$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3336d2a8-4599-34fe-973b-1d98fd17ef2e.roa File: 3336d2a8-4599-34fe-973b-1d98fd17ef2e.roa (raw, json) Hash identifier: klXwGGi5dvRunm8eW83/ogLTCGAqCQyJkxfTy/yzUrE= Subject key identifier: 9D:03:C6:D0:B7:C0:7B:C1:C1:F4:7D:BD:CB:EE:43:DE:F0:8B:EE:68 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BAE86B6356DB65C029D121B20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3336d2a8-4599-34fe-973b-1d98fd17ef2e.roa Signing time: Wed 29 Oct 2025 10:49:47 +0000 ROA not before: Wed 29 Oct 2025 10:49:47 +0000 ROA not after: Tue 27 Jan 2026 11:49:47 +0000 asID: 55154 IP address blocks: 45.74.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:86:b6:35:6d:b6:5c:02:9d:12:1b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 29 10:49:47 2025 GMT Not After : Jan 27 11:49:47 2026 GMT Subject: CN=e3984b79-66db-4154-8420-ed684356352e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:f5:a4:0a:9b:a0:b8:5a:b7:64:7b:39:27: 65:b0:8a:d3:76:48:c9:d2:ef:96:a6:3a:c5:8a:a4: ff:c2:ee:32:6d:78:3e:41:e2:c0:ad:b3:e3:e2:c7: 49:b1:cb:b7:60:a6:62:42:44:ad:12:07:c9:68:da: ca:c9:10:71:71:82:6a:b4:a4:6d:3a:17:e6:d0:c5: fa:5e:87:79:52:5e:a9:22:ff:b2:4e:c5:64:b5:36: 78:30:a5:bc:f3:71:6b:38:b3:5c:33:6d:5d:f5:bf: 64:a9:96:6f:c3:30:d8:96:84:31:ad:87:5e:28:0c: 99:58:62:07:df:80:1a:1c:61:2e:9d:61:ae:f9:09: f6:2b:c3:03:4b:0f:14:96:b5:10:7a:25:3b:9e:9a: fc:3b:bb:69:4e:84:90:61:1a:b9:f0:25:21:20:ff: 84:f2:83:78:83:ad:4c:00:e5:eb:81:c3:87:46:ca: af:01:ed:76:78:73:cc:56:ed:a9:f1:54:52:c8:19: cf:58:06:44:4c:56:6a:bc:26:f9:14:1d:e9:91:99: b5:aa:5d:3b:bb:9c:8b:c4:16:89:fb:4d:fe:02:20: c8:44:05:f7:68:57:10:92:93:18:89:f1:05:95:f1: 3b:68:2d:d8:a3:03:90:d7:c9:7c:65:4b:92:9e:6a: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:03:C6:D0:B7:C0:7B:C1:C1:F4:7D:BD:CB:EE:43:DE:F0:8B:EE:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3336d2a8-4599-34fe-973b-1d98fd17ef2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:00:a1:cf:4a:a4:ec:ad:e8:c0:52:54:d4:9e:55:2d:3c:c4: 6e:24:0b:33:31:7d:a3:2f:33:bb:ed:60:71:cc:f1:82:71:02: ae:31:16:de:4b:b1:d4:f6:09:9a:a9:fb:1b:5e:59:f8:23:9c: f2:8e:41:4f:e3:37:32:70:34:ce:a5:d9:42:2c:95:e4:42:ad: e2:6c:5e:ef:a5:d9:de:7e:9a:8d:36:99:23:fe:1f:e7:2e:f5: a6:0b:56:21:02:7f:61:55:00:dc:10:19:94:c0:38:f5:47:92: 0f:96:86:f0:f0:31:b0:db:2e:0f:3e:1b:dc:27:ed:67:74:5c: e1:6c:4a:e3:78:36:f5:bf:f6:7d:9a:c0:40:ad:80:b5:59:b9: 01:a4:98:e8:3b:ef:99:59:f2:58:42:e2:2e:cb:42:b1:72:45: b3:78:b7:4f:29:73:13:8e:34:b0:21:b6:97:29:8b:80:7b:5b: b7:3b:06:ef:31:cd:78:86:9f:2b:8b:31:76:dd:f5:0f:8b:fd: 5b:c8:09:9a:43:d8:2d:4f:8f:c7:3a:5f:c9:31:ce:34:87:3e: 51:08:57:32:13:f1:10:04:f1:c6:a6:e7:4a:78:eb:e9:25:bf: dd:17:17:5e:46:07:15:e4:9d:04:5c:02:98:bd:bc:f6:d3:bd: 1a:d0:d0:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuuhrY1bbZcAp0SGyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyOTEwNDk0N1oXDTI2MDEyNzExNDk0N1owLzEtMCsGA1UEAxMk ZTM5ODRiNzktNjZkYi00MTU0LTg0MjAtZWQ2ODQzNTYzNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o71pAqboLhat2R7OSdlsIrTdkjJ0u+WpjrF iqT/wu4ybXg+QeLArbPj4sdJscu3YKZiQkStEgfJaNrKyRBxcYJqtKRtOhfm0MX6 Xod5Ul6pIv+yTsVktTZ4MKW883FrOLNcM21d9b9kqZZvwzDYloQxrYdeKAyZWGIH 34AaHGEunWGu+Qn2K8MDSw8UlrUQeiU7npr8O7tpToSQYRq58CUhIP+E8oN4g61M AOXrgcOHRsqvAe12eHPMVu2p8VRSyBnPWAZETFZqvCb5FB3pkZm1ql07u5yLxBaJ +03+AiDIRAX3aFcQkpMYifEFlfE7aC3YowOQ18l8ZUuSnmq+IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0DxtC3wHvBwfR9vcvuQ97wi+5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzMzNmQyYTgtNDU5OS0z NGZlLTk3M2ItMWQ5OGZkMTdlZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUolMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwAoc9KpOyt6MBSVNSeVS08xG4kCzMxfaMvM7vtYHHM8YJxAq4xFt5L sdT2CZqp+xteWfgjnPKOQU/jNzJwNM6l2UIsleRCreJsXu+l2d5+mo02mSP+H+cu 9aYLViECf2FVANwQGZTAOPVHkg+WhvDwMbDbLg8+G9wn7Wd0XOFsSuN4NvW/9n2a wECtgLVZuQGkmOg775lZ8lhC4i7LQrFyRbN4t08pcxOONLAhtpcpi4B7W7c7Bu8x zXiGnyuLMXbd9Q+L/VvICZpD2C1Pj8c6X8kxzjSHPlEIVzIT8RAE8cam50p46+kl v90XF15GBxXknQRcApi9vPbTvRrQ0PE= -----END CERTIFICATE-----Generated at Wed Nov 5 06:03:06 2025 by rpki-client