$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa File: 291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa (raw, json) Hash identifier: r0sU3Lzs3e39JbHKzL0KeZZdlJojf8i22Kb+bmzod8w= Subject key identifier: 04:66:48:BB:69:B6:42:7A:D1:C0:EA:F5:D3:D8:6B:54:53:41:1D:D9 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584AA161E57B289DA0E612D8FE80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 20115 IP address blocks: 47.44.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:e5:7b:28:9d:a0:e6:12:d8:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=5bf27fa0-2b7b-4ca6-bff6-5df3b4e09bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:22:99:4d:ad:b8:3f:b7:65:77:0d:76:ce:41: 7a:1c:c2:1b:37:b0:ca:48:ee:b2:10:e7:0a:4e:18: 76:31:24:4d:fa:61:a0:e4:48:1a:8d:52:7e:af:16: be:0d:22:47:d0:53:3d:97:93:9b:5c:9f:62:c7:e8: aa:b9:18:2e:d0:4b:68:67:84:00:94:0c:84:81:bf: 24:f0:5e:f2:5d:f5:63:07:d0:7b:76:1a:14:a4:f8: ad:c1:05:85:98:45:5b:01:c6:42:65:16:ba:c9:ce: 6b:d5:44:37:fc:1d:c1:3f:5d:ba:5b:2f:7a:4a:c0: ce:69:1f:25:d9:46:cf:63:35:ec:91:ca:32:a1:98: 75:cf:fd:b0:ec:91:c4:e2:73:16:6e:b6:d0:12:1c: 19:e6:8f:63:64:ec:2d:d9:d0:07:b8:95:0f:38:03: a9:05:eb:b2:4d:4a:e3:81:7c:95:0b:d3:d4:9b:ce: e5:e2:ca:1b:37:69:9d:4a:90:b7:11:49:b2:47:20: 70:49:a1:76:cd:ea:65:c1:d3:35:a2:1c:9b:55:36: 5c:25:1c:3e:99:cd:de:6a:0a:0a:f4:8c:3c:5b:4e: 4d:a3:da:d9:ed:b7:dd:98:9c:05:66:f5:27:7e:3e: 73:16:97:41:bb:49:ea:c1:32:86:4b:3d:71:08:31: 83:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:66:48:BB:69:B6:42:7A:D1:C0:EA:F5:D3:D8:6B:54:53:41:1D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/291391cf-6a8e-3175-a12f-0cb0e16a9b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.44.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:b9:cc:60:57:a3:38:da:1c:41:3b:b0:f2:0d:57:7e:41:2f: 59:fc:1c:71:de:1e:ae:c0:c6:c6:59:30:e0:39:94:d3:41:ba: ad:66:6b:72:ef:5b:9b:cb:fb:c9:a5:5f:7c:90:ea:17:64:fb: 13:a2:2a:26:6c:06:bd:6a:5e:7f:2b:99:44:21:13:51:fd:36: 05:8e:6b:89:1d:46:f7:00:6d:44:c2:03:ab:6a:47:e9:98:5f: 72:d8:78:30:00:cb:3a:e3:ae:14:60:0c:74:a6:14:9d:c5:15: 78:83:64:b3:e4:2f:32:35:28:9a:64:e6:94:51:e1:3d:55:5d: 77:29:a9:b9:03:de:d0:c4:01:e5:ca:54:16:91:fe:b3:15:a7: b6:b8:9f:b3:f4:ea:71:fb:11:97:02:9f:ef:9b:63:24:c9:07: 18:70:04:0d:89:9b:01:a4:a9:dc:4d:68:c7:05:08:e0:46:1f: a8:15:83:d3:78:c4:f7:9e:98:78:bb:84:53:5d:3d:89:b2:25: 20:bb:3c:4e:14:60:fe:a2:04:ce:12:6b:a8:44:e8:96:d5:ed: 00:92:01:58:4c:90:f3:da:ae:7c:ea:a5:75:85:d6:81:0b:c1: b8:82:8b:bc:de:08:61:a3:d5:47:52:2f:4a:96:52:f8:0b:5b: 23:2c:b5:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYeV7KJ2g5hLY/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NWJmMjdmYTAtMmI3Yi00Y2E2LWJmZjYtNWRmM2I0ZTA5YmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSKZTa24P7dldw12zkF6HMIbN7DKSO6yEOcK Thh2MSRN+mGg5EgajVJ+rxa+DSJH0FM9l5ObXJ9ix+iquRgu0EtoZ4QAlAyEgb8k 8F7yXfVjB9B7dhoUpPitwQWFmEVbAcZCZRa6yc5r1UQ3/B3BP126Wy96SsDOaR8l 2UbPYzXskcoyoZh1z/2w7JHE4nMWbrbQEhwZ5o9jZOwt2dAHuJUPOAOpBeuyTUrj gXyVC9PUm87l4sobN2mdSpC3EUmyRyBwSaF2zeplwdM1ohybVTZcJRw+mc3eagoK 9Iw8W05No9rZ7bfdmJwFZvUnfj5zFpdBu0nqwTKGSz1xCDGDGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARmSLtptkJ60cDq9dPYa1RTQR3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjkxMzkxY2YtNmE4ZS0z MTc1LWExMmYtMGNiMGUxNmE5YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLyyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMS5zGBXozjaHEE7sPINV35BL1n8HHHeHq7AxsZZMOA5lNNBuq1ma3Lv W5vL+8mlX3yQ6hdk+xOiKiZsBr1qXn8rmUQhE1H9NgWOa4kdRvcAbUTCA6tqR+mY X3LYeDAAyzrjrhRgDHSmFJ3FFXiDZLPkLzI1KJpk5pRR4T1VXXcpqbkD3tDEAeXK VBaR/rMVp7a4n7P06nH7EZcCn++bYyTJBxhwBA2JmwGkqdxNaMcFCOBGH6gVg9N4 xPeemHi7hFNdPYmyJSC7PE4UYP6iBM4Sa6hE6JbV7QCSAVhMkPParnzqpXWF1oEL wbiCi7zeCGGj1UdSL0qWUvgLWyMstc0= -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:25 2025 by rpki-client