$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa File: 1e0ca83f-24c8-35be-be76-db572c9a7dab.roa (raw, json) Hash identifier: bSsdpWP1WkqKadZi9qzM40OdCNpvFTZgKV+fUTqetnQ= Subject key identifier: 46:FB:0A:E1:53:92:B7:A8:44:79:BC:7A:79:79:B2:58:99:31:2F:A9 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584D40CA520BDC9338FF32BA8880 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 149.72.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:52:0b:dc:93:38:ff:32:ba:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=71d9e84c-2709-4587-aa22-448674260740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:9b:27:b9:f2:86:2d:b6:a4:d0:1b:76:7a: 9f:09:d5:a5:f1:33:7f:6e:55:ef:15:46:d7:3d:82: 2e:7c:81:78:0a:90:b3:6d:68:6c:71:7b:29:a2:8b: 06:d0:ee:7d:32:56:e2:53:ae:5b:61:54:e4:a2:a1: 90:c4:9e:fd:11:1f:7b:4e:13:f6:76:0a:22:88:5b: 36:79:de:17:26:64:72:06:1c:28:2b:4c:98:2a:0c: c9:cd:8e:4a:24:ea:14:c0:8b:99:99:4c:28:cd:37: 09:a2:4d:b7:74:a8:dc:06:47:ac:98:b0:14:b1:58: 5e:79:63:b3:22:94:39:65:6e:0b:25:77:12:d6:8c: c7:f2:29:0f:07:df:0c:38:58:11:3d:c5:19:c3:b1: 65:0e:04:c5:c5:8c:7f:20:81:be:9e:c2:9a:bd:52: 18:9b:7d:29:25:3c:24:17:59:8f:8e:25:96:17:af: ba:29:c7:ef:54:57:58:1e:0d:75:f1:b2:89:79:05: c0:0b:ca:8f:68:61:4d:c8:fb:6a:4d:b6:e6:15:63: 3f:ac:a8:01:1a:85:3a:6f:56:e0:40:9a:ee:23:83: 24:02:f8:66:a9:8c:01:cc:9d:10:31:9c:26:1d:81: 47:fa:77:53:5b:9d:fd:08:06:ae:5c:e0:ab:d5:36: 49:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FB:0A:E1:53:92:B7:A8:44:79:BC:7A:79:79:B2:58:99:31:2F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f5:87:e2:3b:9a:5d:88:13:5e:c8:83:d5:53:cf:ed:eb:d2: 9a:84:c7:d7:94:08:ca:10:05:8c:1e:10:81:ef:94:01:95:7f: d1:b4:97:eb:a5:ce:fc:3a:a2:05:f7:bd:98:c0:df:5c:b0:39: eb:04:30:5b:5a:5e:87:c8:0a:cd:48:66:e1:27:12:c3:1b:41: aa:56:c8:23:74:cb:fc:59:90:18:2c:ca:f8:34:2a:40:72:af: 93:97:de:27:08:6a:ab:ca:8a:7d:f8:3c:bc:91:b2:2c:86:7c: e9:9a:b7:f4:33:e7:71:e3:03:88:7f:ed:d6:2e:64:38:18:ad: 29:4c:9b:04:ee:04:10:af:2f:62:e3:01:64:0e:eb:b8:41:4f: ae:ed:26:c0:38:d8:4e:2b:86:5f:0d:dd:15:11:4b:62:69:c1: 0b:a8:44:9f:0c:58:07:d4:55:7b:9c:9a:4a:c6:b0:50:1a:25: b0:7a:8c:25:a0:92:ba:a3:2c:c7:ec:92:d7:9b:79:55:70:4e: e5:1b:2f:92:b5:cc:df:7f:11:f5:8d:c5:cb:14:74:5d:82:74: d0:a3:c0:51:6e:ea:9a:1a:b6:16:3c:46:28:c3:f8:3d:c1:bf: ae:7b:ac:02:f9:8a:a6:fa:2f:6e:9f:1f:c4:ce:e3:e8:6b:b4: 51:0b:07:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylIL3JM4/zK6iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NzFkOWU4NGMtMjcwOS00NTg3LWFhMjItNDQ4Njc0MjYwNzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX6bJ7nyhi22pNAbdnqfCdWl8TN/blXvFUbX PYIufIF4CpCzbWhscXspoosG0O59MlbiU65bYVTkoqGQxJ79ER97ThP2dgoiiFs2 ed4XJmRyBhwoK0yYKgzJzY5KJOoUwIuZmUwozTcJok23dKjcBkesmLAUsVheeWOz IpQ5ZW4LJXcS1ozH8ikPB98MOFgRPcUZw7FlDgTFxYx/IIG+nsKavVIYm30pJTwk F1mPjiWWF6+6KcfvVFdYHg118bKJeQXAC8qPaGFNyPtqTbbmFWM/rKgBGoU6b1bg QJruI4MkAvhmqYwBzJ0QMZwmHYFH+ndTW539CAauXOCr1TZJBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb7CuFTkreoRHm8enl5sliZMS+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvMWUwY2E4M2YtMjRjOC0z NWJlLWJlNzYtZGI1NzJjOWE3ZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlUhqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz1h+I7ml2IE17Ig9VTz+3r0pqEx9eUCMoQBYweEIHvlAGVf9G0l+ul zvw6ogX3vZjA31ywOesEMFtaXofICs1IZuEnEsMbQapWyCN0y/xZkBgsyvg0KkBy r5OX3icIaqvKin34PLyRsiyGfOmat/Qz53HjA4h/7dYuZDgYrSlMmwTuBBCvL2Lj AWQO67hBT67tJsA42E4rhl8N3RURS2JpwQuoRJ8MWAfUVXucmkrGsFAaJbB6jCWg krqjLMfsktebeVVwTuUbL5K1zN9/EfWNxcsUdF2CdNCjwFFu6poathY8RijD+D3B v657rAL5iqb6L26fH8TO4+hrtFELB7g= -----END CERTIFICATE-----Generated at Thu Mar 26 17:20:59 2026 by rpki-client