$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa File: 291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa (raw, json) Hash identifier: tMYlouplxFdebDNGuAx9XCRVxWBSf9ptG1vORsIwcgc= Subject key identifier: 05:AA:64:DA:DE:A7:D5:25:AA:0C:48:1D:70:E0:86:74:95:15:B5:4E Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DF29D914D491E4F145CA8 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 47.44.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:f2:9d:91:4d:49:1e:4f:14:5c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=a0a7197a-b88d-4d06-9647-fec62feb1ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:7f:26:2c:75:04:3c:00:50:81:2b:10:99: cb:3f:b9:ac:8a:04:2e:10:26:d3:ff:71:92:4c:83: 78:d9:a7:74:09:22:9b:32:e5:c5:b1:12:0a:a4:f6: d1:4a:9e:c6:69:ca:be:e2:32:02:9d:13:79:0e:85: f7:a1:79:bb:a5:4b:fd:c3:62:f7:7e:7d:76:54:75: 93:17:41:a1:35:82:04:ef:94:18:b0:f5:e6:96:3c: e4:0d:29:d6:ba:4f:73:b4:17:7e:a5:f6:7e:e1:88: f7:e8:f2:61:01:31:f7:cb:7d:7a:54:e6:75:01:f7: b4:ba:c6:ed:b5:b0:73:31:63:b7:87:47:96:fb:c4: 1f:4c:92:9c:97:07:bb:65:f4:e9:bd:05:d7:d8:06: f8:b5:ca:88:bb:cc:d6:8f:76:90:3c:ff:f1:87:fb: ec:57:48:66:64:c5:91:36:5e:c7:dd:ed:a7:c0:95: 5e:b6:2b:30:01:bb:78:f1:ea:c0:9c:b6:fb:e8:7f: fd:74:99:06:fc:7e:a0:10:e5:7d:a7:fc:c1:c3:cc: 75:44:6a:e5:d9:6c:8c:da:1a:29:e5:3a:8e:80:0d: 15:d2:3b:5e:04:ca:be:e7:0b:4a:3b:7e:df:c0:98: a1:e1:65:66:b1:d5:4f:83:d9:33:74:59:39:86:d0: eb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AA:64:DA:DE:A7:D5:25:AA:0C:48:1D:70:E0:86:74:95:15:B5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.44.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e7:52:3f:6e:15:25:5a:ce:30:c7:7d:bb:95:3e:6a:c7:dc: f1:7f:cb:5c:5b:e3:77:17:07:22:4f:6f:d1:f1:18:02:f3:9f: 4f:87:96:f4:65:a5:a0:1f:dd:9f:f2:e8:96:a8:f5:d1:21:12: 8c:fc:4a:d7:8e:d8:e1:db:1b:5a:e1:2e:79:69:63:28:33:f4: 28:ad:98:3c:14:c1:8e:10:3d:54:e9:9a:76:f5:e0:e1:af:47: f8:10:65:f2:7b:0c:0b:65:15:f9:ba:0d:4a:98:11:b9:d6:ac: 8f:6a:d9:22:3d:31:02:58:21:bf:ad:e7:d4:6a:a0:3f:8b:49: 8f:2a:c1:42:4e:7b:97:81:8d:f0:c0:31:3d:5f:7d:19:47:f0: aa:0f:1f:d3:c6:37:11:16:31:6e:a5:3a:45:82:be:ea:4d:73: 83:e0:b4:61:28:fb:c6:12:80:b5:13:0b:95:19:c9:2a:9d:bd: de:ac:f0:58:92:ba:7a:f7:0f:fc:97:e1:aa:0c:67:bc:f6:25: d5:71:01:be:97:19:cd:e6:f7:f7:9d:21:f4:fa:bc:07:17:b6: a0:b4:fc:5b:7e:09:3f:07:33:54:6a:47:f4:69:61:62:5d:05: bb:35:3d:47:77:99:d0:1a:95:c2:ea:af:ac:95:b7:ac:a5:f6: b4:91:e1:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHfKdkU1JHk8UXKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YTBhNzE5N2EtYjg4ZC00ZDA2LTk2NDctZmVjNjJmZWIxY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssB/Jix1BDwAUIErEJnLP7msigQuECbT/3GS TIN42ad0CSKbMuXFsRIKpPbRSp7Gacq+4jICnRN5DoX3oXm7pUv9w2L3fn12VHWT F0GhNYIE75QYsPXmljzkDSnWuk9ztBd+pfZ+4Yj36PJhATH3y316VOZ1Afe0usbt tbBzMWO3h0eW+8QfTJKclwe7ZfTpvQXX2Ab4tcqIu8zWj3aQPP/xh/vsV0hmZMWR Nl7H3e2nwJVetiswAbt48erAnLb76H/9dJkG/H6gEOV9p/zBw8x1RGrl2WyM2hop 5TqOgA0V0jteBMq+5wtKO37fwJih4WVmsdVPg9kzdFk5htDrGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWqZNrep9UlqgxIHXDghnSVFbVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjkxMzkxY2YtNmE4ZS0z MTc1LWExMmYtMGNiMGUxNmE5YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLyyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/nUj9uFSVazjDHfbuVPmrH3PF/y1xb43cXByJPb9HxGALzn0+HlvRl paAf3Z/y6Jao9dEhEoz8SteO2OHbG1rhLnlpYygz9CitmDwUwY4QPVTpmnb14OGv R/gQZfJ7DAtlFfm6DUqYEbnWrI9q2SI9MQJYIb+t59RqoD+LSY8qwUJOe5eBjfDA MT1ffRlH8KoPH9PGNxEWMW6lOkWCvupNc4PgtGEo+8YSgLUTC5UZySqdvd6s8FiS unr3D/yX4aoMZ7z2JdVxAb6XGc3m9/edIfT6vAcXtqC0/Ft+CT8HM1RqR/RpYWJd Bbs1PUd3mdAalcLqr6yVt6yl9rSR4a4= -----END CERTIFICATE-----Generated at Mon Oct 20 04:31:31 2025 by rpki-client