$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3e2bbc3c-5fc1-3ac1-87d6-c2cb9598a7d3.roa File: 3e2bbc3c-5fc1-3ac1-87d6-c2cb9598a7d3.roa (raw, json) Hash identifier: KufVVTIEzNMqz6M37QxbpazWV8u7W0czPND5TfdVWCY= Subject key identifier: 86:6E:86:21:4F:32:7D:51:C6:10:AF:4A:91:FA:00:0B:EE:C2:79:61 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584F655DD2D830BBCBAB6AD83740 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3e2bbc3c-5fc1-3ac1-87d6-c2cb9598a7d3.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 47.44.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:d2:d8:30:bb:cb:ab:6a:d8:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=0247bd74-85b1-46c5-8cf7-d88ad97e9f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d0:d0:8d:02:78:11:a9:10:eb:b5:fd:eb:50: 57:c3:37:9a:05:a1:ac:1f:66:65:9a:b1:38:4d:98: 1c:73:29:e6:5f:c7:de:a0:27:cd:e9:75:7a:cc:bb: e3:9d:f6:57:75:2f:3c:ef:e6:54:1d:18:3d:5d:96: 0a:92:f9:be:77:d4:ad:17:4f:57:0c:da:26:4b:1b: 85:b9:2e:99:d3:59:6e:53:cd:1e:11:7f:90:33:e5: fd:11:6b:60:75:82:de:37:13:bb:dd:29:5e:9b:ef: 97:d8:29:8f:a4:9b:b3:ee:9c:66:81:88:a1:1d:e2: 09:4b:a4:fb:ae:85:96:a5:93:e2:ad:15:ed:73:4c: 8a:e9:4d:16:bd:bd:a3:a2:aa:95:23:42:0f:80:6f: 55:c9:4a:d0:3b:85:d6:04:35:70:f8:27:4d:7e:0f: 33:50:15:b3:ab:9b:1f:0a:4d:73:f2:4d:26:af:6e: 54:18:9f:65:db:f2:f8:98:9f:03:29:f6:1e:60:3a: 13:aa:55:c1:c2:67:3d:40:a5:59:e1:22:23:ea:82: 5a:be:7c:3e:72:2a:1e:64:ad:09:bf:18:1d:8c:6f: cb:37:c3:17:60:6a:9a:5c:c2:29:32:8a:c0:fa:ed: 09:a1:1a:5e:37:46:8c:5b:0c:23:c9:eb:87:ae:97: 55:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6E:86:21:4F:32:7D:51:C6:10:AF:4A:91:FA:00:0B:EE:C2:79:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3e2bbc3c-5fc1-3ac1-87d6-c2cb9598a7d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.44.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:b9:75:49:83:48:b4:f1:94:3c:a7:c7:2a:e9:d5:a2:62:23: 1d:68:57:b3:61:c8:c0:94:51:3b:a1:4f:4e:b9:6c:4d:eb:d4: 64:ee:ae:75:ce:73:02:b3:e9:41:eb:09:7f:71:c6:5e:04:85: 94:12:71:24:98:f8:fc:3f:5d:51:28:ce:8e:e0:86:76:31:e7: 67:d3:3d:f3:f8:3c:a1:45:52:96:62:f1:5c:dc:f9:7d:d6:ab: ba:3b:47:69:0c:55:d5:00:a3:a9:72:04:76:e4:33:f9:eb:42: f3:f2:ce:2a:9d:b3:ba:4d:23:a4:2e:92:ab:54:84:7f:6f:cc: 6b:f4:c9:a0:d2:da:dd:b7:c2:71:ea:a6:64:d6:c2:05:ec:27: 3c:d2:ac:d6:b7:6c:16:c7:4a:55:54:6e:99:7a:a1:c9:da:93: 4d:3e:b3:99:58:4a:1b:53:7d:d3:7d:87:8c:d7:b4:df:03:43: 1f:6e:1a:d7:b7:55:32:5c:5b:0f:17:8e:17:83:b1:f4:da:c2: 82:98:6c:81:8d:7e:4b:d2:c3:f0:9b:3f:6d:89:cb:5d:c3:2b: 2d:c3:2f:4a:94:39:24:98:ee:69:e3:43:7d:d2:aa:4f:db:14: 54:9d:48:d4:d9:58:0c:b8:0e:78:05:ff:86:a9:10:1a:35:4f: fb:6b:c4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXdLYMLvLq2rYN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MDI0N2JkNzQtODViMS00NmM1LThjZjctZDg4YWQ5N2U5ZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdDQjQJ4EakQ67X961BXwzeaBaGsH2ZlmrE4 TZgccynmX8feoCfN6XV6zLvjnfZXdS887+ZUHRg9XZYKkvm+d9StF09XDNomSxuF uS6Z01luU80eEX+QM+X9EWtgdYLeNxO73Slem++X2CmPpJuz7pxmgYihHeIJS6T7 roWWpZPirRXtc0yK6U0Wvb2joqqVI0IPgG9VyUrQO4XWBDVw+CdNfg8zUBWzq5sf Ck1z8k0mr25UGJ9l2/L4mJ8DKfYeYDoTqlXBwmc9QKVZ4SIj6oJavnw+cioeZK0J vxgdjG/LN8MXYGqaXMIpMorA+u0JoRpeN0aMWwwjyeuHrpdVLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZuhiFPMn1RxhCvSpH6AAvuwnlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2UyYmJjM2MtNWZjMS0z YWMxLTg3ZDYtYzJjYjk1OThhN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLyxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANK5dUmDSLTxlDynxyrp1aJiIx1oV7NhyMCUUTuhT065bE3r1GTurnXO cwKz6UHrCX9xxl4EhZQScSSY+Pw/XVEozo7ghnYx52fTPfP4PKFFUpZi8Vzc+X3W q7o7R2kMVdUAo6lyBHbkM/nrQvPyziqds7pNI6QukqtUhH9vzGv0yaDS2t23wnHq pmTWwgXsJzzSrNa3bBbHSlVUbpl6ocnak00+s5lYShtTfdN9h4zXtN8DQx9uGte3 VTJcWw8XjheDsfTawoKYbIGNfkvSw/CbP22Jy13DKy3DL0qUOSSY7mnjQ33Sqk/b FFSdSNTZWAy4DngF/4apEBo1T/trxGE= -----END CERTIFICATE-----Generated at Tue Oct 20 00:27:58 2026 by rpki-client