$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa File: 1e0ca83f-24c8-35be-be76-db572c9a7dab.roa (raw, json) Hash identifier: H0fPbYmsSSJsRBUbw1dykzd+vdxxDzdUZWY0OoQiokw= Subject key identifier: 9A:05:78:A9:1A:84:CA:F0:B2:92:06:C0:13:C1:34:FD:52:3E:50:3B Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584AA160D8BE31BBFA80EE101E00 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 14618 IP address blocks: 149.72.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d8:be:31:bb:fa:80:ee:10:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=3019a840-59a7-487d-b275-b6946bafdb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4c:0e:64:73:e8:39:9d:d0:fd:91:c9:18:4a: 12:ee:14:f2:67:ff:a5:ec:ff:9f:91:f3:e1:c6:c1: 21:74:7e:93:6c:81:1b:9c:61:e7:d3:6f:b9:bd:d4: 57:2b:ea:51:5b:e2:c0:f4:c3:45:dd:eb:5e:2d:c9: 2d:e1:13:a4:fe:1f:4a:db:3d:c5:c7:bc:15:64:b2: 03:6c:d0:34:05:63:0b:f4:27:e0:31:3b:45:12:bd: 1c:9e:22:f1:ee:b9:d7:81:40:d5:98:75:21:18:7a: 80:7d:eb:5f:eb:00:dc:14:ad:4f:b6:be:8e:7f:2d: e9:10:6d:36:a5:85:d4:94:ac:e3:6f:00:76:fd:31: 70:c4:cf:11:74:8a:b5:23:71:a3:3d:ea:c2:09:eb: a8:81:03:66:3b:09:48:e2:50:55:7d:fe:c9:2c:bd: 5c:8a:d4:4d:a5:4c:76:7e:8b:29:56:59:10:63:74: 53:45:84:8f:d8:f6:89:e2:96:98:3f:fc:b9:77:ef: d1:f1:16:8e:55:7e:3c:dd:ca:66:4f:0e:50:49:46: 66:28:fd:32:0b:f4:01:26:d2:8f:c1:da:d7:e9:2c: 41:a7:1d:12:9f:a8:3e:00:0f:95:8e:08:f1:1b:ee: c3:cb:14:98:e7:d8:48:28:32:46:ee:b5:dd:8a:c0: b2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:05:78:A9:1A:84:CA:F0:B2:92:06:C0:13:C1:34:FD:52:3E:50:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:06:fe:00:6c:9a:bf:cb:28:82:bb:81:b9:7c:b2:1b:c4:8b: 08:8c:b1:f2:b7:5a:fc:f1:5b:09:78:25:7d:4f:28:e6:50:bd: af:4b:18:e0:6e:0e:6c:7d:44:ed:6d:a0:38:bd:04:22:63:27: ff:0a:e6:67:6e:e8:f3:9f:fe:16:4c:d2:09:25:38:c4:dc:ba: 8d:20:46:59:56:98:bf:3b:6b:a4:78:47:74:1d:e4:c3:59:19: 1c:ef:f7:b0:7e:09:33:0c:a3:f3:da:81:d9:b4:00:aa:5e:5d: c4:a2:22:fd:9b:53:01:a5:b5:ae:da:cc:c5:c1:e7:52:50:ce: 23:34:cd:e0:fe:e3:d0:c2:7c:af:62:95:eb:4e:09:4d:55:a8: 02:1a:8a:d7:b6:94:a1:96:6b:b7:53:84:ba:7c:41:3b:c8:7d: a0:7a:4a:6b:66:3e:b6:3d:17:da:bf:f4:ad:2e:57:f0:ca:83: 39:55:5f:0b:c7:91:83:7d:65:55:34:41:3a:58:61:93:41:c6: ab:3b:36:79:b7:d9:0f:e5:81:f9:84:5a:bb:0b:dc:20:3a:c5: 98:ef:88:1d:ce:6f:6f:d9:ba:c1:88:1d:a3:49:7f:bf:7e:74: 9a:4d:bf:5c:35:44:44:42:99:da:f1:fb:50:66:d1:2d:bf:dd: d4:96:ff:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNi+Mbv6gO4QHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MzAxOWE4NDAtNTlhNy00ODdkLWIyNzUtYjY5NDZiYWZkYjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0wOZHPoOZ3Q/ZHJGEoS7hTyZ/+l7P+fkfPh xsEhdH6TbIEbnGHn02+5vdRXK+pRW+LA9MNF3eteLckt4ROk/h9K2z3Fx7wVZLID bNA0BWML9CfgMTtFEr0cniLx7rnXgUDVmHUhGHqAfetf6wDcFK1Ptr6Ofy3pEG02 pYXUlKzjbwB2/TFwxM8RdIq1I3GjPerCCeuogQNmOwlI4lBVff7JLL1citRNpUx2 fospVlkQY3RTRYSP2PaJ4paYP/y5d+/R8RaOVX483cpmTw5QSUZmKP0yC/QBJtKP wdrX6SxBpx0Sn6g+AA+VjgjxG+7DyxSY59hIKDJG7rXdisCyyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoFeKkahMrwspIGwBPBNP1SPlA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvMWUwY2E4M2YtMjRjOC0z NWJlLWJlNzYtZGI1NzJjOWE3ZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlUhqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcG/gBsmr/LKIK7gbl8shvEiwiMsfK3WvzxWwl4JX1PKOZQva9LGOBu Dmx9RO1toDi9BCJjJ/8K5mdu6POf/hZM0gklOMTcuo0gRllWmL87a6R4R3Qd5MNZ GRzv97B+CTMMo/Pagdm0AKpeXcSiIv2bUwGlta7azMXB51JQziM0zeD+49DCfK9i letOCU1VqAIaite2lKGWa7dThLp8QTvIfaB6SmtmPrY9F9q/9K0uV/DKgzlVXwvH kYN9ZVU0QTpYYZNBxqs7Nnm32Q/lgfmEWrsL3CA6xZjviB3Ob2/ZusGIHaNJf79+ dJpNv1w1RERCmdrx+1Bm0S2/3dSW/8U= -----END CERTIFICATE-----Generated at Mon Aug 4 14:02:34 2025 by rpki-client