$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d69cc58f-258c-3dc0-82b8-f8455be00268.roa File: d69cc58f-258c-3dc0-82b8-f8455be00268.roa (raw, json) Hash identifier: DhGI6fCpYQPx7U6rt9BDrsDWLZvvocgj8NEg9/KvJ4A= Subject key identifier: B1:47:05:5D:E5:54:BC:B9:A0:A7:75:67:D8:23:C8:61:CD:4A:78:75 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AE9F66CF5C9D52DC9047E2440 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d69cc58f-258c-3dc0-82b8-f8455be00268.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 45.74.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6c:f5:c9:d5:2d:c9:04:7e:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=20a48d71-c999-443c-a132-9fff7f35c429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:31:66:4a:bd:73:67:e3:19:67:80:39:8e:9f: 20:5c:0f:4b:a2:14:bc:5f:7f:f9:f4:03:4e:0a:0d: de:67:3e:6b:6a:1b:7e:b3:11:a4:f9:fc:9e:c9:b9: c8:2f:47:04:b4:3b:bc:cd:cc:73:dd:6b:76:3b:b9: ad:09:50:8d:f2:87:96:91:60:de:af:6c:7b:55:1c: b9:6c:1d:37:a4:6e:e5:d8:11:30:13:e3:8c:db:34: e2:ed:38:1e:24:cf:5f:ae:54:4c:87:98:79:7e:ad: 68:fb:f3:22:76:7b:f5:30:fd:28:ad:a6:62:9a:10: f3:f0:7a:0b:bf:90:d3:66:26:15:85:59:63:1a:ac: 0b:d3:2a:ad:57:75:e3:1c:01:1e:8e:1b:a7:1f:cf: ef:04:86:10:d1:ca:ca:d2:1a:c7:8d:af:43:2c:25: 69:5e:bb:5f:b5:66:dd:9c:f0:55:5f:a0:31:87:c5: ae:10:55:92:c3:f8:ff:1e:07:31:6c:e6:72:8b:f9: a3:fa:b6:36:5e:9b:39:4b:81:86:89:e3:b7:7a:9e: e8:10:75:95:84:db:22:bd:fb:a6:e8:37:ae:e4:d5: 51:43:08:1b:18:c1:d8:39:c3:42:dc:8e:c5:ea:42: f1:23:2f:ab:12:b7:44:5f:ff:88:b6:35:c8:42:ec: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:47:05:5D:E5:54:BC:B9:A0:A7:75:67:D8:23:C8:61:CD:4A:78:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d69cc58f-258c-3dc0-82b8-f8455be00268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d6:be:90:7d:25:0c:e9:62:a0:a4:a8:fd:b6:f4:7b:76:09: 58:c6:37:57:53:e1:be:43:a4:bd:8f:7a:1c:94:b7:bc:44:b3: 06:8e:58:de:88:ad:83:d6:7d:b6:24:94:47:f5:35:4f:de:88: ae:5c:87:cf:a5:c0:66:b1:d4:b3:d1:c1:95:25:72:4c:ad:50: e1:4e:21:10:e8:ec:99:d3:b1:94:d9:af:44:f1:0a:b7:5d:8f: ce:b1:cc:87:0e:e8:05:f4:18:4e:b8:a0:20:d8:1b:5c:3c:1d: 69:00:dc:cf:69:d7:6f:bc:53:ca:99:ce:36:e4:de:ed:2a:53: 2f:71:6a:13:16:61:f3:6b:39:5a:76:f5:e8:2d:41:6d:8c:03: b5:09:12:c7:0e:50:2c:f0:bd:00:bc:4b:a1:86:75:31:a5:88: e6:c9:0b:2f:84:d5:57:2d:68:f1:f9:f0:26:f4:e0:a2:f4:08: 00:ed:5a:3e:88:ba:fa:b8:8b:49:61:54:a5:d7:be:4d:e8:53: 8d:8f:09:60:84:a7:9e:58:5d:ff:47:02:d0:9b:20:8f:9c:92: 30:38:53:48:63:99:8b:3b:be:da:f9:0c:ec:9d:1b:33:27:25: fd:03:b8:c9:6f:1f:0b:9a:c9:7f:9c:8f:36:90:40:17:d4:57: f9:2f:92:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mz1ydUtyQR+JEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MjBhNDhkNzEtYzk5OS00NDNjLWExMzItOWZmZjdmMzVjNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zFmSr1zZ+MZZ4A5jp8gXA9LohS8X3/59ANO Cg3eZz5raht+sxGk+fyeybnIL0cEtDu8zcxz3Wt2O7mtCVCN8oeWkWDer2x7VRy5 bB03pG7l2BEwE+OM2zTi7TgeJM9frlRMh5h5fq1o+/Midnv1MP0oraZimhDz8HoL v5DTZiYVhVljGqwL0yqtV3XjHAEejhunH8/vBIYQ0crK0hrHja9DLCVpXrtftWbd nPBVX6Axh8WuEFWSw/j/HgcxbOZyi/mj+rY2Xps5S4GGieO3ep7oEHWVhNsivfum 6Deu5NVRQwgbGMHYOcNC3I7F6kLxIy+rErdEX/+ItjXIQuxbQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFHBV3lVLy5oKd1Z9gjyGHNSnh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDY5Y2M1OGYtMjU4Yy0z ZGMwLTgyYjgtZjg0NTViZTAwMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArWvpB9JQzpYqCkqP229Ht2CVjGN1dT4b5DpL2PehyUt7xEswaOWN6I rYPWfbYklEf1NU/eiK5ch8+lwGax1LPRwZUlckytUOFOIRDo7JnTsZTZr0TxCrdd j86xzIcO6AX0GE64oCDYG1w8HWkA3M9p12+8U8qZzjbk3u0qUy9xahMWYfNrOVp2 9egtQW2MA7UJEscOUCzwvQC8S6GGdTGliObJCy+E1VctaPH58Cb04KL0CADtWj6I uvq4i0lhVKXXvk3oU42PCWCEp55YXf9HAtCbII+ckjA4U0hjmYs7vtr5DOydGzMn Jf0DuMlvHwuayX+cjzaQQBfUV/kvkg8= -----END CERTIFICATE-----Generated at Sat Aug 23 06:46:08 2025 by rpki-client