$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9208aae6-7add-30f9-9eb2-ccfe34fb0896.roa File: 9208aae6-7add-30f9-9eb2-ccfe34fb0896.roa (raw, json) Hash identifier: DZnyam244z0E5qf33dB4v9n8c0NQoUNO0zAg9EpF5co= Subject key identifier: AC:32:77:A3:7E:6A:09:9D:60:62:6C:5B:C8:3F:7C:DC:31:53:F7:58 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AB4EB804117EF90FBD7B3B7D0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9208aae6-7add-30f9-9eb2-ccfe34fb0896.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 9009 IP address blocks: 45.74.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:80:41:17:ef:90:fb:d7:b3:b7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=7950b96b-cb14-4148-8746-77c86546b6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:e8:04:ec:c3:44:8c:2a:74:e1:45:09:7f: 5a:98:60:44:46:94:c0:21:87:df:9b:7f:4c:a2:12: 92:03:96:70:39:9c:62:a7:1d:44:aa:04:8c:db:67: a8:c7:97:90:4f:89:b0:1f:e4:6d:92:87:84:1d:35: ca:52:0c:67:b3:15:cf:7f:39:46:30:7a:0e:c0:eb: 37:34:00:bf:53:b4:67:64:ae:c4:04:41:62:45:54: b2:f6:72:77:e0:a3:95:74:df:f4:27:7e:3e:08:7e: 74:20:46:c5:fe:d3:f6:2d:a9:df:23:17:b8:f0:87: 50:af:62:1b:71:5e:e8:69:58:89:6e:04:69:72:f5: 64:3b:fd:71:74:3d:5b:24:d9:92:e0:86:6a:bc:34: bf:7d:7c:65:25:26:23:5f:1e:b2:df:d4:69:be:37: 06:6b:0d:23:37:55:87:2f:1a:d1:78:ad:33:09:cb: 83:19:2b:84:1a:75:87:18:9a:82:96:42:c6:fb:5f: 48:df:78:72:68:e4:60:0a:09:e9:6d:53:22:c3:3b: f9:8c:be:ab:ff:67:c0:1a:e2:32:19:45:05:f4:94: 1e:46:6b:ff:77:a5:97:3c:99:aa:dd:b7:23:57:4f: a5:9e:85:be:5f:cf:01:d9:9b:75:fd:cd:e6:46:81: cc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:32:77:A3:7E:6A:09:9D:60:62:6C:5B:C8:3F:7C:DC:31:53:F7:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9208aae6-7add-30f9-9eb2-ccfe34fb0896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ee:f6:d2:bd:bd:08:8a:29:3d:38:1e:03:01:69:11:a0:d2: 95:9f:56:90:9f:f9:23:a6:5b:9e:26:4e:82:c7:56:82:3c:06: 54:8c:57:27:80:ca:68:ce:6a:03:da:49:9c:72:f7:1c:a4:b1: 09:74:bb:e3:95:3c:27:b8:c7:8a:c7:30:e1:cb:96:42:d3:d6: 8c:2a:0d:1a:56:c2:d1:8e:9c:f9:eb:60:49:8f:8b:d0:e2:bf: c0:88:c7:1e:4a:61:f7:87:ab:cf:0a:f9:76:12:e0:22:0a:1b: 6d:70:2b:2a:a1:1a:3a:41:be:b3:b0:39:c3:be:d6:7d:cd:34: 6d:b9:b5:d1:52:af:95:33:72:a8:10:d8:5a:99:c8:4c:b9:54: 52:ae:ab:4b:4d:58:8a:96:07:2a:93:1e:31:47:07:01:20:ed: eb:a0:65:5b:27:3e:3a:20:5c:b9:0e:d8:ea:d5:cb:72:82:8c: 2b:1e:b2:8c:2a:17:25:6b:64:70:b0:0d:99:16:16:ad:c1:65: 5d:e0:d5:b2:60:81:a9:b5:e5:32:70:97:be:55:b5:77:f4:e6: 59:3b:66:cd:73:e8:87:5a:85:de:a3:66:56:e0:14:14:f6:22: 03:ae:30:f8:e2:9e:20:3c:a9:c2:d0:95:f8:9c:af:1e:60:3e: 0a:9e:89:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq064BBF++Q+9ezt9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk Nzk1MGI5NmItY2IxNC00MTQ4LTg3NDYtNzdjODY1NDZiNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvToBOzDRIwqdOFFCX9amGBERpTAIYffm39M ohKSA5ZwOZxipx1EqgSM22eox5eQT4mwH+RtkoeEHTXKUgxnsxXPfzlGMHoOwOs3 NAC/U7RnZK7EBEFiRVSy9nJ34KOVdN/0J34+CH50IEbF/tP2LanfIxe48IdQr2Ib cV7oaViJbgRpcvVkO/1xdD1bJNmS4IZqvDS/fXxlJSYjXx6y39RpvjcGaw0jN1WH LxrReK0zCcuDGSuEGnWHGJqClkLG+19I33hyaORgCgnpbVMiwzv5jL6r/2fAGuIy GUUF9JQeRmv/d6WXPJmq3bcjV0+lnoW+X88B2Zt1/c3mRoHMSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwyd6N+agmdYGJsW8g/fNwxU/dYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTIwOGFhZTYtN2FkZC0z MGY5LTllYjItY2NmZTM0ZmIwODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3u9tK9vQiKKT04HgMBaRGg0pWfVpCf+SOmW54mToLHVoI8BlSMVyeA ymjOagPaSZxy9xyksQl0u+OVPCe4x4rHMOHLlkLT1owqDRpWwtGOnPnrYEmPi9Di v8CIxx5KYfeHq88K+XYS4CIKG21wKyqhGjpBvrOwOcO+1n3NNG25tdFSr5UzcqgQ 2FqZyEy5VFKuq0tNWIqWByqTHjFHBwEg7eugZVsnPjogXLkO2OrVy3KCjCsesowq FyVrZHCwDZkWFq3BZV3g1bJggam15TJwl75VtXf05lk7Zs1z6Idahd6jZlbgFBT2 IgOuMPjiniA8qcLQlficrx5gPgqeiXg= -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:07 2025 by rpki-client