$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa File: 2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa (raw, json) Hash identifier: ZkGt5m8itP/Q0Ii0kfXy4zvuUmEkVFRoKS8OSy/SYzw= Subject key identifier: 2B:8F:73:2E:DE:48:65:53:BA:8F:7E:B0:BB:D6:10:A7:89:89:E0:3B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D7B6A8CF73D7278AC65643D00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 9009 IP address blocks: 45.74.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8c:f7:3d:72:78:ac:65:64:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=94ba81bf-be22-4f5c-8991-d5680072b671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:07:ba:9e:e8:d8:c1:11:83:82:86:75:e8:7d: 26:0e:ad:db:82:aa:99:80:89:32:7a:0d:08:c7:13: f4:f6:89:df:12:16:04:43:6c:5a:cd:4e:ff:07:f0: 18:73:5b:26:1f:63:d1:91:a3:6a:58:b3:83:1b:76: 05:db:9f:18:bf:da:6d:78:8a:36:d3:5a:2b:6c:08: 64:cc:17:46:53:46:e0:98:78:c6:cb:ae:d5:09:ba: 0f:e6:8e:4c:b5:6c:88:93:0c:40:e3:aa:b1:50:ff: 63:21:bd:3d:32:00:be:6b:a3:44:b9:0b:7e:b9:23: 91:af:44:55:9c:99:21:0a:eb:5f:1b:44:17:b0:d8: 8c:69:1f:03:cc:1f:f6:61:d1:4e:96:05:3e:1e:98: 2d:88:c2:5a:05:38:64:e5:51:b0:24:0f:e0:19:08: 9b:d5:96:fc:eb:a5:15:07:21:6a:a8:5c:ca:1e:75: ed:6c:55:9a:d9:5a:e1:26:e8:9b:e9:ed:19:ee:c4: e1:b8:3e:71:c4:4b:97:6b:07:54:7e:06:60:a5:8a: 94:cd:fa:d9:90:fe:1c:4b:ce:8b:d4:16:de:3b:e7: 67:4c:6c:67:c1:ec:4e:75:a5:30:c8:88:78:84:dd: d0:a0:f5:b3:cb:e5:9a:3b:61:60:27:ac:20:c7:13: 53:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8F:73:2E:DE:48:65:53:BA:8F:7E:B0:BB:D6:10:A7:89:89:E0:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c3122e2-3aa1-371f-a046-467ae3f60b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d0:3e:f5:24:96:75:14:a6:c3:8f:82:06:f7:71:db:ec:82: 50:8a:42:bf:a2:ae:47:63:29:05:64:7b:eb:56:77:a0:db:90: f0:5d:bb:2f:05:62:93:26:6c:cc:75:1b:c8:d3:76:b6:82:8e: 8f:df:0e:aa:74:c9:6f:29:02:16:24:dc:a3:3f:da:4b:f4:68: 83:89:88:a9:95:2d:5e:95:13:d5:f9:28:53:d2:c5:b7:7e:82: 38:ee:06:df:ad:dc:0e:3b:6b:bb:70:6e:55:c9:9d:ee:c4:c9: f8:cb:70:30:e6:9c:fe:96:45:75:f7:2f:be:d7:20:fe:4f:d6: 63:37:6e:36:ac:3d:b6:4d:c1:5b:62:f2:2e:82:02:8a:d9:fa: db:79:07:52:4b:49:39:44:8d:a2:ed:98:c3:05:5f:dc:9d:72: 71:90:65:18:61:78:b0:ff:59:b4:4a:3f:e5:58:47:3e:c6:71: db:6f:85:ec:e4:02:24:ab:ec:31:00:33:4e:7d:6b:b2:dc:f7: b5:cc:44:8a:0b:f8:ba:ae:6b:b0:db:6a:5c:08:73:25:64:4c: f0:72:2d:83:c2:14:f7:fc:bf:b1:e3:b3:e0:28:a4:f4:01:1a: 47:31:c4:57:98:34:07:ce:98:32:48:3c:ca:74:13:77:80:96: 0b:2f:db:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17aoz3PXJ4rGVkPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk OTRiYTgxYmYtYmUyMi00ZjVjLTg5OTEtZDU2ODAwNzJiNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwe6nujYwRGDgoZ16H0mDq3bgqqZgIkyeg0I xxP09onfEhYEQ2xazU7/B/AYc1smH2PRkaNqWLODG3YF258Yv9pteIo201orbAhk zBdGU0bgmHjGy67VCboP5o5MtWyIkwxA46qxUP9jIb09MgC+a6NEuQt+uSORr0RV nJkhCutfG0QXsNiMaR8DzB/2YdFOlgU+HpgtiMJaBThk5VGwJA/gGQib1Zb866UV ByFqqFzKHnXtbFWa2VrhJuib6e0Z7sThuD5xxEuXawdUfgZgpYqUzfrZkP4cS86L 1BbeO+dnTGxnwexOdaUwyIh4hN3QoPWzy+WaO2FgJ6wgxxNTYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuPcy7eSGVTuo9+sLvWEKeJieA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmMzMTIyZTItM2FhMS0z NzFmLWEwNDYtNDY3YWUzZjYwYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPQPvUklnUUpsOPggb3cdvsglCKQr+irkdjKQVke+tWd6DbkPBduy8F YpMmbMx1G8jTdraCjo/fDqp0yW8pAhYk3KM/2kv0aIOJiKmVLV6VE9X5KFPSxbd+ gjjuBt+t3A47a7twblXJne7EyfjLcDDmnP6WRXX3L77XIP5P1mM3bjasPbZNwVti 8i6CAorZ+tt5B1JLSTlEjaLtmMMFX9ydcnGQZRhheLD/WbRKP+VYRz7Gcdtvhezk AiSr7DEAM059a7Lc97XMRIoL+Lqua7DbalwIcyVkTPByLYPCFPf8v7Hjs+AopPQB GkcxxFeYNAfOmDJIPMp0E3eAlgsv28I= -----END CERTIFICATE-----Generated at Fri Apr 17 16:57:02 2026 by rpki-client