$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa File: aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa (raw, json) Hash identifier: jj3TEV0TW7ds8yifH0KMb77iCYSgtgJRpalzJNzuyNA= Subject key identifier: A7:FE:22:AA:0E:72:22:57:CB:B9:AE:13:EC:20:6F:29:98:12:AC:47 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DC568D2A48BCB05F01C80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 10796 IP address blocks: 47.231.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:c5:68:d2:a4:8b:cb:05:f0:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=9c3c576e-09d0-49a6-971f-b1a23753ea02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d7:11:8e:ec:d0:6c:bc:14:09:ac:d0:f7:7c: eb:7e:e6:ce:fb:a6:5e:39:5e:b8:b8:4e:c6:bd:0f: 3b:1f:3d:f6:3e:7f:4f:8d:44:94:3f:47:8c:a3:e8: 92:fd:1e:ed:f9:45:f0:52:1f:ac:cb:d9:47:8a:65: cf:75:7a:c4:38:37:61:71:ec:0f:28:ee:ed:76:59: 9a:c0:fe:67:7f:94:4c:25:c2:f1:d7:25:bc:0f:0f: 30:8f:5f:d1:91:c9:1f:5c:89:62:ce:94:f2:b4:30: 37:d2:fd:e8:d0:6c:f0:52:49:73:9d:51:09:90:4b: cd:85:81:ee:a8:2c:33:99:2b:c6:f2:73:af:e1:0b: 3f:b5:3b:58:fc:0f:b3:39:52:67:20:4b:13:0d:19: 57:66:61:c8:64:76:c1:e3:5f:00:dd:04:a4:52:5e: 94:96:74:e1:fe:6e:e8:aa:57:b8:43:2e:10:17:05: aa:c6:30:e5:3f:36:40:a2:83:13:b6:fc:32:cd:22: 64:83:6d:89:42:c0:ef:90:8c:94:96:79:89:43:a2: 5b:73:d6:0a:2a:b4:f9:f1:54:67:31:14:fb:63:a0: 65:52:a2:1a:34:2f:7c:55:c0:e0:61:3b:46:8a:ad: 25:49:99:59:5b:ba:b5:bb:4a:cf:f9:0e:e8:a4:e3: 24:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FE:22:AA:0E:72:22:57:CB:B9:AE:13:EC:20:6F:29:98:12:AC:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.231.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:20:3e:46:87:be:ce:13:5c:2d:4e:bd:aa:25:04:0f:11:b0: cf:12:68:90:1e:f3:c6:cd:46:f3:40:5d:60:01:77:0b:4f:87: 44:7f:8e:2b:af:62:ea:9f:36:1a:7f:4d:3f:8b:f9:bb:19:e7: cc:e2:b1:08:1e:5f:6c:61:15:b4:cb:90:39:42:92:13:bb:9d: 0c:d1:64:68:d1:4b:fd:10:ce:7e:4a:ac:b8:ce:e7:05:5e:70: af:17:db:46:71:4f:1f:fa:ec:58:30:a2:28:b9:b6:c0:67:41: 89:ca:d6:ed:24:f0:4f:88:d0:e7:97:f5:35:ca:2d:d3:2f:55: 53:fc:59:ab:40:50:5b:33:20:c3:50:dd:b3:9f:fc:9a:0e:41: 18:be:b5:3d:c8:18:dc:6b:d9:de:8e:78:17:f8:54:52:46:4a: 4a:40:d2:e6:ce:8c:e3:f6:d1:17:a2:d9:ad:5b:fb:77:7e:1d: 59:0c:76:3a:53:46:ea:4d:07:21:81:3e:f1:f2:f7:6f:7a:ed: ad:44:82:b9:2a:71:aa:a2:76:4b:74:e6:8c:b3:c3:dc:e1:c8: 92:f8:d7:ab:cd:1d:3c:7a:53:60:02:f8:90:a6:df:dc:88:f0: e8:e9:95:de:86:fd:a0:ad:0e:0c:77:17:a3:3e:b8:c7:8f:df: 10:08:52:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHcVo0qSLywXwHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OWMzYzU3NmUtMDlkMC00OWE2LTk3MWYtYjFhMjM3NTNlYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidcRjuzQbLwUCazQ93zrfubO+6ZeOV64uE7G vQ87Hz32Pn9PjUSUP0eMo+iS/R7t+UXwUh+sy9lHimXPdXrEODdhcewPKO7tdlma wP5nf5RMJcLx1yW8Dw8wj1/RkckfXIlizpTytDA30v3o0GzwUklznVEJkEvNhYHu qCwzmSvG8nOv4Qs/tTtY/A+zOVJnIEsTDRlXZmHIZHbB418A3QSkUl6UlnTh/m7o qle4Qy4QFwWqxjDlPzZAooMTtvwyzSJkg22JQsDvkIyUlnmJQ6Jbc9YKKrT58VRn MRT7Y6BlUqIaNC98VcDgYTtGiq0lSZlZW7q1u0rP+Q7opOMkfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf+IqoOciJXy7muE+wgbymYEqxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWEyZDM4Y2ItM2M2ZS0z NjAxLTg1ODAtOGFkNGZmNDA5YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCL+eEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAgPkaHvs4TXC1OvaolBA8RsM8SaJAe88bNRvNAXWABdwtPh0R/jiuv YuqfNhp/TT+L+bsZ58zisQgeX2xhFbTLkDlCkhO7nQzRZGjRS/0Qzn5KrLjO5wVe cK8X20ZxTx/67Fgwoii5tsBnQYnK1u0k8E+I0OeX9TXKLdMvVVP8WatAUFszIMNQ 3bOf/JoOQRi+tT3IGNxr2d6OeBf4VFJGSkpA0ubOjOP20Rei2a1b+3d+HVkMdjpT RupNByGBPvHy92967a1Egrkqcaqidkt05oyzw9zhyJL416vNHTx6U2AC+JCm39yI 8Ojpld6G/aCtDgx3F6M+uMeP3xAIUko= -----END CERTIFICATE-----Generated at Mon Oct 20 08:39:34 2025 by rpki-client