$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa File: 1e0ca83f-24c8-35be-be76-db572c9a7dab.roa (raw, json) Hash identifier: ESVAmhmi46j1z3JnWf3LgYS4VRnlsh5AqlMVwcObLqc= Subject key identifier: DD:83:D8:5A:F3:8E:74:F7:43:D0:E5:89:84:52:6F:07:25:1D:BC:EF Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584B821CCCFB25793525D80CCF80 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 14618 IP address blocks: 149.72.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:cc:fb:25:79:35:25:d8:0c:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=b879011e-70fd-4487-93a4-3980513de695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:be:9b:98:c3:19:ef:81:24:41:bf:6f:4f:cc: a1:48:b9:27:81:b9:70:b4:43:2b:91:53:85:0b:51: 8e:f2:04:23:0d:4b:fc:86:07:62:4f:45:7b:82:ef: ee:3e:2a:16:7e:8e:04:43:48:dd:c1:12:d5:6f:76: 8c:80:33:79:99:d0:eb:43:71:54:1b:12:a1:0d:fd: 5e:7a:3d:26:b4:2e:6c:bf:7d:23:1c:9f:16:47:ad: a2:fb:f8:09:9e:b0:a8:ba:27:7b:90:3f:97:0d:37: 34:49:87:9f:bf:0a:b8:e0:99:23:8b:18:21:e2:c8: 6d:10:63:42:cd:12:23:b8:01:38:60:b7:b2:fc:65: 6d:ca:42:3b:14:92:9c:8a:7f:84:1d:d8:29:2e:0b: 24:36:45:a2:1a:de:67:71:ec:c6:11:d2:33:bd:73: 9e:1b:d9:63:5e:17:0b:a6:de:37:77:54:0a:41:06: 9c:28:a7:83:5d:38:23:50:d1:54:63:65:d0:ae:fe: ac:ac:04:9a:cf:08:66:56:42:4f:5d:c7:06:15:99: 61:b8:3d:41:26:32:33:76:b7:cd:c0:fe:5c:9d:c9: c1:9c:03:b7:b6:2e:18:c9:93:1f:f9:e9:39:69:c0: d7:79:01:e9:87:87:7e:f9:bc:1f:81:8a:11:8a:69: 00:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:83:D8:5A:F3:8E:74:F7:43:D0:E5:89:84:52:6F:07:25:1D:BC:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:4f:d3:91:17:c6:7d:4a:7f:24:e4:08:c7:65:3d:4d:a9:36: 39:c9:60:4b:a6:d7:e1:f6:71:f1:e7:66:84:71:28:36:b5:a2: 51:1e:54:d7:cd:97:0a:a1:34:23:dc:7b:a7:9d:32:c2:6b:ca: 27:52:48:ee:46:9c:32:52:34:dc:a5:29:c0:ff:ee:91:4e:b9: b1:71:42:22:2f:14:12:e6:76:07:43:6d:6a:0d:2b:59:46:6c: e9:a9:e4:f6:58:fe:9b:4a:ca:21:dd:2c:dd:87:c6:43:73:eb: 58:d7:0f:05:e4:e3:8a:50:29:1e:c8:51:ff:bb:12:c3:26:77: aa:64:86:11:45:38:6b:92:99:b4:dc:e3:5c:f3:ca:34:0d:1f: 2a:a6:b6:32:75:20:6a:4f:97:f5:1c:8c:54:6b:0a:4a:19:84: 9e:5d:77:c6:ee:cf:ea:1f:a2:f5:f1:d6:16:73:8f:25:84:7a: 1b:6a:13:88:0c:7a:2a:4a:e7:86:77:21:24:61:33:ff:3b:6f: a5:19:4e:31:b8:45:be:96:25:c1:b9:21:2c:d0:3b:a3:fa:10: c1:2d:23:5c:44:c0:c0:73:61:63:36:f1:55:1f:ee:1d:48:36: 6f:69:61:57:d0:1f:05:20:7e:62:5f:37:bf:f8:a3:d4:8b:74: 12:b8:21:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMz7JXk1JdgMz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Yjg3OTAxMWUtNzBmZC00NDg3LTkzYTQtMzk4MDUxM2RlNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl76bmMMZ74EkQb9vT8yhSLkngblwtEMrkVOF C1GO8gQjDUv8hgdiT0V7gu/uPioWfo4EQ0jdwRLVb3aMgDN5mdDrQ3FUGxKhDf1e ej0mtC5sv30jHJ8WR62i+/gJnrCouid7kD+XDTc0SYefvwq44Jkjixgh4shtEGNC zRIjuAE4YLey/GVtykI7FJKcin+EHdgpLgskNkWiGt5ncezGEdIzvXOeG9ljXhcL pt43d1QKQQacKKeDXTgjUNFUY2XQrv6srASazwhmVkJPXccGFZlhuD1BJjIzdrfN wP5cncnBnAO3ti4YyZMf+ek5acDXeQHph4d++bwfgYoRimkAOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2D2FrzjnT3Q9DliYRSbwclHbzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvMWUwY2E4M2YtMjRjOC0z NWJlLWJlNzYtZGI1NzJjOWE3ZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlUhqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRP05EXxn1KfyTkCMdlPU2pNjnJYEum1+H2cfHnZoRxKDa1olEeVNfN lwqhNCPce6edMsJryidSSO5GnDJSNNylKcD/7pFOubFxQiIvFBLmdgdDbWoNK1lG bOmp5PZY/ptKyiHdLN2HxkNz61jXDwXk44pQKR7IUf+7EsMmd6pkhhFFOGuSmbTc 41zzyjQNHyqmtjJ1IGpPl/UcjFRrCkoZhJ5dd8buz+ofovXx1hZzjyWEehtqE4gM eipK54Z3ISRhM/87b6UZTjG4Rb6WJcG5ISzQO6P6EMEtI1xEwMBzYWM28VUf7h1I Nm9pYVfQHwUgfmJfN7/4o9SLdBK4ITE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:59:20 2025 by rpki-client