$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c17bd2db-0678-321a-bb95-79f534638930.roa File: c17bd2db-0678-321a-bb95-79f534638930.roa (raw, json) Hash identifier: THUeW5TCEzx6KAlIdaMHeGm1xAwUgE1jUNyiyDvXd8Y= Subject key identifier: 3A:D9:72:AF:7A:22:CA:1F:FF:AF:94:75:C0:82:91:F3:BD:8A:18:C5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CAE5734BDDBC94E12A039E1D0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c17bd2db-0678-321a-bb95-79f534638930.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 9009 IP address blocks: 45.74.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:34:bd:db:c9:4e:12:a0:39:e1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=749132cb-71c1-4089-80cc-abd01cfa2aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:ab:9f:61:98:37:68:36:8d:f5:0f:57:6f: 6a:50:9e:f8:24:15:01:b8:1a:d7:b8:00:33:98:24: 09:9d:7f:4e:83:21:f5:4e:04:76:e9:b7:e4:a7:05: 16:cb:dc:ea:26:e3:c2:41:54:3e:57:28:fd:ab:68: 0e:83:cc:d3:ac:28:cb:e4:ea:c7:bf:ca:e5:01:5b: 3c:79:29:64:08:1f:80:93:e1:67:8e:17:29:c2:13: c3:54:10:c3:f3:c5:ae:4c:0d:df:45:88:b2:15:95: e2:12:f9:87:8c:14:b2:f7:c9:7c:bc:48:03:89:0f: 0d:49:fb:3f:5c:66:6a:fc:7d:1c:e0:d0:1c:db:10: ad:c0:7e:28:60:4e:bb:f1:64:a3:f9:95:47:64:64: eb:5b:73:35:e6:9a:b8:82:99:e3:3f:4b:5f:94:27: 03:2e:00:51:c8:fe:e9:c2:69:80:7f:a5:96:fc:d3: 03:22:c7:ed:b2:4d:09:8e:c8:8a:03:09:e4:44:d8: 51:4b:0a:83:26:a7:34:00:01:58:67:d8:73:e7:42: 60:0f:c1:56:66:fe:03:25:90:c3:e3:ae:bd:fe:01: 89:5b:96:54:a4:c7:4b:6e:ad:f3:f1:45:e1:7c:3d: 4d:e0:be:63:c7:48:83:d4:d1:09:b4:93:8d:d7:39: 49:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D9:72:AF:7A:22:CA:1F:FF:AF:94:75:C0:82:91:F3:BD:8A:18:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c17bd2db-0678-321a-bb95-79f534638930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:47:4c:9e:ce:72:9d:23:8d:63:77:b8:b0:44:67:ad:c5:f5: 99:77:9b:68:08:ca:26:1e:04:6e:fc:ad:81:36:b7:a9:5a:21: ec:24:d9:1e:c1:f3:bc:eb:c1:97:47:87:f2:25:d0:10:7b:a2: f4:6d:4c:5a:f5:16:41:97:f9:dd:b1:30:09:72:ee:3e:e6:ba: 97:f6:ce:79:76:98:6d:21:1c:7d:eb:b5:eb:1e:7a:cc:ce:84: db:e9:ca:4d:16:74:8c:d2:1e:3e:69:4e:1e:ab:79:93:d8:e1: 8e:4f:00:c7:e7:26:b7:f2:27:1c:27:30:fe:03:ff:b1:5e:22: 6f:0f:cb:ab:08:c5:b0:f3:30:ff:73:f6:75:6e:74:76:10:a4: 26:db:18:9a:1c:ba:77:be:bd:ce:2e:3c:6d:1a:db:df:23:30: 66:38:a7:e7:1d:81:fb:e6:1c:e0:a3:55:6a:62:ed:c9:83:85: 1a:09:74:29:5c:2d:21:a7:48:d4:db:aa:2e:16:1d:3c:5f:4b: 44:14:48:7c:a8:10:8f:63:fc:79:47:e7:bf:c7:fa:d5:62:01: 22:cd:05:d7:94:63:5c:97:67:0a:42:ee:61:7c:fb:03:0b:21: 04:c1:37:08:74:6d:54:9e:31:0b:a0:5c:95:ee:cf:a4:6f:87: 60:c3:a2:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVzS928lOEqA54dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzQ5MTMyY2ItNzFjMS00MDg5LTgwY2MtYWJkMDFjZmEyYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvimrn2GYN2g2jfUPV29qUJ74JBUBuBrXuAAz mCQJnX9OgyH1TgR26bfkpwUWy9zqJuPCQVQ+Vyj9q2gOg8zTrCjL5OrHv8rlAVs8 eSlkCB+Ak+FnjhcpwhPDVBDD88WuTA3fRYiyFZXiEvmHjBSy98l8vEgDiQ8NSfs/ XGZq/H0c4NAc2xCtwH4oYE678WSj+ZVHZGTrW3M15pq4gpnjP0tflCcDLgBRyP7p wmmAf6WW/NMDIsftsk0JjsiKAwnkRNhRSwqDJqc0AAFYZ9hz50JgD8FWZv4DJZDD 4669/gGJW5ZUpMdLbq3z8UXhfD1N4L5jx0iD1NEJtJON1zlJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrZcq96Isof/6+UdcCCkfO9ihjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzE3YmQyZGItMDY3OC0z MjFhLWJiOTUtNzlmNTM0NjM4OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxHTJ7Ocp0jjWN3uLBEZ63F9Zl3m2gIyiYeBG78rYE2t6laIewk2R7B 87zrwZdHh/Il0BB7ovRtTFr1FkGX+d2xMAly7j7mupf2znl2mG0hHH3rteseeszO hNvpyk0WdIzSHj5pTh6reZPY4Y5PAMfnJrfyJxwnMP4D/7FeIm8Py6sIxbDzMP9z 9nVudHYQpCbbGJocune+vc4uPG0a298jMGY4p+cdgfvmHOCjVWpi7cmDhRoJdClc LSGnSNTbqi4WHTxfS0QUSHyoEI9j/HlH57/H+tViASLNBdeUY1yXZwpC7mF8+wML IQTBNwh0bVSeMQugXJXuz6Rvh2DDopM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:56:50 2026 by rpki-client