$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e2967c2e-2806-30f4-a0d3-1c441f02033d.roa File: e2967c2e-2806-30f4-a0d3-1c441f02033d.roa (raw, json) Hash identifier: 7k9KG1e7uFAaHasdCLCW+vv6KTpU03wM63dEzhWYBYE= Subject key identifier: A8:59:40:C5:22:4E:02:D4:5B:74:CD:6E:6C:E0:9B:F9:D9:7A:63:7C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF0F14711716B9B617EC21980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e2967c2e-2806-30f4-a0d3-1c441f02033d.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 45.74.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:47:11:71:6b:9b:61:7e:c2:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=1ad96f29-8d02-4c21-9cb4-bf053a0d3881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:8a:e5:ee:12:4c:48:fb:bb:d4:ea:72:e7: 40:27:68:22:03:49:2d:97:4d:9d:20:a2:07:25:ce: ba:7d:a5:0d:d0:a0:65:8e:37:93:36:94:2c:27:6f: 04:a8:2f:ab:29:82:91:83:e6:8d:c3:65:f2:91:76: fe:98:7d:33:16:1d:f9:31:9d:ef:1f:fd:d8:f8:12: ec:c1:ad:e3:b9:72:b9:db:19:cc:58:c5:81:44:cb: 11:4d:c3:b1:d0:f2:c1:8a:ed:70:15:a5:d7:76:a7: 0a:59:48:95:63:cb:fa:7d:95:a4:c5:bb:ef:f1:38: a6:ce:0c:46:9c:e6:40:b0:21:59:09:71:19:56:17: 4a:ab:30:5d:70:22:45:e7:4f:09:45:2c:24:7d:30: 39:e8:10:74:9f:02:db:93:23:fa:b6:b4:be:84:96: 47:a4:a4:7f:96:29:6f:b3:e4:30:ff:71:88:58:0c: 20:25:0e:03:22:56:db:68:6b:5b:53:22:f7:61:52: 6e:fc:c6:7f:36:53:58:7c:e9:8a:0c:2e:f0:98:51: e6:6a:ab:92:29:eb:a0:1a:59:f0:4c:09:60:f2:62: c6:c5:ee:5d:d5:7a:9a:26:0a:f8:b1:0a:f5:a7:1d: 1d:98:02:92:12:3b:f2:0c:04:54:ca:1b:81:bd:c7: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:59:40:C5:22:4E:02:D4:5B:74:CD:6E:6C:E0:9B:F9:D9:7A:63:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e2967c2e-2806-30f4-a0d3-1c441f02033d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:6f:75:76:81:dc:dc:da:18:7b:53:7b:cd:99:61:80:26:eb: 82:f5:ca:f4:43:cc:d5:c1:79:65:c7:5e:f8:3e:cb:ef:23:4c: 85:5c:e6:51:2d:f1:4c:58:64:8c:0b:20:45:16:ce:cf:ee:16: 84:a6:5f:34:e9:02:e3:23:1d:64:58:33:a3:13:cd:12:d0:47: db:be:85:53:7f:52:1e:3c:9b:69:c8:6f:81:94:d7:b7:f8:e4: dc:0d:8a:9e:a3:1b:97:9f:c9:20:61:b0:83:0f:06:90:55:96: 8c:cb:5b:07:ec:8d:d5:96:f8:ad:1e:f2:53:95:01:01:b7:ea: 90:1b:3e:05:d5:07:c7:4e:98:7e:16:af:e8:de:e0:1d:9b:dd: 0e:f1:86:9c:5b:6c:a5:aa:75:29:46:15:76:c4:6b:d7:5a:93: ec:82:65:76:9b:5c:2e:98:72:5f:0f:43:ac:f3:b9:b8:53:c9: 28:34:dc:74:bf:ff:0f:b1:00:5e:1c:d7:f6:3f:c6:6c:68:b1: d7:cb:a9:76:90:9a:42:54:10:71:9d:63:e4:b7:1c:71:98:94: e3:56:e1:f3:c6:27:3c:3c:73:88:c4:77:b1:5d:3c:24:23:07: da:e3:eb:10:47:a3:cb:c9:1d:05:81:ad:b6:1f:0e:0f:37:0a: 2e:03:33:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UcRcWubYX7CGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MWFkOTZmMjktOGQwMi00YzIxLTljYjQtYmYwNTNhMGQzODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMOK5e4STEj7u9TqcudAJ2giA0ktl02dIKIH Jc66faUN0KBljjeTNpQsJ28EqC+rKYKRg+aNw2XykXb+mH0zFh35MZ3vH/3Y+BLs wa3juXK52xnMWMWBRMsRTcOx0PLBiu1wFaXXdqcKWUiVY8v6fZWkxbvv8TimzgxG nOZAsCFZCXEZVhdKqzBdcCJF508JRSwkfTA56BB0nwLbkyP6trS+hJZHpKR/lilv s+Qw/3GIWAwgJQ4DIlbbaGtbUyL3YVJu/MZ/NlNYfOmKDC7wmFHmaquSKeugGlnw TAlg8mLGxe5d1XqaJgr4sQr1px0dmAKSEjvyDARUyhuBvcf8NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhZQMUiTgLUW3TNbmzgm/nZemN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTI5NjdjMmUtMjgwNi0z MGY0LWEwZDMtMWM0NDFmMDIwMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdvdXaB3NzaGHtTe82ZYYAm64L1yvRDzNXBeWXHXvg+y+8jTIVc5lEt 8UxYZIwLIEUWzs/uFoSmXzTpAuMjHWRYM6MTzRLQR9u+hVN/Uh48m2nIb4GU17f4 5NwNip6jG5efySBhsIMPBpBVlozLWwfsjdWW+K0e8lOVAQG36pAbPgXVB8dOmH4W r+je4B2b3Q7xhpxbbKWqdSlGFXbEa9dak+yCZXabXC6Ycl8PQ6zzubhTySg03HS/ /w+xAF4c1/Y/xmxosdfLqXaQmkJUEHGdY+S3HHGYlONW4fPGJzw8c4jEd7FdPCQj B9rj6xBHo8vJHQWBrbYfDg83Ci4DMwI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:52 2025 by rpki-client