$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/867a310e-05c3-3f93-975a-71784a2e9647.roa File: 867a310e-05c3-3f93-975a-71784a2e9647.roa (raw, json) Hash identifier: Ijtq68CjuibdCmPh9WoVl09jyi3auofwJPy1uIH9Zt0= Subject key identifier: 84:0E:A4:34:55:42:2B:48:47:1C:A3:0C:A7:17:EA:93:2A:CB:95:56 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F17323D14F4CCD0D0BB7425E0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/867a310e-05c3-3f93-975a-71784a2e9647.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 0 IP address blocks: 47.43.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:3d:14:f4:cc:d0:d0:bb:74:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=603586db-e7fa-4b3d-bb10-714e854f4e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:b8:5a:d1:52:23:a8:30:0a:71:84:c5:3f: c0:aa:2d:83:0b:17:bd:70:6f:d8:54:4f:a7:16:cc: a2:56:7c:a1:82:49:57:49:64:4f:cb:89:8c:04:9e: 39:13:e7:9a:3c:64:f0:59:49:68:ab:b3:b8:87:e6: 77:2d:a1:9c:05:bd:d2:ac:10:71:cd:93:1a:86:42: 24:51:04:5b:ae:bf:8c:a3:4a:59:b9:86:b4:4d:4d: 5a:eb:c1:10:10:0b:48:76:34:36:f6:63:fb:af:9c: 3d:2a:51:35:c5:a1:63:42:2b:fd:a9:f1:95:7e:45: a5:2e:4f:06:4d:31:d2:e6:8e:f6:ff:ae:2d:9e:2b: 19:80:c5:04:07:fb:46:a8:b7:bf:74:1d:6d:e3:bc: 24:55:0b:08:ca:cd:a0:25:c9:04:70:60:82:68:10: eb:1b:44:f2:da:b8:56:3d:97:1c:35:d2:fd:c1:62: 41:45:cd:a3:41:70:be:f0:39:a5:45:8b:0e:19:90: 71:46:c3:b6:c5:bd:63:ec:e2:a4:44:ce:f5:a1:f6: 8c:b2:e6:ee:92:27:e5:45:b7:8d:78:d1:f0:d1:18: 73:2d:cd:19:2e:a0:7d:2b:c4:ba:30:92:b4:a1:4e: 65:e1:41:70:bd:32:62:52:f5:3a:99:83:08:c5:58: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0E:A4:34:55:42:2B:48:47:1C:A3:0C:A7:17:EA:93:2A:CB:95:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/867a310e-05c3-3f93-975a-71784a2e9647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.43.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:07:9f:7e:7f:b6:49:07:8b:ed:83:23:53:40:c0:9e:fb:c3: 66:ec:9a:0d:df:3c:3f:95:84:20:ec:c6:0f:0f:25:52:78:80: 81:d8:ef:a5:47:4a:dc:76:a4:9d:63:b7:b4:cf:73:89:bc:54: bb:23:cc:27:03:5b:95:4c:c3:96:d7:32:75:81:9c:08:31:45: f8:d7:4f:20:55:0a:24:c9:4f:b9:dd:b2:43:47:65:5e:1e:26: ec:61:e8:f8:07:53:d8:ee:f2:c6:f9:1b:c0:ad:2d:8e:7f:9d: b5:36:fb:90:86:45:98:fa:3d:1f:78:79:91:f5:11:7a:58:92: 1c:b4:d2:69:4e:1e:b5:0e:84:a0:6f:88:4e:d4:51:5b:bb:2d: da:c5:c3:17:4d:c0:bb:a6:e8:ac:f0:91:0c:a9:cf:83:ef:27: a3:ea:f2:86:97:8d:a0:e0:c5:eb:4d:87:46:e1:a9:9f:97:9c: 70:91:c0:14:13:30:30:b2:2a:f3:1e:30:3a:f8:bb:09:b3:37: 0e:e3:57:84:40:c2:c3:55:30:f3:61:3a:ee:ee:54:d4:6f:df: 21:d5:b6:03:83:fd:da:9a:d4:36:b8:c2:fb:b9:a7:e1:a7:26: f9:01:3f:f2:b3:eb:91:55:76:b7:08:fa:da:d2:82:86:f1:db: c6:00:e0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMj0U9MzQ0Lt0JeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NjAzNTg2ZGItZTdmYS00YjNkLWJiMTAtNzE0ZTg1NGY0ZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW24WtFSI6gwCnGExT/Aqi2DCxe9cG/YVE+n FsyiVnyhgklXSWRPy4mMBJ45E+eaPGTwWUloq7O4h+Z3LaGcBb3SrBBxzZMahkIk UQRbrr+Mo0pZuYa0TU1a68EQEAtIdjQ29mP7r5w9KlE1xaFjQiv9qfGVfkWlLk8G TTHS5o72/64tnisZgMUEB/tGqLe/dB1t47wkVQsIys2gJckEcGCCaBDrG0Ty2rhW PZccNdL9wWJBRc2jQXC+8DmlRYsOGZBxRsO2xb1j7OKkRM71ofaMsubukiflRbeN eNHw0RhzLc0ZLqB9K8S6MJK0oU5l4UFwvTJiUvU6mYMIxVgh+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQOpDRVQitIRxyjDKcX6pMqy5VWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODY3YTMxMGUtMDVjMy0z ZjkzLTk3NWEtNzE3ODRhMmU5NjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALyt9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMHn35/tkkHi+2DI1NAwJ77w2bsmg3fPD+VhCDsxg8PJVJ4gIHY76VH Stx2pJ1jt7TPc4m8VLsjzCcDW5VMw5bXMnWBnAgxRfjXTyBVCiTJT7ndskNHZV4e Juxh6PgHU9ju8sb5G8CtLY5/nbU2+5CGRZj6PR94eZH1EXpYkhy00mlOHrUOhKBv iE7UUVu7LdrFwxdNwLum6KzwkQypz4PvJ6Pq8oaXjaDgxetNh0bhqZ+XnHCRwBQT MDCyKvMeMDr4uwmzNw7jV4RAwsNVMPNhOu7uVNRv3yHVtgOD/dqa1Da4wvu5p+Gn JvkBP/Kz65FVdrcI+trSgobx28YA4CE= -----END CERTIFICATE-----Generated at Sun Sep 20 18:51:43 2026 by rpki-client