX3fT+g5iIwkhAQX21M/Gmp474XkUUwtonY9Ywb6S2N nzKGoNGEXAqoilGz9LX2VasoceQStAA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:40 2025 by rpki-client