$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47a8af5a-5244-37bb-aa84-b31e899f8851.roa File: 47a8af5a-5244-37bb-aa84-b31e899f8851.roa (raw, json) Hash identifier: FoUTvQILzFAYpCfHdESqscHdnigZM3VNvQ6/vjqNzg4= Subject key identifier: BF:0F:D1:D3:95:83:ED:32:4A:3A:03:A9:BA:78:7D:B9:B8:42:B6:F5 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DE10060E072717EF63040 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47a8af5a-5244-37bb-aa84-b31e899f8851.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 47.41.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:e1:00:60:e0:72:71:7e:f6:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=b42373c0-8999-4652-a87b-8d0f04d63c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:49:2a:67:c1:9d:4e:8a:cd:90:80:27:cf:3b: 37:f8:1c:d7:bf:5f:c1:d1:72:85:48:e5:36:44:6f: d0:ef:64:d0:f2:28:ac:1e:a4:ea:d1:34:14:81:bf: 51:b0:a4:2a:df:84:3a:62:1b:01:72:52:ab:52:c2: 6c:2e:2e:cc:6e:91:e5:9b:4c:86:02:7c:43:1b:6b: bf:2d:09:08:95:fd:e5:2f:d3:48:f6:6f:11:2d:73: 73:0b:94:f1:aa:82:73:e1:1a:a4:2e:dd:70:04:ab: 37:f1:85:85:d6:f4:83:cc:d9:08:29:a2:21:f9:7c: 08:df:89:83:57:5b:57:e5:50:9c:25:df:4d:a2:5d: d9:b3:70:e7:85:57:9c:7c:86:79:2b:5c:66:b2:40: 83:d5:8c:25:c3:40:bf:e2:8d:25:47:4d:14:92:cf: 5d:a5:bf:34:75:6f:79:77:a4:75:b7:bd:99:2b:40: f2:48:84:e9:97:ab:52:3c:89:f7:f1:e8:33:df:d0: dd:71:e7:1f:14:30:c3:0c:2e:2a:c4:87:6e:6f:46: 52:47:d4:56:87:d3:bb:f6:9b:44:50:2c:91:b2:dc: 04:dd:bb:d5:a8:ce:a9:13:08:27:2d:b5:f7:96:b0: 98:a9:f3:e6:bf:fa:04:e7:cd:9f:f7:36:02:de:a0: 43:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0F:D1:D3:95:83:ED:32:4A:3A:03:A9:BA:78:7D:B9:B8:42:B6:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/47a8af5a-5244-37bb-aa84-b31e899f8851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.41.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:eb:c6:93:cc:46:13:c5:f8:83:86:25:80:70:a1:77:79:ad: dd:c3:9a:92:31:81:a7:2f:1c:3a:90:9c:5e:a0:9c:7a:aa:86: 5e:46:3c:36:60:ed:ce:99:5f:98:ad:f6:49:1a:0d:59:16:8b: 7d:a5:53:2f:80:48:64:16:b6:14:ff:40:1c:4f:3f:11:80:20: cf:9f:13:51:7c:65:aa:e5:99:09:65:76:e9:81:21:c4:28:8e: e3:cb:00:b7:76:2c:77:ce:ba:bb:34:91:60:cc:d2:1d:02:93: dd:24:04:6b:66:bd:78:9e:4f:ca:48:a5:3a:c2:6e:41:bb:36: dd:29:d2:3d:4e:d6:2b:35:06:9c:aa:f6:c8:57:01:ca:1a:db: dc:41:dc:f6:c4:59:41:79:e1:71:54:58:10:88:cd:fc:53:c4: 5e:e2:b8:d3:08:ef:dc:a9:32:0d:44:9b:1f:7d:1b:6d:bd:a4: 88:01:d7:c2:f0:03:9b:62:c7:6b:d8:f6:9d:34:5d:8c:90:78: 65:66:95:f4:1c:b3:0e:f0:f0:05:bc:82:ff:92:70:bb:6c:ae: d8:9f:9c:4d:62:43:14:8b:00:47:76:1a:eb:bf:29:bc:f7:2a: d1:62:3a:f4:a9:61:96:23:90:b1:de:4e:df:a8:73:45:17:62: 72:8b:7a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHeEAYOBycX72MEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YjQyMzczYzAtODk5OS00NjUyLWE4N2ItOGQwZjA0ZDYzYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kkqZ8GdTorNkIAnzzs3+BzXv1/B0XKFSOU2 RG/Q72TQ8iisHqTq0TQUgb9RsKQq34Q6YhsBclKrUsJsLi7MbpHlm0yGAnxDG2u/ LQkIlf3lL9NI9m8RLXNzC5TxqoJz4RqkLt1wBKs38YWF1vSDzNkIKaIh+XwI34mD V1tX5VCcJd9Nol3Zs3DnhVecfIZ5K1xmskCD1Ywlw0C/4o0lR00Uks9dpb80dW95 d6R1t72ZK0DySITpl6tSPIn38egz39DdcecfFDDDDC4qxIdub0ZSR9RWh9O79ptE UCyRstwE3bvVqM6pEwgnLbX3lrCYqfPmv/oE582f9zYC3qBDiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8P0dOVg+0ySjoDqbp4fbm4Qrb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDdhOGFmNWEtNTI0NC0z N2JiLWFhODQtYjMxZTg5OWY4ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLykAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPrxpPMRhPF+IOGJYBwoXd5rd3DmpIxgacvHDqQnF6gnHqqhl5GPDZg 7c6ZX5it9kkaDVkWi32lUy+ASGQWthT/QBxPPxGAIM+fE1F8ZarlmQlldumBIcQo juPLALd2LHfOurs0kWDM0h0Ck90kBGtmvXieT8pIpTrCbkG7Nt0p0j1O1is1Bpyq 9shXAcoa29xB3PbEWUF54XFUWBCIzfxTxF7iuNMI79ypMg1Emx99G229pIgB18Lw A5tix2vY9p00XYyQeGVmlfQcsw7w8AW8gv+ScLtsrtifnE1iQxSLAEd2Guu/Kbz3 KtFiOvSpYZYjkLHeTt+oc0UXYnKLemE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:09:43 2025 by rpki-client