$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa File: 28e253dd-d9af-340f-9c53-36fda0651ce5.roa (raw, json) Hash identifier: 1MmAmm8qjPYUKRU68uAEbZtS2Qma9X5vFzPTvdKMV0M= Subject key identifier: 0F:E3:F7:23:42:57:E9:5F:D5:08:CA:89:74:E6:8E:BD:4C:FA:B0:80 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584B821CCD0C828AC245B42DD100 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 16509 IP address blocks: 149.72.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:cd:0c:82:8a:c2:45:b4:2d:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=47ad3f0d-e6ee-4203-bebe-6147351710e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:59:f6:9b:df:db:11:96:7e:8c:cd:3e:3d:1c: aa:dd:78:5e:ee:f2:a3:6c:8f:31:9c:32:af:9f:9e: 42:12:9b:22:b1:9b:61:62:38:35:f9:6d:1c:32:15: de:d5:51:0f:eb:4e:75:7b:b7:f0:75:e1:f6:fc:b4: a1:ba:ba:94:75:dc:44:e5:1f:1b:41:7c:05:16:d6: 52:57:ec:bc:ae:3b:33:ea:85:fa:74:5d:95:e7:3b: 93:a5:00:18:90:4a:96:5e:96:f6:91:b2:32:3c:bc: 19:44:38:81:60:e5:34:86:68:48:bd:ca:18:10:1a: ae:dc:05:3e:28:e8:04:d5:f6:88:43:8d:a8:ff:a1: 1e:27:d8:56:71:41:a5:f7:24:fd:9a:ed:b1:6e:4d: 69:8a:e5:5a:b3:b6:07:95:69:2d:1d:ed:f0:1b:33: 6c:c9:f1:4e:49:92:4b:b4:b1:ab:e5:36:02:63:9d: 7f:6b:20:7f:de:04:9e:8a:21:bd:6f:8b:e5:2b:ff: f7:59:7d:ad:05:99:29:50:5b:46:2f:87:54:a2:5d: 65:27:bd:89:77:58:af:55:be:5e:03:fa:5a:04:4e: 60:db:4d:b5:46:2c:21:97:6a:95:e3:9c:c1:6c:3d: 07:66:db:e5:64:50:de:93:18:32:ed:a0:99:d1:99: 3b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E3:F7:23:42:57:E9:5F:D5:08:CA:89:74:E6:8E:BD:4C:FA:B0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/28e253dd-d9af-340f-9c53-36fda0651ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a3:02:99:55:e6:22:88:8b:3a:57:a5:02:5d:d9:9e:2e:d7: e6:b0:7a:0b:17:b4:fa:bb:2c:73:12:60:e5:93:bb:47:b8:06: 19:81:47:26:85:25:0e:43:d9:8b:80:f8:8e:a1:8d:ef:6d:a9: fa:04:4b:44:55:9e:34:68:79:75:c3:da:cb:98:01:80:d8:9b: e4:ae:37:10:99:76:a5:02:ff:f0:e0:8f:cd:00:bd:cf:58:f4: fe:2e:05:e9:b2:1d:1a:e9:c1:0c:ed:6c:2b:82:12:40:4a:df: 82:d5:96:36:90:f4:26:f8:0c:a2:bf:86:85:86:e7:37:9c:d0: 41:37:70:20:02:13:f3:18:31:15:90:6a:30:24:63:55:ec:1f: 16:4c:ab:ab:d7:78:52:cb:e0:27:82:b7:82:2f:23:ae:0c:58: c5:70:e0:05:5b:b9:c0:d4:32:2e:ae:96:34:c4:88:f8:16:4e: 69:5f:a5:ea:c6:ff:00:ab:04:e9:67:e2:66:e1:10:24:f4:5b: f5:50:00:df:0d:c1:88:88:de:bc:b8:2c:69:e1:23:be:b4:8d: f7:b7:bb:88:78:89:5f:d5:69:9f:67:64:e7:e6:3a:aa:46:33: 27:a2:e8:1a:5e:b4:d1:c7:01:21:b4:03:23:28:60:7b:07:57: 88:a7:23:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHM0MgorCRbQt0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NDdhZDNmMGQtZTZlZS00MjAzLWJlYmUtNjE0NzM1MTcxMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFn2m9/bEZZ+jM0+PRyq3Xhe7vKjbI8xnDKv n55CEpsisZthYjg1+W0cMhXe1VEP6051e7fwdeH2/LShurqUddxE5R8bQXwFFtZS V+y8rjsz6oX6dF2V5zuTpQAYkEqWXpb2kbIyPLwZRDiBYOU0hmhIvcoYEBqu3AU+ KOgE1faIQ42o/6EeJ9hWcUGl9yT9mu2xbk1piuVas7YHlWktHe3wGzNsyfFOSZJL tLGr5TYCY51/ayB/3gSeiiG9b4vlK//3WX2tBZkpUFtGL4dUol1lJ72Jd1ivVb5e A/paBE5g2021Riwhl2qV45zBbD0HZtvlZFDekxgy7aCZ0Zk7wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/j9yNCV+lf1QjKiXTmjr1M+rCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvMjhlMjUzZGQtZDlhZi0z NDBmLTljNTMtMzZmZGEwNjUxY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlUhqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmjAplV5iKIizpXpQJd2Z4u1+awegsXtPq7LHMSYOWTu0e4BhmBRyaF JQ5D2YuA+I6hje9tqfoES0RVnjRoeXXD2suYAYDYm+SuNxCZdqUC//Dgj80Avc9Y 9P4uBemyHRrpwQztbCuCEkBK34LVljaQ9Cb4DKK/hoWG5zec0EE3cCACE/MYMRWQ ajAkY1XsHxZMq6vXeFLL4CeCt4IvI64MWMVw4AVbucDUMi6uljTEiPgWTmlfperG /wCrBOln4mbhECT0W/VQAN8NwYiI3ry4LGnhI760jfe3u4h4iV/VaZ9nZOfmOqpG Myei6BpetNHHASG0AyMoYHsHV4inIzg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:32 2025 by rpki-client