$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aac3f20f-0648-3043-bea5-1367318becd8.roa File: aac3f20f-0648-3043-bea5-1367318becd8.roa (raw, json) Hash identifier: bqq3jrWfmpmxnkZPLqmbjNvNkJWESH9Giy1i7FXIvyU= Subject key identifier: 71:68:0D:CD:BA:B8:26:70:E5:7E:7D:28:25:E3:67:5E:58:71:A4:26 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F0AA230AC105B6C24C4711900 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aac3f20f-0648-3043-bea5-1367318becd8.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 0 IP address blocks: 47.43.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:30:ac:10:5b:6c:24:c4:71:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=843c6060-d5ac-4f84-bb0f-f9d94902a14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:81:2b:76:81:1a:58:bb:29:c6:5d:0f:c1: 6c:39:75:d9:b9:a2:0c:f5:96:2a:68:66:da:3f:23: 21:de:ce:fa:25:16:cc:6b:58:db:ac:aa:d4:d8:ac: 8a:d1:88:fd:16:86:64:0e:5c:8d:35:71:77:dc:71: a0:f8:50:53:a9:36:69:95:13:b4:20:47:76:33:f2: de:b1:31:38:82:b9:e8:7f:4a:1e:5a:ea:b0:62:b1: d8:7d:ef:1a:3c:eb:db:87:dc:0a:1c:8d:de:92:a3: 45:60:a8:6e:84:1b:bb:1f:b5:8a:c0:f7:6e:11:39: 8f:28:a7:84:08:b9:95:ea:f0:72:8b:93:5b:f4:db: 72:60:c5:5b:63:b0:6d:8a:6f:16:51:9e:b6:98:3d: 64:6e:bb:d1:d3:00:78:1f:20:4a:74:f8:54:1c:99: e0:32:79:49:9a:99:e8:c7:e8:91:5e:b1:4e:1d:0d: fa:a7:fd:fb:f4:2e:2a:75:05:e2:bd:bb:ce:8c:7e: 2e:50:57:29:0c:0d:4e:4b:03:bd:96:36:9f:f8:4a: 8e:6e:45:0c:73:24:d0:cb:25:6b:92:8e:a3:b7:81: 03:79:4d:bb:de:7d:9c:7f:58:29:39:f4:ac:c1:79: f4:f6:39:82:56:49:d9:b8:94:c7:f9:55:c2:62:eb: 5b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:68:0D:CD:BA:B8:26:70:E5:7E:7D:28:25:E3:67:5E:58:71:A4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aac3f20f-0648-3043-bea5-1367318becd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.43.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:72:43:1f:19:42:3c:a5:14:4c:26:41:14:56:fd:7e:80:aa: 33:7b:1e:2f:29:47:9b:76:4d:bf:83:93:f0:d2:25:31:d4:b2: d7:40:62:95:3a:0a:2b:88:ee:72:ae:4b:15:01:d3:66:ad:9f: 69:47:2e:e1:8e:22:a6:95:26:2b:f6:f4:01:af:9c:3d:84:af: 07:0c:f5:f2:3c:41:f6:8a:79:92:c1:a7:a9:e1:bb:c8:ce:b9: aa:96:41:8d:64:97:74:79:0d:14:be:87:22:f4:e3:75:2e:ec: 55:05:1e:f2:18:87:6f:2f:c8:97:a7:79:c9:1c:93:6b:47:a7: 7d:ce:a3:94:84:37:24:bf:52:41:5b:3d:21:44:a5:09:2c:6c: 61:2c:04:a9:09:74:be:66:07:33:de:27:66:e3:4d:b6:df:ae: 77:a9:bc:d2:8b:66:be:34:a4:d8:db:ca:a6:d2:a4:9b:b5:da: 09:bd:88:6b:d4:82:b6:5e:b4:d2:00:dc:95:17:06:9d:76:5f: 92:b3:4d:b1:1d:1d:75:42:14:01:98:ab:05:ec:99:2e:f4:06: 84:b2:fb:9b:62:81:28:1a:77:f7:cf:48:23:a8:18:45:2e:26: ae:7b:ed:cf:cf:d0:c5:c3:54:9f:5f:68:b3:8e:91:ec:60:61: be:74:01:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KojCsEFtsJMRxGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk ODQzYzYwNjAtZDVhYy00Zjg0LWJiMGYtZjlkOTQ5MDJhMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuGBK3aBGli7KcZdD8FsOXXZuaIM9ZYqaGba PyMh3s76JRbMa1jbrKrU2KyK0Yj9FoZkDlyNNXF33HGg+FBTqTZplRO0IEd2M/Le sTE4grnof0oeWuqwYrHYfe8aPOvbh9wKHI3ekqNFYKhuhBu7H7WKwPduETmPKKeE CLmV6vByi5Nb9NtyYMVbY7Btim8WUZ62mD1kbrvR0wB4HyBKdPhUHJngMnlJmpno x+iRXrFOHQ36p/379C4qdQXivbvOjH4uUFcpDA1OSwO9ljaf+EqObkUMcyTQyyVr ko6jt4EDeU273n2cf1gpOfSswXn09jmCVknZuJTH+VXCYutbMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFoDc26uCZw5X59KCXjZ15YcaQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWFjM2YyMGYtMDY0OC0z MDQzLWJlYTUtMTM2NzMxOGJlY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLytsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5yQx8ZQjylFEwmQRRW/X6AqjN7Hi8pR5t2Tb+Dk/DSJTHUstdAYpU6 CiuI7nKuSxUB02atn2lHLuGOIqaVJiv29AGvnD2ErwcM9fI8QfaKeZLBp6nhu8jO uaqWQY1kl3R5DRS+hyL043Uu7FUFHvIYh28vyJeneckck2tHp33Oo5SENyS/UkFb PSFEpQksbGEsBKkJdL5mBzPeJ2bjTbbfrnepvNKLZr40pNjbyqbSpJu12gm9iGvU grZetNIA3JUXBp12X5KzTbEdHXVCFAGYqwXsmS70BoSy+5tigSgad/fPSCOoGEUu Jq577c/P0MXDVJ9faLOOkexgYb50AQw= -----END CERTIFICATE-----Generated at Mon Sep 28 10:04:34 2026 by rpki-client