$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c458a013-6ebe-3f21-b760-c004edff3696.roa File: c458a013-6ebe-3f21-b760-c004edff3696.roa (raw, json) Hash identifier: TIFizasB4hxqSSULRvyHb8id5EXBPcCpnzS+khmkutI= Subject key identifier: 2A:7A:7B:63:19:F8:3E:9A:E0:10:FB:85:80:EE:9A:86:98:BA:C4:34 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AE9F66CC4F881C47F9E55954F Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c458a013-6ebe-3f21-b760-c004edff3696.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 45.74.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6c:c4:f8:81:c4:7f:9e:55:95:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=67b3a6a7-2694-4e7b-81c9-f876a7bb10fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:36:ef:ab:d1:81:dc:c8:8c:42:ec:ef:8b: 87:fe:f5:ea:5a:fc:72:90:b6:7b:e4:5d:b1:2f:7b: 77:de:3a:ec:ca:bc:6a:1d:a3:6e:fc:0f:d8:93:5a: ca:90:bb:69:46:85:a7:51:6b:aa:48:97:e1:e0:0b: d2:2a:f9:0f:6f:26:2e:91:72:0c:bc:e6:0f:ff:70: 76:1f:c1:a5:38:ad:ca:ae:ad:fd:85:07:fc:9e:6d: 1a:1d:ea:17:2a:19:bd:b1:d8:3b:4d:4b:72:00:92: 76:71:10:55:a4:8d:ea:47:8e:e6:4f:5e:48:d3:98: ff:6b:2b:ec:cb:1b:dc:1e:83:50:7f:b6:cf:f8:8a: 21:91:db:8f:f8:f3:4a:5a:c2:f1:e7:e7:09:28:f4: bd:98:b8:0b:d9:ef:d4:9e:1a:64:49:6b:05:1c:da: d5:68:1e:27:0c:3d:d4:da:1e:d8:7f:95:11:aa:48: 5c:0e:3b:21:71:ac:1d:a9:61:23:c2:fd:fd:8a:68: 8b:de:3a:d0:df:93:c0:bb:f1:8f:ad:6d:8e:89:ec: c0:8b:ae:5f:ea:27:2a:22:dc:2b:68:05:d3:56:63: ab:c2:0a:ff:38:d6:0f:94:b6:3d:db:6a:f8:50:df: 66:f3:32:46:81:a0:5f:65:5d:5b:2d:69:e0:e0:a9: af:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7A:7B:63:19:F8:3E:9A:E0:10:FB:85:80:EE:9A:86:98:BA:C4:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c458a013-6ebe-3f21-b760-c004edff3696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:48:68:f0:41:1c:c4:93:a1:0a:df:33:2e:e7:f3:3e:ad:71: 42:03:ac:6a:c3:6a:6b:a6:ba:87:67:28:c2:d5:9e:e0:3e:d8: 4c:45:f8:91:c0:dc:11:3c:7d:0c:90:63:89:4a:26:0a:3b:fc: 06:27:6b:92:8b:f8:21:2c:f3:0e:2f:d3:49:0f:1d:c0:3c:65: bf:bc:70:aa:fa:d3:3b:44:e9:30:2c:ce:17:bd:d3:91:06:b1: c5:b6:40:27:4c:0c:18:4d:dc:69:70:1b:de:20:90:85:fd:b5: 9b:88:19:80:d7:13:07:3a:8d:20:6b:19:d5:68:6e:40:97:8d: ac:2d:b6:cc:50:8c:f8:bc:f1:c8:ba:25:a8:0b:9f:ac:75:0b: b6:94:13:73:4b:7e:6c:48:6e:98:17:a8:f4:38:29:e7:de:67: c2:50:d4:80:61:1b:1d:b9:e5:77:ab:ec:b1:f3:25:a4:1f:69: 44:09:97:0a:99:8f:dc:41:7a:8a:bd:6a:94:41:a4:89:28:3b: 93:71:94:99:67:9d:bb:25:8a:2d:dc:44:ea:88:93:1d:3b:d4: 6a:4c:25:ef:ff:34:d5:eb:e8:11:14:da:dd:81:2d:89:f6:18: 18:76:b4:64:de:0e:40:08:f3:f6:24:59:a2:c2:2c:7a:85:7f: 46:5b:21:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mzE+IHEf55VlU8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NjdiM2E2YTctMjY5NC00ZTdiLTgxYzktZjg3NmE3YmIxMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEU276vRgdzIjELs74uH/vXqWvxykLZ75F2x L3t33jrsyrxqHaNu/A/Yk1rKkLtpRoWnUWuqSJfh4AvSKvkPbyYukXIMvOYP/3B2 H8GlOK3Krq39hQf8nm0aHeoXKhm9sdg7TUtyAJJ2cRBVpI3qR47mT15I05j/ayvs yxvcHoNQf7bP+IohkduP+PNKWsLx5+cJKPS9mLgL2e/UnhpkSWsFHNrVaB4nDD3U 2h7Yf5URqkhcDjshcawdqWEjwv39imiL3jrQ35PAu/GPrW2OiezAi65f6icqItwr aAXTVmOrwgr/ONYPlLY922r4UN9m8zJGgaBfZV1bLWng4KmvrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp6e2MZ+D6a4BD7hYDumoaYusQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzQ1OGEwMTMtNmViZS0z ZjIxLWI3NjAtYzAwNGVkZmYzNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBIaPBBHMSToQrfMy7n8z6tcUIDrGrDamumuodnKMLVnuA+2ExF+JHA 3BE8fQyQY4lKJgo7/AYna5KL+CEs8w4v00kPHcA8Zb+8cKr60ztE6TAszhe905EG scW2QCdMDBhN3GlwG94gkIX9tZuIGYDXEwc6jSBrGdVobkCXjawttsxQjPi88ci6 JagLn6x1C7aUE3NLfmxIbpgXqPQ4KefeZ8JQ1IBhGx255Xer7LHzJaQfaUQJlwqZ j9xBeoq9apRBpIkoO5NxlJlnnbslii3cROqIkx071GpMJe//NNXr6BEU2t2BLYn2 GBh2tGTeDkAI8/YkWaLCLHqFf0ZbIZU= -----END CERTIFICATE-----Generated at Sat Aug 23 08:31:07 2025 by rpki-client