$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa File: 28e253dd-d9af-340f-9c53-36fda0651ce5.roa (raw, json) Hash identifier: JiicZjjzwr28cmlQClPcCPfrhiPOv51UnO3BZEvUGkw= Subject key identifier: 30:6A:24:2F:7C:E3:C8:BE:C8:4A:46:77:4E:1F:D7:13:69:B6:50:4E Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584D40CA521ED79B52B4CECB1780 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 149.72.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:52:1e:d7:9b:52:b4:ce:cb:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=a1614998-9b82-4332-9539-201aa26d7aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b2:07:a5:e3:e6:bc:f1:13:93:ef:dd:63:00: 02:9b:57:f7:ec:aa:0b:50:4a:7d:6c:36:d8:a2:8a: ce:bd:1c:22:56:08:06:df:24:3f:1e:a7:bb:57:b4: ee:e3:16:01:9d:a7:8b:23:87:01:56:b8:13:a1:59: f8:0d:1f:e5:c0:b1:46:7b:a6:aa:7a:38:9e:d2:5c: 35:d6:39:7d:bc:8e:9a:c5:a4:1a:6d:06:b7:3f:05: b6:b5:8d:f3:45:16:aa:f3:3e:99:81:eb:ca:52:b0: 5b:bc:95:9c:4d:80:de:d9:03:7b:58:94:c9:2b:81: b4:1b:d1:ea:87:fd:9b:e1:88:0d:86:06:fc:4a:37: 69:6e:d6:45:db:d8:5f:3a:4f:7a:28:3e:3a:62:d5: 61:72:39:fb:a4:54:44:45:2c:2d:35:75:8a:9c:55: 60:0f:a1:2c:f3:61:dc:d3:e7:1b:52:58:bf:94:1d: ab:4f:57:ae:5e:6a:ae:a9:25:33:c4:c4:3c:9b:0f: 51:1d:45:cd:88:f5:ba:a1:a6:b5:1b:60:36:92:12: 58:40:52:33:a7:50:ea:c6:88:ca:66:70:65:1d:ce: 40:6f:dd:d8:24:74:39:db:75:1b:ef:99:a1:10:f7: cc:2b:33:52:d9:77:a2:35:3b:61:ed:b0:9c:fc:7c: 3c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6A:24:2F:7C:E3:C8:BE:C8:4A:46:77:4E:1F:D7:13:69:B6:50:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9c:f3:49:73:d8:0d:9f:3e:b6:62:40:c6:8a:f9:5a:c7:bd: af:74:49:5c:47:c4:10:61:5c:b9:11:ed:84:52:47:7a:96:5d: ed:e2:bb:c0:89:40:b3:76:14:3c:78:43:6c:67:41:76:03:f1: 90:da:64:d3:35:1c:2a:87:55:0e:18:4a:47:7f:d9:07:01:ff: 90:19:76:fe:46:78:f9:96:46:7e:4c:53:3c:61:ec:00:33:b9: 82:39:ce:dc:65:9f:60:78:e4:a0:be:7c:31:b8:cb:41:9b:91: 6f:36:2f:c2:3d:8e:79:f8:06:85:12:c7:57:ec:b3:01:85:2c: 5e:23:b4:16:c7:c9:f6:f0:93:9e:01:dc:4f:1a:d0:4f:2e:a1: e2:20:e8:43:44:52:a7:8c:69:91:e0:df:03:ed:9d:51:8f:ce: b7:19:e9:3c:56:63:fe:52:93:63:d8:40:6a:44:82:5a:e0:01: 4b:5f:23:bb:a7:8d:3a:dd:75:ec:f0:78:d6:da:a6:96:73:69: b6:c2:9a:05:67:0e:24:73:d7:3a:a4:85:93:84:bc:7b:a8:4b: 56:28:47:06:a6:d6:88:16:9d:96:b9:9a:9d:45:a6:b7:3b:f9: 3a:10:46:ba:0a:6a:3a:bd:74:2b:aa:d1:28:a4:3c:74:db:8b: 0c:4c:a5:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylIe15tStM7LF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YTE2MTQ5OTgtOWI4Mi00MzMyLTk1MzktMjAxYWEyNmQ3YWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrIHpePmvPETk+/dYwACm1f37KoLUEp9bDbY oorOvRwiVggG3yQ/Hqe7V7Tu4xYBnaeLI4cBVrgToVn4DR/lwLFGe6aqejie0lw1 1jl9vI6axaQabQa3PwW2tY3zRRaq8z6ZgevKUrBbvJWcTYDe2QN7WJTJK4G0G9Hq h/2b4YgNhgb8SjdpbtZF29hfOk96KD46YtVhcjn7pFRERSwtNXWKnFVgD6Es82Hc 0+cbUli/lB2rT1euXmquqSUzxMQ8mw9RHUXNiPW6oaa1G2A2khJYQFIzp1DqxojK ZnBlHc5Ab93YJHQ523Ub75mhEPfMKzNS2XeiNTth7bCc/Hw82wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBqJC9848i+yEpGd04f1xNptlBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvMjhlMjUzZGQtZDlhZi0z NDBmLTljNTMtMzZmZGEwNjUxY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlUhqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAic80lz2A2fPrZiQMaK+VrHva90SVxHxBBhXLkR7YRSR3qWXe3iu8CJ QLN2FDx4Q2xnQXYD8ZDaZNM1HCqHVQ4YSkd/2QcB/5AZdv5GePmWRn5MUzxh7AAz uYI5ztxln2B45KC+fDG4y0GbkW82L8I9jnn4BoUSx1fsswGFLF4jtBbHyfbwk54B 3E8a0E8uoeIg6ENEUqeMaZHg3wPtnVGPzrcZ6TxWY/5Sk2PYQGpEglrgAUtfI7un jTrddezweNbappZzabbCmgVnDiRz1zqkhZOEvHuoS1YoRwam1ogWnZa5mp1Fprc7 +ToQRroKajq9dCuq0SikPHTbiwxMpW0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:27 2026 by rpki-client