$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/30a47960-67cf-3dd3-9aa4-df3d46c7feb6.roa File: 30a47960-67cf-3dd3-9aa4-df3d46c7feb6.roa (raw, json) Hash identifier: hBBDA9fL4pbWmp0auEqLWdd4wY1crEcUqnMDDTWgVaY= Subject key identifier: DF:69:42:80:AA:8E:7A:D4:85:A3:68:9A:3F:95:55:33:47:B6:D0:46 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BBCB89AF5C65B80886A744880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/30a47960-67cf-3dd3-9aa4-df3d46c7feb6.roa Signing time: Mon 03 Nov 2025 12:51:38 +0000 ROA not before: Mon 03 Nov 2025 12:51:38 +0000 ROA not after: Sun 01 Feb 2026 12:51:38 +0000 asID: 208185 IP address blocks: 45.74.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:b8:9a:f5:c6:5b:80:88:6a:74:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 3 12:51:38 2025 GMT Not After : Feb 1 12:51:38 2026 GMT Subject: CN=7a5a9534-a3a8-44e6-9db1-169e130ec49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:78:07:fd:7f:c4:46:51:bc:c9:58:5b:e9:3c: cd:39:d3:b4:71:23:95:45:f8:5a:f1:45:d7:cb:65: 3a:b4:59:80:1e:ee:4e:88:19:fa:b4:c2:fb:37:cf: 36:46:c4:5e:01:f4:f5:ce:41:b8:2c:c9:f6:15:d0: 7f:eb:76:51:de:80:d7:fa:d5:ea:d1:87:a5:49:32: 74:31:cd:d8:ce:1c:9c:91:10:da:78:87:e3:77:a6: a2:c1:39:d0:ec:f6:95:74:eb:99:62:62:c4:f4:e4: 32:53:de:9a:82:72:66:c6:c9:ca:fe:2c:38:d7:64: ca:aa:73:e2:a1:18:a4:74:41:0f:e4:6a:da:df:9e: fe:c4:39:1c:93:1b:97:ff:69:ef:72:3a:7a:9a:33: c0:1d:9d:a7:81:0b:bb:20:71:ce:22:57:93:d2:80: 46:91:62:9d:87:8c:44:65:46:99:70:89:ff:27:16: 01:cc:5e:7e:92:9d:cd:34:e1:41:b6:35:69:86:38: a6:3e:09:e3:5f:bc:15:71:bc:5d:08:02:85:c7:da: dc:a8:75:96:2d:08:f8:4e:c0:e9:0e:d3:c0:a3:17: c5:29:8c:9f:ed:78:88:d1:9b:ad:0b:92:bd:b5:7a: 33:60:94:b5:1a:39:b8:06:e6:80:00:af:1b:23:92: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:69:42:80:AA:8E:7A:D4:85:A3:68:9A:3F:95:55:33:47:B6:D0:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/30a47960-67cf-3dd3-9aa4-df3d46c7feb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:02:30:73:c3:b8:fc:29:99:4a:13:f5:ba:8c:1f:f3:f7:4d: 86:0e:a5:ec:0f:6f:19:38:70:99:1f:3c:40:9c:a9:77:be:88: 1d:0e:6e:52:24:cc:99:f1:8e:de:08:96:ac:81:b9:6d:4f:e2: b5:6a:3a:1c:41:c7:5a:9c:65:43:de:2f:d2:2f:b6:d9:d2:87: b5:02:34:0c:85:7e:d7:df:59:35:f1:b4:c8:91:fb:89:a7:56: 13:99:92:04:9a:5c:02:e7:61:a1:f4:3a:e2:65:b6:89:68:6e: 33:57:e6:25:e0:a2:40:12:84:e6:6e:93:51:d6:03:0e:28:df: ab:e9:19:83:da:36:f4:f9:d4:e4:6f:2e:d0:b1:71:66:79:82: 9e:b9:bb:12:6c:94:2a:1e:5e:e6:e4:c8:63:bf:7c:16:2a:1f: e9:55:b7:88:23:05:fc:bc:dd:47:e6:cf:cc:de:d7:4e:18:e1: af:ed:29:69:4f:96:0e:55:7a:17:5f:80:16:c6:ed:ed:6c:be: 6b:1f:9a:1f:86:00:53:33:d1:41:cc:e7:6c:f2:0a:27:44:39: 82:4e:a7:48:d0:a7:86:9c:ab:bd:60:88:75:88:09:ea:d1:00: 3d:0e:df:0d:f7:53:a1:25:b6:60:8a:b1:93:4e:09:7c:e4:fb: fa:a2:c8:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu8uJr1xluAiGp0SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTEwMzEyNTEzOFoXDTI2MDIwMTEyNTEzOFowLzEtMCsGA1UEAxMk N2E1YTk1MzQtYTNhOC00NGU2LTlkYjEtMTY5ZTEzMGVjNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHgH/X/ERlG8yVhb6TzNOdO0cSOVRfha8UXX y2U6tFmAHu5OiBn6tML7N882RsReAfT1zkG4LMn2FdB/63ZR3oDX+tXq0YelSTJ0 Mc3YzhyckRDaeIfjd6aiwTnQ7PaVdOuZYmLE9OQyU96agnJmxsnK/iw412TKqnPi oRikdEEP5Gra357+xDkckxuX/2nvcjp6mjPAHZ2ngQu7IHHOIleT0oBGkWKdh4xE ZUaZcIn/JxYBzF5+kp3NNOFBtjVphjimPgnjX7wVcbxdCAKFx9rcqHWWLQj4TsDp DtPAoxfFKYyf7XiI0ZutC5K9tXozYJS1Gjm4BuaAAK8bI5Kl4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9pQoCqjnrUhaNomj+VVTNHttBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzBhNDc5NjAtNjdjZi0z ZGQzLTlhYTQtZGYzZDQ2YzdmZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8CMHPDuPwpmUoT9bqMH/P3TYYOpewPbxk4cJkfPECcqXe+iB0OblIk zJnxjt4IlqyBuW1P4rVqOhxBx1qcZUPeL9IvttnSh7UCNAyFftffWTXxtMiR+4mn VhOZkgSaXALnYaH0OuJltolobjNX5iXgokAShOZuk1HWAw4o36vpGYPaNvT51ORv LtCxcWZ5gp65uxJslCoeXubkyGO/fBYqH+lVt4gjBfy83Ufmz8ze104Y4a/tKWlP lg5VehdfgBbG7e1svmsfmh+GAFMz0UHM52zyCidEOYJOp0jQp4acq71giHWICerR AD0O3w33U6EltmCKsZNOCXzk+/qiyKs= -----END CERTIFICATE-----Generated at Wed Nov 5 11:42:02 2025 by rpki-client