$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fc702c4d-d1a4-3242-9591-e579b7f99b94.roa File: fc702c4d-d1a4-3242-9591-e579b7f99b94.roa (raw, json) Hash identifier: zNtITLp6FjXB9bjlptlGA7EfjSKle1kTa2TKQsvSyxs= Subject key identifier: C5:45:C8:58:D6:88:68:2A:48:89:60:29:F2:2D:02:5C:FA:B1:97:0F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BAE867157C4C51A816448A000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fc702c4d-d1a4-3242-9591-e579b7f99b94.roa Signing time: Wed 29 Oct 2025 10:49:14 +0000 ROA not before: Wed 29 Oct 2025 10:49:14 +0000 ROA not after: Tue 27 Jan 2026 11:49:14 +0000 asID: 55154 IP address blocks: 45.74.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:86:71:57:c4:c5:1a:81:64:48:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 29 10:49:14 2025 GMT Not After : Jan 27 11:49:14 2026 GMT Subject: CN=45f1f5e7-a463-41e2-b569-b22f6fb5d18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:9e:7f:0e:51:5d:dc:b0:a1:24:30:bd:c9: be:a3:88:2a:46:86:b5:1d:21:89:f3:b0:d8:79:81: 56:34:c5:7a:40:1d:61:5c:9d:ef:71:91:04:b5:cb: 11:4a:38:f9:e9:13:ce:bb:cc:f4:e4:6d:f3:7e:d4: 10:b6:d4:e2:2d:e7:16:1b:7f:dd:7d:b4:65:4f:76: fb:9b:9b:25:54:78:93:68:a9:fe:83:5f:b7:b1:9f: a8:ca:e4:b3:e7:78:1d:c2:5b:23:b0:ca:2c:55:45: 46:80:de:8a:83:7b:57:e9:6a:db:9e:18:47:80:cf: d3:45:a5:09:1c:07:73:4f:23:ec:c8:4c:5c:fe:7f: b4:ca:bb:5d:c3:c0:0c:09:ae:3f:9e:67:a6:0f:96: ef:cb:23:15:35:de:10:c1:e3:ba:33:bc:5d:c8:f4: e5:f9:11:3c:a5:7a:3d:4b:93:f5:b6:34:fd:8b:8d: 33:b4:7a:b3:6d:f8:53:99:24:7e:93:e8:cc:71:db: 32:aa:90:b4:d5:6a:7d:7b:cc:34:d1:ae:e2:e6:fe: 98:fe:40:67:44:0b:cc:9c:fb:32:ae:28:34:b7:e4: 23:24:ff:9d:5f:29:fb:8b:b1:8e:cb:b3:d6:8b:34: af:0e:88:85:ea:c7:b3:0b:ef:65:75:04:6c:5f:13: cb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:45:C8:58:D6:88:68:2A:48:89:60:29:F2:2D:02:5C:FA:B1:97:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fc702c4d-d1a4-3242-9591-e579b7f99b94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:54:1f:92:4b:c2:18:eb:63:b1:fb:ea:75:9a:79:d9:94:7f: 91:b7:aa:c2:d1:1d:0f:f9:8b:62:52:c5:58:15:28:57:6f:5e: a3:ca:eb:71:4e:c7:f4:2b:a7:a7:5a:20:75:64:3a:90:94:5b: bb:da:89:ca:9e:cf:3c:16:54:40:a2:c1:66:13:1f:80:ee:69: ba:76:27:7f:13:27:81:ae:59:da:01:f3:23:95:fc:18:93:a3: a9:d2:0e:75:8e:0f:b1:1c:51:bf:5c:f2:72:40:00:67:d5:02: 1f:e5:1f:44:a8:5b:ea:1b:3e:c2:64:3f:2c:e0:1e:8d:67:80: a4:bb:76:31:5a:40:88:ea:d9:1b:ca:1c:14:12:ef:7b:7f:55: 60:9e:a9:cb:86:05:16:0a:1f:87:53:d7:c8:9f:c5:eb:69:e2: 8d:12:57:71:97:cb:28:69:26:9b:86:48:a0:90:e1:93:26:f1: 4c:d8:d8:58:89:d1:37:c3:ba:0e:e3:af:48:6c:14:53:38:64: 27:67:b5:fb:27:84:84:c8:59:fc:30:2b:12:65:b2:fc:74:3a: 69:0b:14:51:92:ec:11:77:ee:34:c7:5d:d5:7b:9d:23:2a:40: 3a:aa:b7:ea:5a:fd:4f:33:01:30:8a:03:75:7a:63:b0:1d:81: 59:6e:7b:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuuhnFXxMUagWRIoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyOTEwNDkxNFoXDTI2MDEyNzExNDkxNFowLzEtMCsGA1UEAxMk NDVmMWY1ZTctYTQ2My00MWUyLWI1NjktYjIyZjZmYjVkMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXuefw5RXdywoSQwvcm+o4gqRoa1HSGJ87DY eYFWNMV6QB1hXJ3vcZEEtcsRSjj56RPOu8z05G3zftQQttTiLecWG3/dfbRlT3b7 m5slVHiTaKn+g1+3sZ+oyuSz53gdwlsjsMosVUVGgN6Kg3tX6WrbnhhHgM/TRaUJ HAdzTyPsyExc/n+0yrtdw8AMCa4/nmemD5bvyyMVNd4QweO6M7xdyPTl+RE8pXo9 S5P1tjT9i40ztHqzbfhTmSR+k+jMcdsyqpC01Wp9e8w00a7i5v6Y/kBnRAvMnPsy rig0t+QjJP+dXyn7i7GOy7PWizSvDoiF6sezC+9ldQRsXxPLuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVFyFjWiGgqSIlgKfItAlz6sZcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmM3MDJjNGQtZDFhNC0z MjQyLTk1OTEtZTU3OWI3Zjk5Yjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJUH5JLwhjrY7H76nWaedmUf5G3qsLRHQ/5i2JSxVgVKFdvXqPK63FO x/Qrp6daIHVkOpCUW7vaicqezzwWVECiwWYTH4Duabp2J38TJ4GuWdoB8yOV/BiT o6nSDnWOD7EcUb9c8nJAAGfVAh/lH0SoW+obPsJkPyzgHo1ngKS7djFaQIjq2RvK HBQS73t/VWCeqcuGBRYKH4dT18ifxetp4o0SV3GXyyhpJpuGSKCQ4ZMm8UzY2FiJ 0TfDug7jr0hsFFM4ZCdntfsnhITIWfwwKxJlsvx0OmkLFFGS7BF37jTHXdV7nSMq QDqqt+pa/U8zATCKA3V6Y7AdgVluexs= -----END CERTIFICATE-----Generated at Wed Nov 5 13:59:51 2025 by rpki-client