$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/867a310e-05c3-3f93-975a-71784a2e9647.roa File: 867a310e-05c3-3f93-975a-71784a2e9647.roa (raw, json) Hash identifier: k0f7Va6z0czwp/wRYnZ4fVSjQglRAxJuxCQsz8gMbBU= Subject key identifier: 20:B6:D1:25:FA:C3:BA:CC:C4:48:FC:7F:37:F9:05:E1:6A:29:E1:2A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584D953D8B5DC2800E68BBC74980 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/867a310e-05c3-3f93-975a-71784a2e9647.roa Signing time: Tue 21 Apr 2026 19:01:01 +0000 ROA not before: Tue 21 Apr 2026 19:01:01 +0000 ROA not after: Mon 20 Jul 2026 19:01:01 +0000 asID: 0 IP address blocks: 47.43.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:3d:8b:5d:c2:80:0e:68:bb:c7:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Apr 21 19:01:01 2026 GMT Not After : Jul 20 19:01:01 2026 GMT Subject: CN=409f7837-49ad-4439-bf03-1ed96c34437c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:cc:ea:83:10:15:a8:d1:e2:e6:3c:fe:a6: e5:bf:87:fc:9b:61:16:47:c1:0b:96:fc:13:dc:90: 02:24:15:e3:2d:53:3d:96:4e:05:46:ff:b6:24:8d: 69:87:05:59:ad:8b:fa:53:dc:09:57:15:b2:cb:45: 89:57:38:be:f3:6b:49:9b:3b:46:32:99:80:e1:13: 63:52:e3:57:57:ab:cd:45:3f:e5:1f:bf:ff:a7:25: 19:db:1e:a3:cd:5d:31:db:98:07:8b:de:75:79:52: 29:41:5b:44:04:10:fc:00:e7:75:b1:7c:40:ee:4c: 66:c5:78:90:de:93:44:df:7e:d3:85:9c:d2:64:8a: 66:b4:58:f1:5a:9e:14:97:28:16:0a:15:09:50:00: 1f:1a:3f:d8:80:74:95:36:36:7c:9c:9f:b1:ad:44: 77:82:ee:0f:8a:5a:46:d7:98:d1:df:5d:db:8a:fa: 9a:73:9b:c9:69:27:4d:85:7b:63:50:91:c9:6f:b1: d8:81:20:2c:ce:82:a7:1e:03:2a:c4:e3:85:32:7f: 17:92:7a:12:12:ab:79:af:31:74:70:a7:a8:9e:f4: 8b:d8:c0:0b:4d:ca:75:98:4e:e0:7d:3a:b8:3c:a2: 3e:16:43:62:c3:ce:c2:ed:73:d9:dd:22:3f:d5:7d: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B6:D1:25:FA:C3:BA:CC:C4:48:FC:7F:37:F9:05:E1:6A:29:E1:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/867a310e-05c3-3f93-975a-71784a2e9647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.43.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:f0:31:8d:17:37:4f:e3:93:76:e8:57:0e:98:b6:72:87:2f: 1b:82:b8:93:3b:5d:2d:4c:65:5a:b2:6a:ae:01:5f:c3:1b:55: 75:47:24:7b:08:e8:25:fb:88:f8:dd:5f:a7:3a:4d:d0:a5:ce: 53:ce:77:7a:dd:86:12:e0:dd:47:96:2f:fb:9e:d3:34:1f:8c: d1:40:7e:d6:ce:d2:35:55:d6:39:07:96:90:f8:76:a8:df:ed: 6c:d6:1d:d1:26:45:26:4a:cc:20:e3:23:f2:e2:51:3b:ca:a8: d8:ef:38:15:52:cd:a9:e2:3c:80:e6:b5:78:8b:5b:dd:a2:44: 11:b9:17:d7:0e:c9:91:4c:b3:4e:da:45:1c:4f:00:88:18:52: 4f:d0:a3:a3:f5:7c:08:1a:22:b0:97:f3:89:00:b2:a9:e1:bb: 42:88:2f:2d:ec:c4:d4:ba:14:3e:c2:b6:cc:9a:43:c0:d3:8c: 53:7b:69:d5:1f:b3:8e:a3:6d:dc:3a:1e:3a:d2:80:f6:24:c6: 10:56:c9:d9:aa:4a:49:e9:b9:2b:e6:59:27:15:45:dc:92:8a: b0:56:7d:f9:06:5b:15:54:a1:3c:60:5c:42:d8:74:74:14:9e: 5d:58:80:e5:43:01:af:0e:03:33:8f:b2:b2:8e:01:2b:04:a9: c5:5e:e5:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2VPYtdwoAOaLvHSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI2MDQyMTE5MDEwMVoXDTI2MDcyMDE5MDEwMVowLzEtMCsGA1UEAxMk NDA5Zjc4MzctNDlhZC00NDM5LWJmMDMtMWVkOTZjMzQ0MzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNjM6oMQFajR4uY8/qblv4f8m2EWR8ELlvwT 3JACJBXjLVM9lk4FRv+2JI1phwVZrYv6U9wJVxWyy0WJVzi+82tJmztGMpmA4RNj UuNXV6vNRT/lH7//pyUZ2x6jzV0x25gHi951eVIpQVtEBBD8AOd1sXxA7kxmxXiQ 3pNE337ThZzSZIpmtFjxWp4UlygWChUJUAAfGj/YgHSVNjZ8nJ+xrUR3gu4PilpG 15jR313bivqac5vJaSdNhXtjUJHJb7HYgSAszoKnHgMqxOOFMn8XknoSEqt5rzF0 cKeonvSL2MALTcp1mE7gfTq4PKI+FkNiw87C7XPZ3SI/1X3qEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC20SX6w7rMxEj8fzf5BeFqKeEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODY3YTMxMGUtMDVjMy0z ZjkzLTk3NWEtNzE3ODRhMmU5NjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALyt9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbwMY0XN0/jk3boVw6YtnKHLxuCuJM7XS1MZVqyaq4BX8MbVXVHJHsI 6CX7iPjdX6c6TdClzlPOd3rdhhLg3UeWL/ue0zQfjNFAftbO0jVV1jkHlpD4dqjf 7WzWHdEmRSZKzCDjI/LiUTvKqNjvOBVSzaniPIDmtXiLW92iRBG5F9cOyZFMs07a RRxPAIgYUk/Qo6P1fAgaIrCX84kAsqnhu0KILy3sxNS6FD7CtsyaQ8DTjFN7adUf s46jbdw6HjrSgPYkxhBWydmqSknpuSvmWScVRdySirBWffkGWxVUoTxgXELYdHQU nl1YgOVDAa8OAzOPsrKOASsEqcVe5f0= -----END CERTIFICATE-----Generated at Fri Apr 24 09:19:39 2026 by rpki-client