$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66a5ab90-bd16-3f2c-a011-6dad3e9e70be.roa File: 66a5ab90-bd16-3f2c-a011-6dad3e9e70be.roa (raw, json) Hash identifier: DW8KuIBQVC/aeXvt9ByKhaMoEedXjZF5J0ewsoFoxzE= Subject key identifier: F4:72:56:1C:AB:C4:32:C6:39:28:18:01:2A:ED:C2:DB:A1:E6:EB:F7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AC2E0FE7CA358ED5895CFFF20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66a5ab90-bd16-3f2c-a011-6dad3e9e70be.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 3223 IP address blocks: 45.74.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:fe:7c:a3:58:ed:58:95:cf:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=eda62505-0fc0-45b1-87c8-bc530d81dabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:47:fb:3d:6d:92:b2:af:78:d0:d0:59:af: dd:66:33:ae:22:26:df:8d:82:b1:a9:7f:99:a6:06: b1:d7:ca:39:e4:0d:88:ae:d0:28:aa:b1:62:82:5d: 8e:b7:f6:a8:b0:ac:03:4e:9d:b1:36:da:c1:55:b7: 27:b4:01:7b:94:19:e1:12:c0:11:99:54:0e:35:05: db:97:5b:8e:69:82:4c:13:10:58:0d:6d:a2:c1:ec: d0:97:ce:0b:78:af:d1:f5:45:ac:7b:86:bc:97:4e: e8:f5:84:48:a7:9f:7b:48:75:09:d5:29:60:1b:e6: 70:b4:09:9b:b6:25:42:5b:f1:9c:ac:79:a8:a8:6c: b9:a3:3f:46:1d:63:0b:f4:9c:c8:e9:2e:6c:b5:54: 50:17:40:08:36:31:2c:e4:52:f5:fc:62:51:a9:ec: 07:b6:54:02:c6:36:f6:65:0b:c3:64:6b:38:eb:5c: 12:b2:00:3c:8e:f7:1f:4f:23:0a:b8:c9:c6:80:c8: dd:6e:a7:93:61:70:a3:61:b4:8f:02:6f:43:41:03: 29:99:9a:65:37:40:05:c1:63:b9:3f:91:e8:5e:9d: c0:91:71:e5:5c:0a:19:98:78:c1:b1:7d:c8:dc:d8: fe:04:1b:d5:89:2a:85:e8:b8:f5:6b:d3:6c:54:a0: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:56:1C:AB:C4:32:C6:39:28:18:01:2A:ED:C2:DB:A1:E6:EB:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66a5ab90-bd16-3f2c-a011-6dad3e9e70be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:5d:3b:ee:09:6b:ab:14:20:82:4c:57:e1:d5:40:ce:b1:1c: 50:40:70:56:85:a8:ea:27:d5:bc:04:2d:9e:fe:1f:7a:8e:59: 7a:e7:f8:fb:13:e5:ae:1c:07:75:8d:62:ab:10:26:80:f4:d6: 4a:30:bb:01:51:12:26:77:22:b0:e5:b5:04:b0:12:01:fe:d1: b1:d5:4a:8e:5f:f1:df:f4:3a:4a:c2:af:e1:63:38:d3:98:4f: 1f:0b:72:22:04:4a:01:d6:fc:ca:31:e0:20:2c:f4:89:e4:c2: 56:6f:47:59:0a:ea:b4:6f:d1:cd:77:75:96:75:e9:1a:ef:42: 07:53:72:a4:7f:62:d7:55:92:c2:3c:aa:db:0a:8c:22:2d:06: da:3b:28:5c:75:d7:11:ae:53:87:70:55:ea:4a:a8:14:e6:60: aa:5b:d9:f5:be:19:0c:36:25:a1:10:72:ee:b6:6f:7e:20:95: 70:5a:b3:d9:1b:3a:10:91:62:d1:87:13:ca:89:5f:1f:6d:11: 61:3f:f5:ff:5d:ca:ff:03:77:0d:c4:29:74:51:40:54:04:bf: 82:78:a3:e1:61:73:b3:78:49:fc:0f:9c:1c:58:79:de:16:7b: 38:d0:46:c3:71:d1:29:0f:32:24:06:30:c1:cd:91:91:5d:41: e3:70:2e:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4P58o1jtWJXP/yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZWRhNjI1MDUtMGZjMC00NWIxLTg3YzgtYmM1MzBkODFkYWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/xH+z1tkrKveNDQWa/dZjOuIibfjYKxqX+Z pgax18o55A2IrtAoqrFigl2Ot/aosKwDTp2xNtrBVbcntAF7lBnhEsARmVQONQXb l1uOaYJMExBYDW2iwezQl84LeK/R9UWse4a8l07o9YRIp597SHUJ1SlgG+ZwtAmb tiVCW/GcrHmoqGy5oz9GHWML9JzI6S5stVRQF0AINjEs5FL1/GJRqewHtlQCxjb2 ZQvDZGs461wSsgA8jvcfTyMKuMnGgMjdbqeTYXCjYbSPAm9DQQMpmZplN0AFwWO5 P5HoXp3AkXHlXAoZmHjBsX3I3Nj+BBvViSqF6Lj1a9NsVKAqSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRyVhyrxDLGOSgYASrtwtuh5uv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjZhNWFiOTAtYmQxNi0z ZjJjLWEwMTEtNmRhZDNlOWU3MGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINdO+4Ja6sUIIJMV+HVQM6xHFBAcFaFqOon1bwELZ7+H3qOWXrn+PsT 5a4cB3WNYqsQJoD01kowuwFREiZ3IrDltQSwEgH+0bHVSo5f8d/0OkrCr+FjONOY Tx8LciIESgHW/Mox4CAs9InkwlZvR1kK6rRv0c13dZZ16RrvQgdTcqR/YtdVksI8 qtsKjCItBto7KFx11xGuU4dwVepKqBTmYKpb2fW+GQw2JaEQcu62b34glXBas9kb OhCRYtGHE8qJXx9tEWE/9f9dyv8Ddw3EKXRRQFQEv4J4o+Fhc7N4SfwPnBxYed4W ezjQRsNx0SkPMiQGMMHNkZFdQeNwLmg= -----END CERTIFICATE-----Generated at Wed Aug 6 12:44:27 2025 by rpki-client