$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/221d4009-e4fe-36b1-bd99-7aa341393667.roa File: 221d4009-e4fe-36b1-bd99-7aa341393667.roa (raw, json) Hash identifier: QyBVpD4hLRA6GjS7hKaW4ZhcROZxVMkYgIzcjQQ/rhk= Subject key identifier: BA:DA:4B:D3:60:7B:29:0F:59:04:17:5A:24:51:25:88:1B:EC:51:04 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161BB8A4BA441BD65266B40 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/221d4009-e4fe-36b1-bd99-7aa341393667.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 19115 IP address blocks: 47.3.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:bb:8a:4b:a4:41:bd:65:26:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=3d13b224-64e4-42a4-9a5a-868328e79285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:55:f0:49:76:67:5e:9d:1a:31:65:a1:3e: e5:93:16:79:85:9c:f7:91:77:cd:62:55:35:31:19: a3:cc:78:03:22:d2:52:b7:57:bb:cc:3c:8d:74:5e: fb:b9:38:d4:5a:c7:79:bd:54:45:ae:fa:36:38:46: 7f:43:37:ba:50:59:25:d3:2c:09:b8:a7:31:9b:9d: e3:99:ee:e2:e2:27:51:83:68:c3:4a:04:32:f5:05: b3:f7:e4:6a:b7:fb:f1:83:96:3f:66:42:7e:c0:dd: 3c:53:99:9e:d2:9f:2a:3a:fd:53:76:65:eb:eb:20: ce:0e:f2:4e:84:72:a6:f7:36:dd:ff:4c:18:16:92: f3:96:b2:c8:12:b8:9e:64:7a:a5:34:5a:59:3d:d2: 2e:d3:3c:b2:e0:9e:d6:6f:62:a8:6a:a2:b7:a9:ed: 81:89:fa:33:a8:12:b4:c6:d9:8e:f9:a6:db:40:63: 69:ed:22:9b:d4:e3:28:ec:b7:25:15:8f:c9:77:1b: 60:e9:85:22:5e:50:59:52:8d:18:40:9e:37:07:4c: 75:bd:72:16:f6:90:20:7e:d2:af:bb:2c:98:73:1c: 69:ef:3d:88:7a:89:73:6a:af:c0:a1:d4:e4:16:26: 02:ae:b9:a8:9d:81:c0:1d:62:42:75:13:22:c3:f9: 42:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DA:4B:D3:60:7B:29:0F:59:04:17:5A:24:51:25:88:1B:EC:51:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/221d4009-e4fe-36b1-bd99-7aa341393667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.3.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:c7:c8:b5:f2:97:7d:7a:76:c7:ed:7a:63:9f:6b:73:73:3d: a2:8b:d2:95:dc:66:2f:a4:f5:9c:d3:58:7e:14:76:c4:c6:d5: 9e:a1:20:71:98:a8:87:53:3e:85:40:45:ce:4e:96:ee:be:4b: d8:7f:07:d1:b8:84:77:9b:fa:e7:e6:d3:26:c3:c0:2f:b0:e8: e5:17:a8:71:8e:d0:12:83:3c:81:7a:8c:ff:9d:0c:fb:53:f6: a2:fb:23:66:64:4e:78:8f:b5:3d:6c:89:97:41:a0:30:1d:50: 7f:96:d0:65:8f:c1:58:c8:b9:38:ef:2a:b5:12:34:16:5c:43: 89:e9:8a:ea:d7:d0:50:83:d7:a3:87:9d:48:40:43:93:47:a2: 25:97:a4:e7:47:87:52:d1:5d:7d:ce:ad:b6:33:51:3b:58:0a: 9a:ca:9f:f6:43:9c:6e:b6:db:e7:2d:39:fc:09:7e:c2:42:7c: 82:b4:95:4f:8f:cd:ff:a5:79:2c:ce:57:e4:42:e7:ba:d3:53: fb:d6:84:96:60:30:53:e5:ca:3a:e3:e0:95:57:54:20:47:8a: 1f:a8:2c:75:82:88:84:8b:c1:08:9d:fe:14:be:d5:9c:f4:71: eb:11:30:07:20:75:d8:ef:bc:bb:46:95:73:84:02:bd:40:4b: 32:b4:8e:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYbuKS6RBvWUma0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk M2QxM2IyMjQtNjRlNC00MmE0LTlhNWEtODY4MzI4ZTc5Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsItV8El2Z16dGjFloT7lkxZ5hZz3kXfNYlU1 MRmjzHgDItJSt1e7zDyNdF77uTjUWsd5vVRFrvo2OEZ/Qze6UFkl0ywJuKcxm53j me7i4idRg2jDSgQy9QWz9+Rqt/vxg5Y/ZkJ+wN08U5me0p8qOv1TdmXr6yDODvJO hHKm9zbd/0wYFpLzlrLIErieZHqlNFpZPdIu0zyy4J7Wb2KoaqK3qe2BifozqBK0 xtmO+abbQGNp7SKb1OMo7LclFY/Jdxtg6YUiXlBZUo0YQJ43B0x1vXIW9pAgftKv uyyYcxxp7z2Ieolzaq/AodTkFiYCrrmonYHAHWJCdRMiw/lCawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLraS9NgeykPWQQXWiRRJYgb7FEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjIxZDQwMDktZTRmZS0z NmIxLWJkOTktN2FhMzQxMzkzNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELwMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMPHyLXyl316dsftemOfa3NzPaKL0pXcZi+k9ZzTWH4UdsTG1Z6hIHGY qIdTPoVARc5Olu6+S9h/B9G4hHeb+ufm0ybDwC+w6OUXqHGO0BKDPIF6jP+dDPtT 9qL7I2ZkTniPtT1siZdBoDAdUH+W0GWPwVjIuTjvKrUSNBZcQ4npiurX0FCD16OH nUhAQ5NHoiWXpOdHh1LRXX3OrbYzUTtYCprKn/ZDnG622+ctOfwJfsJCfIK0lU+P zf+leSzOV+RC57rTU/vWhJZgMFPlyjrj4JVXVCBHih+oLHWCiISLwQid/hS+1Zz0 cesRMAcgddjvvLtGlXOEAr1ASzK0jlk= -----END CERTIFICATE-----Generated at Tue Aug 5 20:20:56 2025 by rpki-client