$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01f29e6f-82f9-39ea-8a6a-76231541768b.roa File: 01f29e6f-82f9-39ea-8a6a-76231541768b.roa (raw, json) Hash identifier: uutYfasu9fg80SuYdp5s766WXN0eZ10kDG2kd84vcsY= Subject key identifier: 88:33:A4:51:B8:22:7F:24:14:C7:6F:F8:C2:DF:8C:4E:93:23:D0:8B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CAB8C4FDC159F6ED862DE6780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01f29e6f-82f9-39ea-8a6a-76231541768b.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 9009 IP address blocks: 45.74.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:4f:dc:15:9f:6e:d8:62:de:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=85a3433a-1e4b-448e-afd6-12163644e7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:d8:bf:ab:9a:57:f1:f3:ea:17:a2:f2:94: e1:66:2b:c3:dc:19:25:1e:4a:5c:12:c6:fe:67:21: 0f:d8:1e:bd:fc:0c:4c:dc:13:e4:b6:c2:9e:f5:ac: d3:e1:ea:e2:c2:b0:f6:83:81:6d:20:0a:d3:b4:e7: 7c:86:c4:01:c4:98:7f:fa:57:0c:8f:c4:27:d1:de: 0b:57:29:e3:38:ab:df:58:b5:f6:0c:54:53:6a:51: 7e:ff:54:0c:41:4a:4b:3a:6a:3a:56:1c:f4:55:7d: cf:20:ba:0b:46:76:40:17:89:69:de:f3:89:c1:06: 77:ab:17:9d:b5:03:0e:53:ce:97:89:5e:7e:c8:ed: 5f:2c:b7:1e:2d:64:4f:d1:1b:03:b6:8e:df:a9:2e: aa:fb:1b:5c:68:61:f8:c4:60:ba:67:40:8a:49:e6: a9:a1:2f:8c:6b:a8:61:b4:5f:1a:dd:68:5b:b5:47: 4f:93:61:e7:06:dd:21:9c:7c:54:cf:d9:d3:86:5a: f7:d8:81:70:82:eb:8e:9e:d8:d5:2f:81:76:36:22: bf:d1:ac:7d:20:18:51:19:eb:82:fe:37:72:33:c3: 2a:cd:c9:4c:0a:85:8d:3d:54:4a:39:cd:68:8d:d6: 55:7e:7b:bb:c5:93:d7:1f:2f:28:04:45:b0:cb:81: 3d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:33:A4:51:B8:22:7F:24:14:C7:6F:F8:C2:DF:8C:4E:93:23:D0:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/01f29e6f-82f9-39ea-8a6a-76231541768b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:4c:24:63:dd:1a:29:44:e3:fe:b7:a5:c5:25:69:58:99:66: 23:6e:0c:f3:54:eb:7f:5b:2d:bf:de:ff:40:08:d4:51:29:14: ef:3a:1d:6a:48:d4:78:14:a8:10:99:cd:46:05:63:82:b1:9a: 18:82:16:3d:9e:d6:a0:1e:5d:68:5d:fb:90:b1:9e:4c:eb:5d: 16:55:fd:7c:ab:65:c9:0e:76:f8:d1:08:f0:ec:34:cf:6f:23: a6:d5:ff:c4:10:49:17:45:ed:8d:d3:ad:73:d4:c8:44:57:2c: 58:c0:74:a1:d8:59:8b:e2:24:0d:ab:4f:28:12:e4:70:f5:9c: 43:03:e6:ef:94:b5:bd:19:26:08:e4:95:8f:33:c6:1c:ca:0c: 9a:f7:f5:aa:e3:92:d5:75:f6:d9:c2:54:bc:2d:67:73:23:6c: ca:a3:96:14:e6:46:6b:9b:fe:c4:e0:63:f5:6d:ca:e3:d0:eb: 34:62:14:d6:22:a2:44:30:f4:0a:de:fe:87:bd:41:87:a6:9a: fc:5d:97:33:c7:86:18:62:11:4b:f3:1f:9d:4b:37:1c:2c:61: 85:d8:2c:e8:14:46:b7:cb:38:c5:ee:8f:a1:50:e4:6a:4f:52: b0:b6:bf:87:01:98:c4:2e:3f:5b:8f:77:b6:83:c9:b1:36:36: 11:69:b5:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjE/cFZ9u2GLeZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk ODVhMzQzM2EtMWU0Yi00NDhlLWFmZDYtMTIxNjM2NDRlN2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfnYv6uaV/Hz6hei8pThZivD3BklHkpcEsb+ ZyEP2B69/AxM3BPktsKe9azT4eriwrD2g4FtIArTtOd8hsQBxJh/+lcMj8Qn0d4L VynjOKvfWLX2DFRTalF+/1QMQUpLOmo6Vhz0VX3PILoLRnZAF4lp3vOJwQZ3qxed tQMOU86XiV5+yO1fLLceLWRP0RsDto7fqS6q+xtcaGH4xGC6Z0CKSeapoS+Ma6hh tF8a3WhbtUdPk2HnBt0hnHxUz9nThlr32IFwguuOntjVL4F2NiK/0ax9IBhRGeuC /jdyM8MqzclMCoWNPVRKOc1ojdZVfnu7xZPXHy8oBEWwy4E9MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgzpFG4In8kFMdv+MLfjE6TI9CLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDFmMjllNmYtODJmOS0z OWVhLThhNmEtNzYyMzE1NDE3NjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUozMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBMJGPdGilE4/63pcUlaViZZiNuDPNU639bLb/e/0AI1FEpFO86HWpI 1HgUqBCZzUYFY4KxmhiCFj2e1qAeXWhd+5CxnkzrXRZV/XyrZckOdvjRCPDsNM9v I6bV/8QQSRdF7Y3TrXPUyERXLFjAdKHYWYviJA2rTygS5HD1nEMD5u+Utb0ZJgjk lY8zxhzKDJr39arjktV19tnCVLwtZ3MjbMqjlhTmRmub/sTgY/VtyuPQ6zRiFNYi okQw9Are/oe9QYemmvxdlzPHhhhiEUvzH51LNxwsYYXYLOgURrfLOMXuj6FQ5GpP UrC2v4cBmMQuP1uPd7aDybE2NhFptXk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:51:52 2026 by rpki-client