$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa File: e09d4cea-d423-3a06-91f1-682b8b11b34e.roa (raw, json) Hash identifier: eOcvG9JBNKIE2MyJWTmeNu15OTVE+KtLexxWUbC7Bpo= Subject key identifier: 19:D2:5C:02:60:F9:F5:68:93:66:9D:A7:23:2E:7B:50:0F:58:8D:38 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F1897A91D797C7CB15F5E5AC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 212238 IP address blocks: 45.74.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a9:1d:79:7c:7c:b1:5f:5e:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=65960da0-f88a-465b-ae00-e0704fc63c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:2d:90:6e:6e:0e:25:c7:d0:57:2f:23:a5: fa:03:56:2e:98:85:ac:aa:ad:d1:c4:79:13:7f:25: 6a:26:56:98:5c:47:11:ed:a8:18:c4:92:66:e6:0e: cd:b9:41:2d:6a:b7:c0:76:be:9c:82:b6:4e:de:c6: 97:d7:f6:1d:bd:7e:41:5e:ed:e5:01:31:1a:c4:3a: 8e:47:09:fd:d1:47:0f:5b:58:7e:b1:48:78:c1:ac: 96:8d:fd:0e:a7:8c:cb:f3:74:6a:35:c3:f8:35:80: e3:09:0b:a1:e7:87:9f:54:05:1b:19:ff:ee:00:34: d8:57:0a:42:72:2e:92:f2:88:e2:82:b1:75:1c:d2: ac:23:32:55:37:c6:fc:87:3b:10:ce:ec:f2:34:4b: 55:75:d1:35:39:29:02:3d:b5:81:ac:17:b4:ea:33: bf:ee:4a:6c:d5:05:51:2d:09:c3:be:04:92:69:ba: f0:ca:77:16:37:b0:da:90:df:72:5e:04:c3:9e:ee: fc:aa:03:8a:78:d6:f6:cb:d7:63:32:27:6e:e2:63: ea:b9:b3:fb:99:a5:34:92:4e:c2:5e:d5:6f:5a:2d: 51:7d:d6:b3:c3:e0:5c:a1:87:c4:5b:22:4c:c4:fb: 21:75:54:09:b9:be:f5:1d:b3:1d:bd:46:e9:18:bc: 79:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D2:5C:02:60:F9:F5:68:93:66:9D:A7:23:2E:7B:50:0F:58:8D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e09d4cea-d423-3a06-91f1-682b8b11b34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d6:4f:1f:e1:97:e1:70:51:d8:5a:cf:ae:cf:7e:5a:84:a5: e1:22:7f:53:c2:e6:cf:52:24:a6:e0:7a:96:08:dc:8d:9d:4d: c2:5b:53:58:2a:ad:44:f2:7a:f7:76:69:e9:80:a0:85:a9:62: 28:40:3a:6f:12:79:a2:a0:fb:b2:86:12:2a:4d:be:f6:1c:ac: 24:e3:d2:d8:45:91:bb:6c:6e:63:07:c7:8e:f6:02:88:f5:eb: 91:7f:7b:55:22:1c:5d:5b:3e:3f:7b:fa:7c:12:f9:3a:30:f5: 64:33:ad:5c:41:3a:02:8d:20:a5:42:31:28:73:ae:6a:a6:47: 43:87:9a:18:57:6d:07:7a:e5:9f:19:0d:10:cc:44:15:dc:86: 40:39:69:35:6e:8c:9c:e5:ee:66:08:f2:a5:4e:36:64:9c:ff: e5:64:bb:62:80:2c:9d:d0:cf:19:c6:5c:fb:e4:f2:fc:09:87: d9:ab:b1:15:62:2c:c6:37:67:bc:02:44:bb:5b:ae:5c:fe:3a: d8:1c:3b:d8:f4:9c:7f:5b:ed:ee:6a:07:ba:f8:4c:e8:59:44: 27:bd:5a:54:c4:50:bc:f2:15:f0:03:0c:d2:ff:7a:72:e7:89: 38:59:03:78:67:5f:52:35:7f:0d:e7:c9:cc:b9:89:5b:ff:e5: e1:a0:3b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6kdeXx8sV9eWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NjU5NjBkYTAtZjg4YS00NjViLWFlMDAtZTA3MDRmYzYzYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld8tkG5uDiXH0FcvI6X6A1YumIWsqq3RxHkT fyVqJlaYXEcR7agYxJJm5g7NuUEtarfAdr6cgrZO3saX1/YdvX5BXu3lATEaxDqO Rwn90UcPW1h+sUh4wayWjf0Op4zL83RqNcP4NYDjCQuh54efVAUbGf/uADTYVwpC ci6S8ojigrF1HNKsIzJVN8b8hzsQzuzyNEtVddE1OSkCPbWBrBe06jO/7kps1QVR LQnDvgSSabrwyncWN7DakN9yXgTDnu78qgOKeNb2y9djMidu4mPqubP7maU0kk7C XtVvWi1Rfdazw+BcoYfEWyJMxPshdVQJub71HbMdvUbpGLx5nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnSXAJg+fVok2adpyMue1APWI04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTA5ZDRjZWEtZDQyMy0z YTA2LTkxZjEtNjgyYjhiMTFiMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUo8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3WTx/hl+FwUdhaz67PflqEpeEif1PC5s9SJKbgepYI3I2dTcJbU1gq rUTyevd2aemAoIWpYihAOm8SeaKg+7KGEipNvvYcrCTj0thFkbtsbmMHx472Aoj1 65F/e1UiHF1bPj97+nwS+Tow9WQzrVxBOgKNIKVCMShzrmqmR0OHmhhXbQd65Z8Z DRDMRBXchkA5aTVujJzl7mYI8qVONmSc/+Vku2KALJ3QzxnGXPvk8vwJh9mrsRVi LMY3Z7wCRLtbrlz+OtgcO9j0nH9b7e5qB7r4TOhZRCe9WlTEULzyFfADDNL/enLn iThZA3hnX1I1fw3nycy5iVv/5eGgO1M= -----END CERTIFICATE-----Generated at Sun Sep 20 18:28:04 2026 by rpki-client