$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9db36d9a-c527-3241-8617-2da9b097c182.roa File: 9db36d9a-c527-3241-8617-2da9b097c182.roa (raw, json) Hash identifier: r2z2CG0blgnPgh27emLphcdo7jLat5w+Q74rln+bct0= Subject key identifier: E3:C9:1E:A4:85:6C:97:01:7C:A1:04:E5:DF:BC:B0:47:AD:8C:48:5A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B5571E359C13B85EC06709540 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9db36d9a-c527-3241-8617-2da9b097c182.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 401153 IP address blocks: 47.49.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e3:59:c1:3b:85:ec:06:70:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=ff573d33-a923-4e96-b18c-0046c2e89d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:4b:c6:c2:d4:d8:60:b7:f2:7f:d1:38:2b: 45:41:b6:d9:2d:26:ca:02:25:4b:80:b3:8c:58:c3: cc:f1:ca:fe:ae:02:20:c9:3b:55:17:76:92:c4:14: 56:0f:f1:d3:ca:a7:36:f0:51:7d:e8:dc:c4:b8:ae: 0a:89:de:ec:48:cb:d1:a5:f8:41:94:48:4f:e0:24: 5c:21:31:fe:71:22:44:5c:e2:ed:f8:44:61:ff:66: a1:fa:88:94:2d:19:ea:a9:3b:0f:7c:fe:a8:ba:a3: e7:2f:82:97:1d:2f:40:f3:7f:3c:e4:83:0a:5e:72: cc:03:51:40:e9:d1:6b:ae:1c:68:d3:85:44:77:bb: 48:16:d0:27:5e:93:19:23:25:e8:f7:70:4a:15:33: 27:f6:9a:73:0d:6f:54:c8:b6:de:cf:af:fc:cc:17: 58:b0:9f:43:c1:01:ad:52:4c:97:cc:b6:a1:1b:df: 73:c3:d7:93:ea:e0:ff:0d:13:b2:cc:10:43:0a:4b: b0:80:f3:20:9e:d9:86:e0:b7:c5:d0:82:f1:76:7c: d5:fd:e7:83:cb:09:c5:aa:40:07:77:f0:7e:5e:56: 80:3b:45:86:b1:9e:7f:99:a2:12:88:52:e7:a2:44: 24:89:ad:d1:ef:db:dd:02:47:d2:02:46:60:1d:c1: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C9:1E:A4:85:6C:97:01:7C:A1:04:E5:DF:BC:B0:47:AD:8C:48:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9db36d9a-c527-3241-8617-2da9b097c182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.49.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2c:6f:52:c6:e1:22:5b:82:f0:1f:25:65:b7:da:9f:9c:ae: f8:17:8c:e4:0d:2b:97:7b:19:79:e2:63:59:3f:6c:6f:98:43: 90:61:17:13:04:df:32:60:a4:2d:25:61:61:08:28:dc:68:d8: 1d:38:ab:75:92:b6:1e:2e:d1:89:e4:ad:39:62:25:78:46:03: 62:60:19:55:3d:7a:a6:33:d9:92:f3:f6:35:d7:2d:54:7b:39: 18:b3:28:9c:4d:80:d6:bb:18:e7:8f:86:af:6a:10:6a:1f:22: 45:5d:98:7a:d0:f3:43:87:45:d8:e9:2f:6a:8c:80:2d:4c:a1: 4a:7b:a4:b0:93:91:04:24:ca:55:c9:98:97:81:55:4a:f9:54: 66:b4:63:cd:33:a9:12:08:71:80:70:fd:32:df:a5:83:80:40: 4c:ae:0e:ea:9e:93:14:3f:e0:36:95:56:f3:b5:04:70:a5:5b: 02:52:fb:e5:53:07:6d:c6:a4:b2:c8:cb:ab:a0:08:87:ee:0c: 2a:54:dd:de:e5:5c:5c:f0:75:14:b0:b0:e5:1f:80:23:8a:2d: 22:70:03:3f:bf:64:12:a5:e6:42:86:60:a7:8e:98:a6:ad:cd: 75:b8:d5:ee:67:aa:ac:ff:6e:a3:9a:49:3c:04:f4:d3:47:56: 1b:f7:9b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVceNZwTuF7AZwlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZmY1NzNkMzMtYTkyMy00ZTk2LWIxOGMtMDA0NmMyZTg5ZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbBLxsLU2GC38n/ROCtFQbbZLSbKAiVLgLOM WMPM8cr+rgIgyTtVF3aSxBRWD/HTyqc28FF96NzEuK4Kid7sSMvRpfhBlEhP4CRc ITH+cSJEXOLt+ERh/2ah+oiULRnqqTsPfP6ouqPnL4KXHS9A83885IMKXnLMA1FA 6dFrrhxo04VEd7tIFtAnXpMZIyXo93BKFTMn9ppzDW9UyLbez6/8zBdYsJ9DwQGt UkyXzLahG99zw9eT6uD/DROyzBBDCkuwgPMgntmG4LfF0ILxdnzV/eeDywnFqkAH d/B+XlaAO0WGsZ5/maISiFLnokQkia3R79vdAkfSAkZgHcFnuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPJHqSFbJcBfKEE5d+8sEetjEhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWRiMzZkOWEtYzUyNy0z MjQxLTg2MTctMmRhOWIwOTdjMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALzF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYsb1LG4SJbgvAfJWW32p+crvgXjOQNK5d7GXniY1k/bG+YQ5BhFxME 3zJgpC0lYWEIKNxo2B04q3WSth4u0YnkrTliJXhGA2JgGVU9eqYz2ZLz9jXXLVR7 ORizKJxNgNa7GOePhq9qEGofIkVdmHrQ80OHRdjpL2qMgC1MoUp7pLCTkQQkylXJ mJeBVUr5VGa0Y80zqRIIcYBw/TLfpYOAQEyuDuqekxQ/4DaVVvO1BHClWwJS++VT B23GpLLIy6ugCIfuDCpU3d7lXFzwdRSwsOUfgCOKLSJwAz+/ZBKl5kKGYKeOmKat zXW41e5nqqz/bqOaSTwE9NNHVhv3m2Y= -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:30 2025 by rpki-client