$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa File: a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa (raw, json) Hash identifier: 55D+/yWpTx4GPVmyfayaexntlIzM/jXpsOkysL0r8Rc= Subject key identifier: 04:42:C1:ED:33:83:6A:24:76:09:AA:F2:66:35:5A:5F:6C:55:DF:47 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D47C4E4F3E6A3B5DA8398CB40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 9009 IP address blocks: 45.74.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e4:f3:e6:a3:b5:da:83:98:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=8defeaa5-6f8c-4094-b85e-3ae228f42fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:42:a1:b8:b3:74:1e:ba:34:c3:02:28:41: 5f:fe:44:56:e4:5e:28:64:7b:85:74:99:6e:5d:5d: 36:c6:63:a4:24:47:90:bf:5b:9f:75:d3:93:33:12: 01:bd:49:26:fa:f0:a2:52:fa:22:0b:b4:ea:cb:fc: e3:69:c1:ef:85:d0:8d:a4:f7:6f:1d:72:fc:bc:45: 94:1c:2b:57:9c:49:2d:67:37:b7:4e:c0:9b:2d:1b: 59:13:fa:51:73:8e:f2:00:57:6f:d5:ff:4e:da:bb: 38:25:28:41:34:7f:d0:96:19:44:16:f1:52:f0:c9: 3f:a0:7d:01:f2:2a:53:e6:32:8e:21:ba:c8:96:c2: e7:8c:01:e3:95:f8:d0:c4:b6:40:6d:52:02:fa:8d: ec:b3:36:04:6c:10:7a:4e:d3:87:da:2e:85:36:b5: 87:af:60:e3:dd:b0:d4:bd:d1:a9:db:c3:46:a7:a9: ee:be:d1:e3:1f:e1:b1:17:b9:b5:f4:cd:71:76:7c: 42:3f:86:77:1c:28:4b:67:67:d7:07:cc:87:f3:db: c3:1e:b7:e5:7c:bc:ab:b6:df:c5:ea:d7:9a:1e:90: a1:51:7c:c3:24:01:b0:15:aa:cb:17:c8:68:c7:a1: 92:60:2c:b7:d4:d7:3b:96:d0:d5:2c:34:43:de:1b: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:42:C1:ED:33:83:6A:24:76:09:AA:F2:66:35:5A:5F:6C:55:DF:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0958dc4-cebc-39ab-bf01-8c18efaad21a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ad:cf:e9:8f:8e:63:fd:14:60:b8:e4:9c:f9:c7:ec:9c:59: 74:fb:28:96:8c:33:91:12:87:8f:df:0d:73:1a:f9:be:ed:01: e5:6b:59:51:8c:19:7c:36:bc:93:5d:db:28:57:c9:40:8a:40: a9:4c:7f:e6:97:3a:2b:c2:b5:12:9e:3e:c2:af:f3:94:82:d3: 63:a7:b3:28:4c:e2:d3:a1:16:ef:5f:c1:7d:83:a4:19:67:ec: 78:a7:84:01:b3:18:6a:98:3a:2c:14:e4:11:69:ef:0c:00:75: 51:18:a9:dd:be:21:a6:8c:83:b7:5d:98:59:87:f5:e8:9b:29: ca:c0:21:62:d3:d7:ff:33:57:52:01:00:9e:ce:d7:04:2c:cc: 98:51:f5:5a:f3:5b:b9:eb:72:f0:37:89:61:f9:c6:70:46:4d: 71:6d:bb:4e:53:34:9a:ce:d9:c4:26:1f:f7:8f:5f:db:b8:ce: 64:40:65:12:d2:f6:c0:ac:83:5e:70:52:45:59:08:72:7e:11: 4b:6d:10:7b:36:69:79:4e:18:3b:53:0b:c3:0a:45:24:bb:c2: b6:54:cd:84:28:83:d0:a1:ea:a2:8f:99:7a:50:25:7b:18:f3: 48:ff:f7:d6:47:7a:65:c5:bf:70:a3:c4:70:1e:ce:30:16:09: a3:2f:63:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOTz5qO12oOYy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk OGRlZmVhYTUtNmY4Yy00MDk0LWI4NWUtM2FlMjI4ZjQyZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGxCobizdB66NMMCKEFf/kRW5F4oZHuFdJlu XV02xmOkJEeQv1ufddOTMxIBvUkm+vCiUvoiC7Tqy/zjacHvhdCNpPdvHXL8vEWU HCtXnEktZze3TsCbLRtZE/pRc47yAFdv1f9O2rs4JShBNH/QlhlEFvFS8Mk/oH0B 8ipT5jKOIbrIlsLnjAHjlfjQxLZAbVIC+o3sszYEbBB6TtOH2i6FNrWHr2Dj3bDU vdGp28NGp6nuvtHjH+GxF7m19M1xdnxCP4Z3HChLZ2fXB8yH89vDHrflfLyrtt/F 6teaHpChUXzDJAGwFarLF8hox6GSYCy31Nc7ltDVLDRD3hs91wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARCwe0zg2okdgmq8mY1Wl9sVd9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTA5NThkYzQtY2ViYy0z OWFiLWJmMDEtOGMxOGVmYWFkMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+tz+mPjmP9FGC45Jz5x+ycWXT7KJaMM5ESh4/fDXMa+b7tAeVrWVGM GXw2vJNd2yhXyUCKQKlMf+aXOivCtRKePsKv85SC02OnsyhM4tOhFu9fwX2DpBln 7HinhAGzGGqYOiwU5BFp7wwAdVEYqd2+IaaMg7ddmFmH9eibKcrAIWLT1/8zV1IB AJ7O1wQszJhR9VrzW7nrcvA3iWH5xnBGTXFtu05TNJrO2cQmH/ePX9u4zmRAZRLS 9sCsg15wUkVZCHJ+EUttEHs2aXlOGDtTC8MKRSS7wrZUzYQog9Ch6qKPmXpQJXsY 80j/99ZHemXFv3CjxHAezjAWCaMvY6E= -----END CERTIFICATE-----Generated at Thu Mar 26 13:03:35 2026 by rpki-client