$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bbb72d61-8d65-3789-8e8e-07d03c1c5843.roa File: bbb72d61-8d65-3789-8e8e-07d03c1c5843.roa (raw, json) Hash identifier: ejEwGKRaV+g1W/CBEJNcQFHXSpp3Wm+T98K0Dq4I2aI= Subject key identifier: 6B:02:23:4C:74:4D:9D:1B:6C:F0:3A:AA:5F:D5:E6:18:09:99:38:DF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F14679FFE04C8BB007CF69DE0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bbb72d61-8d65-3789-8e8e-07d03c1c5843.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 9009 IP address blocks: 45.74.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9f:fe:04:c8:bb:00:7c:f6:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=e67c2da7-d5fe-4ed7-99e1-2fff5dbb1035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:02:4d:e7:d3:5e:0a:d8:91:d1:74:01:2c:9d: cd:45:51:d3:c3:3c:17:29:4f:22:c2:7a:12:9d:ff: 3c:a1:7a:d0:58:41:91:5a:e3:7e:b5:c2:11:4b:4b: 9a:ef:5f:49:bb:ea:c1:a9:d7:0f:6a:33:5a:63:a0: 3b:15:88:5b:22:aa:c9:7f:f3:ac:14:58:83:46:63: 19:a2:87:9e:dd:2e:4c:53:f9:6f:61:81:7e:22:89: f4:73:6f:1a:f7:66:d0:4c:39:13:44:1d:10:ce:da: ed:63:c4:24:21:78:7a:28:7c:d6:87:bb:bc:0b:da: 7f:1d:96:92:31:b8:94:11:58:95:e4:de:bd:db:5f: dd:53:fd:50:71:a0:c1:15:2f:6b:57:44:47:aa:13: 6d:6f:c0:68:7a:78:20:45:af:00:77:f1:80:1a:a9: 03:13:c9:49:7d:07:47:dd:f8:b1:92:5b:1a:8b:14: 05:31:83:67:34:8d:8b:52:13:83:e0:d1:46:0e:4c: e1:36:f1:d5:e9:2b:a3:fc:a7:ca:c2:e8:fe:fd:98: 9c:14:9e:69:e8:45:e8:d9:87:26:fe:f6:f3:21:55: ff:88:75:a6:b0:2d:22:21:a7:24:fb:cc:5f:74:fb: b5:b7:d7:60:8a:8f:67:fe:51:60:40:69:19:77:e6: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:02:23:4C:74:4D:9D:1B:6C:F0:3A:AA:5F:D5:E6:18:09:99:38:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bbb72d61-8d65-3789-8e8e-07d03c1c5843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8f:06:e2:c7:5e:55:b9:9e:3e:d6:5e:2a:f8:04:e4:c4:34: f5:45:1d:13:a7:d1:49:fc:b5:56:7a:74:14:32:12:6c:76:ad: ee:34:92:28:88:e0:bc:43:2f:6b:bb:f3:ac:61:47:44:5a:88: d8:b9:7b:7f:e8:c7:13:9d:62:3f:d5:9f:67:43:73:05:72:ee: 70:48:04:9d:65:02:a8:a3:5e:9e:99:9f:9f:b2:f9:a7:3d:47: 38:a2:e1:ff:47:bc:38:6e:e9:50:fe:fd:08:a6:7b:82:b3:10: 16:e2:83:ba:59:35:52:dd:d7:3e:47:ba:69:5b:a9:b3:1f:bf: f4:6c:cc:86:15:a4:66:18:1d:8f:ff:91:39:82:b5:d2:d2:5e: 42:89:b5:24:d9:bd:bd:87:85:8b:e2:34:51:30:50:0d:53:88: 1f:52:8b:34:3b:62:39:b5:95:42:da:4b:fb:49:4c:ee:3d:19: fc:6f:e6:26:95:2a:1e:9b:9f:ad:0f:34:ce:f2:e3:c9:94:0c: 49:81:fb:5c:88:db:a3:b4:05:19:34:06:0b:82:3f:d8:32:2a: 80:ce:71:df:6d:71:4a:49:0c:08:05:ed:85:0c:5d:7a:19:7f: 3e:5e:fc:04:26:6d:67:19:a6:de:3f:71:25:21:ea:c2:c4:b4: 85:fc:ff:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5/+BMi7AHz2neAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZTY3YzJkYTctZDVmZS00ZWQ3LTk5ZTEtMmZmZjVkYmIxMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQJN59NeCtiR0XQBLJ3NRVHTwzwXKU8iwnoS nf88oXrQWEGRWuN+tcIRS0ua719Ju+rBqdcPajNaY6A7FYhbIqrJf/OsFFiDRmMZ ooee3S5MU/lvYYF+Ion0c28a92bQTDkTRB0QztrtY8QkIXh6KHzWh7u8C9p/HZaS MbiUEViV5N6921/dU/1QcaDBFS9rV0RHqhNtb8BoenggRa8Ad/GAGqkDE8lJfQdH 3fixklsaixQFMYNnNI2LUhOD4NFGDkzhNvHV6Suj/KfKwuj+/ZicFJ5p6EXo2Ycm /vbzIVX/iHWmsC0iIack+8xfdPu1t9dgio9n/lFgQGkZd+ZsbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsCI0x0TZ0bbPA6ql/V5hgJmTjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmJiNzJkNjEtOGQ2NS0z Nzg5LThlOGUtMDdkMDNjMWM1ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUojMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKPBuLHXlW5nj7WXir4BOTENPVFHROn0Un8tVZ6dBQyEmx2re40kiiI 4LxDL2u786xhR0RaiNi5e3/oxxOdYj/Vn2dDcwVy7nBIBJ1lAqijXp6Zn5+y+ac9 Rzii4f9HvDhu6VD+/Qime4KzEBbig7pZNVLd1z5HumlbqbMfv/RszIYVpGYYHY// kTmCtdLSXkKJtSTZvb2HhYviNFEwUA1TiB9SizQ7Yjm1lULaS/tJTO49Gfxv5iaV Kh6bn60PNM7y48mUDEmB+1yI26O0BRk0BguCP9gyKoDOcd9tcUpJDAgF7YUMXXoZ fz5e/AQmbWcZpt4/cSUh6sLEtIX8/1U= -----END CERTIFICATE-----Generated at Tue Sep 22 12:28:27 2026 by rpki-client