$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/210055bb-566f-3bf6-9266-c17c51284e6c.roa File: 210055bb-566f-3bf6-9266-c17c51284e6c.roa (raw, json) Hash identifier: gthKy2EX3LOt5NEwlL7PmlAUYHHUYRr7GKx5/3l7H8Y= Subject key identifier: 63:4C:11:10:FB:07:F2:06:16:D4:22:92:C8:4D:64:11:67:89:E6:9F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D70C3EFD35D6964702FA0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/210055bb-566f-3bf6-9266-c17c51284e6c.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 47.231.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:70:c3:ef:d3:5d:69:64:70:2f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=cf5ea041-c2a6-4fa4-9ee4-ad380d6abeca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:41:ee:fa:34:04:ea:fd:3e:8d:5b:74:23: 91:44:42:2d:87:47:80:bd:35:c6:79:64:37:ad:77: 2f:3f:a1:1e:60:cf:d3:e0:df:d8:ae:b5:d8:ac:22: e1:d0:2d:a9:33:be:2b:6c:77:31:32:10:b0:22:a2: 62:40:57:03:ba:d1:4d:6a:6b:07:70:84:35:65:85: cf:ea:7a:ea:d9:d8:dc:c6:74:53:bb:8d:ad:73:c5: cd:58:f7:0a:82:ff:7e:7a:91:9a:b4:bb:8c:0e:5f: 87:ff:29:6b:b6:23:bc:9b:43:25:38:3f:46:0d:c2: 37:0a:07:f1:06:ac:80:1f:f9:23:2f:e2:56:fb:b6: bf:86:83:25:9c:f0:db:2d:ef:75:1d:db:11:75:f5: 1f:5e:0b:b7:6b:70:dd:b1:87:f3:3c:a2:a1:af:43: 90:a8:3e:38:16:71:e2:b4:1b:12:53:b3:96:a1:c5: cf:24:08:e2:7d:38:b8:6b:9a:f9:cd:47:d8:8a:9c: b1:9b:42:c1:dc:92:41:03:76:b6:d9:71:43:8c:9e: 44:d4:7f:1f:8b:eb:b9:1f:5b:55:93:86:ea:15:31: f1:b4:61:fb:92:de:57:0f:1b:a6:cf:92:39:62:5c: 1d:e3:82:c2:36:93:13:d5:21:3f:c1:41:90:18:cd: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4C:11:10:FB:07:F2:06:16:D4:22:92:C8:4D:64:11:67:89:E6:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/210055bb-566f-3bf6-9266-c17c51284e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.231.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:4a:66:5a:4a:fd:aa:1f:ed:04:fb:eb:b0:27:15:6f:1a:ce: 47:fc:3c:8b:42:36:8b:57:6b:84:5a:4c:90:fe:30:48:73:96: cf:12:bd:dd:b1:2a:ad:19:9e:98:ca:79:7b:49:e1:5d:66:1c: 1c:7c:1f:dd:3d:2d:f9:d4:f8:12:fd:59:fb:29:20:39:3b:90: c0:52:c8:83:01:88:db:de:41:46:a1:df:d0:5e:d6:6f:aa:b3: cd:4f:bc:47:85:f2:ee:3b:d1:39:76:42:98:51:5d:d3:31:7d: 9b:55:00:75:ae:26:03:0e:41:47:97:62:bf:13:ff:70:68:23: c1:b1:81:09:ce:5b:e8:5e:b0:f2:80:b8:1e:e4:62:77:49:80: ef:dd:55:a1:4a:05:57:2d:9c:db:40:fe:d7:74:ae:6b:f7:90: 1e:60:25:2c:f6:1a:a0:0d:ad:f0:11:06:9f:c3:9b:5c:0e:8a: 1e:cc:ad:4e:48:5f:46:93:10:1c:01:c5:43:a2:54:12:c2:11: a3:76:5c:29:7f:e0:84:67:6d:f7:45:60:b9:9b:7c:b5:72:e1: 6e:75:82:d7:59:70:ae:50:ce:a6:63:3a:af:fe:7b:6c:92:dc: 00:69:d8:07:d6:b2:6f:e1:c9:b2:64:c3:ee:87:3b:48:0e:d4: 39:d0:8f:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHXDD79NdaWRwL6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Y2Y1ZWEwNDEtYzJhNi00ZmE0LTllZTQtYWQzODBkNmFiZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZVB7vo0BOr9Po1bdCORREIth0eAvTXGeWQ3 rXcvP6EeYM/T4N/YrrXYrCLh0C2pM74rbHcxMhCwIqJiQFcDutFNamsHcIQ1ZYXP 6nrq2djcxnRTu42tc8XNWPcKgv9+epGatLuMDl+H/ylrtiO8m0MlOD9GDcI3Cgfx BqyAH/kjL+JW+7a/hoMlnPDbLe91HdsRdfUfXgu3a3DdsYfzPKKhr0OQqD44FnHi tBsSU7OWocXPJAjifTi4a5r5zUfYipyxm0LB3JJBA3a22XFDjJ5E1H8fi+u5H1tV k4bqFTHxtGH7kt5XDxumz5I5Ylwd44LCNpMT1SE/wUGQGM1YHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNMERD7B/IGFtQikshNZBFnieafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjEwMDU1YmItNTY2Zi0z YmY2LTkyNjYtYzE3YzUxMjg0ZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDL+fIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlKZlpK/aof7QT767AnFW8azkf8PItCNotXa4RaTJD+MEhzls8Svd2x Kq0ZnpjKeXtJ4V1mHBx8H909LfnU+BL9WfspIDk7kMBSyIMBiNveQUah39Be1m+q s81PvEeF8u470Tl2QphRXdMxfZtVAHWuJgMOQUeXYr8T/3BoI8GxgQnOW+hesPKA uB7kYndJgO/dVaFKBVctnNtA/td0rmv3kB5gJSz2GqANrfARBp/Dm1wOih7MrU5I X0aTEBwBxUOiVBLCEaN2XCl/4IRnbfdFYLmbfLVy4W51gtdZcK5QzqZjOq/+e2yS 3ABp2AfWsm/hybJkw+6HO0gO1DnQj5E= -----END CERTIFICATE-----Generated at Mon Oct 20 04:32:38 2025 by rpki-client