$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/afb27e7f-6642-3248-a011-92f118aab3a3.roa File: afb27e7f-6642-3248-a011-92f118aab3a3.roa (raw, json) Hash identifier: IrL+7NMPLKOTIFEnalQH5NErThAi2jYWORq+VX60qxk= Subject key identifier: 9C:E6:2D:0A:0F:50:D5:50:FA:48:9B:69:91:0D:4A:F2:57:96:F4:8A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B68FC9C49A21FA4CDFB0EC180 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/afb27e7f-6642-3248-a011-92f118aab3a3.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 33363 IP address blocks: 168.148.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9c:49:a2:1f:a4:cd:fb:0e:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=821e2079-bb75-4fed-8c32-ac8076685512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:dc:69:a8:1e:76:f1:58:de:f9:0f:91:c5: bb:53:6c:d2:2e:a7:9b:98:ff:1d:40:18:e5:90:36: 68:10:3a:ae:a7:bc:25:ff:68:b2:a6:5a:c1:61:80: 2e:cc:13:f0:be:62:07:4e:bf:81:07:7a:dd:ec:23: ee:26:02:28:ae:b5:75:fd:44:c8:3b:2e:56:59:46: bf:41:0d:bc:a7:d6:1c:39:12:d5:61:cb:84:94:5d: 73:81:78:06:67:5c:40:31:a0:49:cd:83:e5:6d:1c: b8:97:ec:23:e5:2b:16:22:9b:fc:77:27:6c:ab:64: ed:db:db:1a:4d:33:9f:1d:54:48:1a:77:83:0a:b4: 28:44:a9:b6:a4:70:7f:5b:95:a8:3f:0d:39:59:ef: f7:5d:78:e4:33:67:22:e6:b7:bc:9c:00:40:f6:c7: 6d:ec:ae:76:b7:79:4a:55:3e:9e:a8:5f:8c:0e:7a: d0:f2:2d:11:d7:1d:5f:a3:cd:01:5a:6b:97:4b:60: d4:c3:24:bd:56:88:88:50:d2:58:ed:80:2f:c1:fa: 9f:70:cb:9b:ff:3f:3e:3c:31:2e:16:0d:1b:55:95: d0:96:5a:af:b2:0a:f7:35:c0:b1:48:56:fc:43:30: 11:a2:02:24:2e:b3:a0:a1:9e:54:fa:b1:07:4f:a0: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E6:2D:0A:0F:50:D5:50:FA:48:9B:69:91:0D:4A:F2:57:96:F4:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/afb27e7f-6642-3248-a011-92f118aab3a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 168.148.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:90:24:e1:a4:fb:aa:cf:1a:20:2f:a6:78:ae:47:65:c1:3b: 81:99:fe:cf:28:a9:5d:96:4c:7a:9e:45:18:f6:37:d1:ef:59: ae:0b:f4:54:d5:bd:65:74:35:50:a0:56:38:1e:5a:9e:1c:02: e7:a3:a8:22:4c:93:30:3b:f0:d2:ab:0a:cc:ab:d8:66:77:01: f7:73:d2:27:31:53:e1:f5:8e:13:b6:86:75:e8:67:e9:dd:0b: c4:d8:21:f3:ca:6d:da:61:09:d8:b9:bc:22:e6:81:f2:e9:90: 17:cc:07:ee:cc:c9:0a:c3:ec:1f:e6:66:7a:a4:7c:8f:6d:20: 3b:35:ed:dc:1f:04:de:df:b8:d0:d3:a5:d5:20:f3:63:53:04: a4:fb:ba:c2:ef:c2:72:62:29:48:5c:82:f3:8d:e0:78:74:57: a5:13:17:a1:fd:24:01:2d:ed:68:bb:9c:72:29:5a:da:5f:32: 9f:91:0e:79:75:78:d8:b2:2b:f2:88:d3:68:10:33:d5:83:68: 6f:b0:e3:c9:19:ec:2b:7b:9c:36:c7:8b:2f:63:27:a0:53:ea: 40:7f:e2:b8:83:bc:df:0c:15:97:13:3e:8d:67:ca:12:cd:b8: 14:24:ed:52:55:dd:89:bb:73:86:1f:47:f7:0c:0d:6a:73:56: 25:c2:1b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JxJoh+kzfsOwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ODIxZTIwNzktYmI3NS00ZmVkLThjMzItYWM4MDc2Njg1NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtjcaagedvFY3vkPkcW7U2zSLqebmP8dQBjl kDZoEDqup7wl/2iyplrBYYAuzBPwvmIHTr+BB3rd7CPuJgIorrV1/UTIOy5WWUa/ QQ28p9YcORLVYcuElF1zgXgGZ1xAMaBJzYPlbRy4l+wj5SsWIpv8dydsq2Tt29sa TTOfHVRIGneDCrQoRKm2pHB/W5WoPw05We/3XXjkM2ci5re8nABA9sdt7K52t3lK VT6eqF+MDnrQ8i0R1x1fo80BWmuXS2DUwyS9VoiIUNJY7YAvwfqfcMub/z8+PDEu Fg0bVZXQllqvsgr3NcCxSFb8QzARogIkLrOgoZ5U+rEHT6CWTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzmLQoPUNVQ+kibaZENSvJXlvSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWZiMjdlN2YtNjY0Mi0z MjQ4LWEwMTEtOTJmMTE4YWFiM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqJTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2QJOGk+6rPGiAvpniuR2XBO4GZ/s8oqV2WTHqeRRj2N9HvWa4L9FTV vWV0NVCgVjgeWp4cAuejqCJMkzA78NKrCsyr2GZ3Afdz0icxU+H1jhO2hnXoZ+nd C8TYIfPKbdphCdi5vCLmgfLpkBfMB+7MyQrD7B/mZnqkfI9tIDs17dwfBN7fuNDT pdUg82NTBKT7usLvwnJiKUhcgvON4Hh0V6UTF6H9JAEt7Wi7nHIpWtpfMp+RDnl1 eNiyK/KI02gQM9WDaG+w48kZ7Ct7nDbHiy9jJ6BT6kB/4riDvN8MFZcTPo1nyhLN uBQk7VJV3Ym7c4YfR/cMDWpzViXCGwY= -----END CERTIFICATE-----Generated at Fri Oct 17 05:08:49 2025 by rpki-client