$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ffd98df1-6bc5-387a-8863-7cac999cae78.roa File: ffd98df1-6bc5-387a-8863-7cac999cae78.roa (raw, json) Hash identifier: 952BrcW0c4WKuWOJBzoDkS3T4PnLcNb7O/fGVNKWiJM= Subject key identifier: C8:1D:62:65:07:13:E4:B5:12:34:A8:B4:CD:42:11:A5:0A:31:0E:53 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AB3B52E9D2DFD34E7529F7C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ffd98df1-6bc5-387a-8863-7cac999cae78.roa Signing time: Thu 31 Jul 2025 14:35:31 +0000 ROA not before: Thu 31 Jul 2025 14:35:31 +0000 ROA not after: Wed 29 Oct 2025 14:35:31 +0000 asID: 29802 IP address blocks: 45.74.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:b5:2e:9d:2d:fd:34:e7:52:9f:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 31 14:35:31 2025 GMT Not After : Oct 29 14:35:31 2025 GMT Subject: CN=d502d436-fcd7-48cf-9f83-83ddc6db0ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:74:6c:f1:5d:9b:a0:51:b4:8d:a6:fc:7a: 71:fe:9d:15:1a:2a:c3:a0:25:17:62:6c:c1:88:b6: 8e:8b:43:26:fd:74:1b:8f:cf:35:1f:7a:02:e6:5f: 74:93:82:12:67:08:8c:25:93:23:96:eb:07:97:0d: 2c:b8:7c:35:d7:5e:54:98:da:b1:de:93:48:a6:74: 6c:09:b2:d8:dc:33:ad:c9:b0:83:bd:ba:ed:04:4e: e7:5d:cd:00:77:bf:df:9b:be:0a:90:33:ba:af:31: f2:7d:84:a1:86:4b:2a:32:82:26:da:3f:91:e9:c6: f3:9d:57:21:c8:40:04:42:84:c4:cf:4c:7d:77:aa: aa:61:c2:c9:00:b0:a3:a2:c2:12:8e:93:27:8e:e0: 59:e5:de:f4:50:17:40:7a:34:06:68:4e:05:4f:f6: ec:6d:97:c5:40:74:74:f5:9f:f8:b3:9b:52:32:fc: 27:c2:e8:dc:50:b8:96:bb:fe:12:61:36:80:2a:4a: c3:5a:54:2a:13:a0:6b:b6:e9:68:63:e2:f0:21:b1: 16:33:6c:ac:cb:af:5a:c2:82:93:f4:24:e7:d2:35: d0:79:ab:f8:fd:48:ed:dc:c8:00:a4:e9:68:b8:39: 2e:5a:56:03:39:69:f7:ad:97:74:2e:43:42:3f:1a: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1D:62:65:07:13:E4:B5:12:34:A8:B4:CD:42:11:A5:0A:31:0E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ffd98df1-6bc5-387a-8863-7cac999cae78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 45.74.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b2:ce:49:5e:6e:aa:2a:70:10:66:df:c3:bc:6d:59:32:1e: 1b:19:fe:e2:12:9c:e4:70:83:8c:9a:1d:2a:5d:1f:36:df:ab: 8a:58:88:1d:74:a9:8d:1b:ce:ea:5d:97:31:86:47:81:f5:29: 7b:0a:b9:3d:13:98:e0:26:53:e1:3b:cc:36:0b:df:5a:ec:a9: 47:b8:73:20:a2:43:3c:d3:e7:75:f3:78:7f:aa:b7:2d:32:83: 6b:59:8e:cf:57:fc:08:71:0c:b5:9d:ac:b0:b1:7d:4c:b2:20: 11:8b:78:f1:bf:0f:67:f8:de:3b:76:59:12:01:ce:c5:a7:5f: be:20:03:a9:5d:02:07:be:2a:a8:87:d3:b1:0c:e1:57:8b:4b: 3e:3a:f0:d5:4e:48:88:dd:03:58:59:90:b9:48:77:ac:ce:4e: d5:aa:b1:33:96:d1:67:2e:fc:34:83:43:7a:83:5a:0d:1b:6e: 5f:73:58:aa:bd:42:91:b6:3e:00:79:37:de:93:f9:86:2b:c8: 9f:d2:ed:36:9f:99:58:e3:ba:2a:cb:aa:df:fa:30:0c:56:8b: d4:06:34:37:9b:67:5c:3b:3f:b6:71:c8:36:27:f6:7d:ac:43: 0d:43:dd:11:77:f8:d2:c6:fe:28:49:31:a4:02:79:8e:9b:02: 74:a7:89:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqztS6dLf0051KffAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDczMTE0MzUzMVoXDTI1MTAyOTE0MzUzMVowLzEtMCsGA1UEAxMk ZDUwMmQ0MzYtZmNkNy00OGNmLTlmODMtODNkZGM2ZGIwYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvt0bPFdm6BRtI2m/Hpx/p0VGirDoCUXYmzB iLaOi0Mm/XQbj881H3oC5l90k4ISZwiMJZMjlusHlw0suHw1115UmNqx3pNIpnRs CbLY3DOtybCDvbrtBE7nXc0Ad7/fm74KkDO6rzHyfYShhksqMoIm2j+R6cbznVch yEAEQoTEz0x9d6qqYcLJALCjosISjpMnjuBZ5d70UBdAejQGaE4FT/bsbZfFQHR0 9Z/4s5tSMvwnwujcULiWu/4SYTaAKkrDWlQqE6BrtuloY+LwIbEWM2ysy69awoKT 9CTn0jXQeav4/Ujt3MgApOlouDkuWlYDOWn3rZd0LkNCPxpRTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgdYmUHE+S1EjSotM1CEaUKMQ5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmZkOThkZjEtNmJjNS0z ODdhLTg4NjMtN2NhYzk5OWNhZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUoHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6yzklebqoqcBBm38O8bVkyHhsZ/uISnORwg4yaHSpdHzbfq4pYiB10 qY0bzupdlzGGR4H1KXsKuT0TmOAmU+E7zDYL31rsqUe4cyCiQzzT53XzeH+qty0y g2tZjs9X/AhxDLWdrLCxfUyyIBGLePG/D2f43jt2WRIBzsWnX74gA6ldAge+KqiH 07EM4VeLSz468NVOSIjdA1hZkLlId6zOTtWqsTOW0Wcu/DSDQ3qDWg0bbl9zWKq9 QpG2PgB5N96T+YYryJ/S7TafmVjjuirLqt/6MAxWi9QGNDebZ1w7P7ZxyDYn9n2s Qw1D3RF3+NLG/ihJMaQCeY6bAnSniXw= -----END CERTIFICATE-----Generated at Wed Aug 6 13:22:39 2025 by rpki-client