$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/75a59672-5441-3b3f-94bd-5838c9176537.roa File: 75a59672-5441-3b3f-94bd-5838c9176537.roa (raw, json) Hash identifier: jm9o/FG/AHckpXjHqWhXXjEGipTm0Hbng9PG31u3cvc= Subject key identifier: D8:C0:C5:38:F5:D5:E6:8B:01:58:85:58:93:B6:05:AC:D2:64:86:84 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584BA39D0BF5467D3BB06A66B080 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/75a59672-5441-3b3f-94bd-5838c9176537.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 11377 IP address blocks: 149.72.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0b:f5:46:7d:3b:b0:6a:66:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=14721d1d-922d-4e1a-8185-f563174c446b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:39:14:97:3c:4d:55:74:e1:a7:55:7f:70: c9:46:9a:c8:38:47:b7:50:e6:ed:d4:02:6a:ad:fc: b5:91:ee:d0:e2:fd:36:b4:f7:4a:fb:d7:65:cd:21: 78:9e:b4:74:75:b4:eb:ed:d3:ba:30:05:19:7a:0a: 15:e5:dd:48:c6:79:f5:21:58:e2:d6:b6:b2:91:28: 37:24:a6:32:c5:70:53:b5:9e:63:53:1a:d7:58:50: b4:cc:89:b7:f5:66:43:3f:74:2f:15:63:0b:d5:31: 44:a7:d2:3c:30:39:4e:47:c5:95:2e:fe:c8:40:07: 6b:54:2f:a3:f6:eb:98:67:2a:ea:ea:bd:66:68:eb: 75:b5:c1:e9:72:f8:d0:22:e7:9c:8b:0e:76:05:61: 61:1f:ce:11:3f:b9:96:32:ac:f5:35:cb:73:09:62: fa:08:36:03:87:9b:a8:f0:04:b5:99:c7:a1:58:92: 5d:6c:78:34:64:48:46:40:d8:80:99:db:ad:e8:0c: 1f:ec:20:12:40:83:1d:48:4c:6d:bd:ed:4e:0b:17: 82:c4:90:e4:eb:57:8e:d8:74:bd:46:b7:c9:45:22: df:6e:ee:f4:eb:eb:89:46:58:ad:9a:02:44:b0:ee: 6e:f8:37:5a:86:55:a5:ed:c3:15:78:aa:07:cb:e9: b8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C0:C5:38:F5:D5:E6:8B:01:58:85:58:93:B6:05:AC:D2:64:86:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/75a59672-5441-3b3f-94bd-5838c9176537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:fa:72:4f:55:92:b8:b3:a7:b2:9b:58:bc:b3:de:2f:69:68: f8:5b:26:a9:20:71:c9:1f:f6:33:18:c9:15:9b:18:93:1e:ff: 51:7a:47:78:69:a1:36:62:e9:f8:5e:40:89:a6:55:b5:c1:bf: 6b:2e:f5:0a:46:aa:b0:bf:0f:ca:99:8a:6d:f7:54:2c:52:b9: 50:13:6c:99:46:e5:4e:ba:c4:06:8f:0c:ac:ac:de:47:91:7a: 99:38:a9:37:97:07:cc:d8:68:a7:b6:1a:68:e1:a5:ac:fd:03: c7:df:ec:30:83:c1:96:f2:1c:ac:35:d2:d0:99:d7:02:6f:cb: 83:97:b4:26:55:1b:29:b3:7a:1f:6c:db:6f:e9:d2:d8:b2:c0: 9f:61:78:37:c5:58:18:f9:01:26:c0:dc:c7:37:e2:1b:67:d8: 76:b5:a7:8f:51:40:7e:f0:da:40:50:3a:f3:b9:31:1d:09:59: e8:59:5b:d9:22:85:b0:ba:c8:2b:ca:b8:b7:29:4c:61:bb:a1: b9:0b:31:cf:19:29:2d:e1:bc:6c:ca:0d:e8:b9:78:c0:0b:4b: 81:6e:11:43:98:31:a9:dc:e1:52:cb:9a:87:42:b0:0e:f3:41: 49:9c:3f:cb:d8:f7:f6:ce:66:2f:74:90:40:db:36:08:2b:07: ed:8f:89:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQv1Rn07sGpmsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MTQ3MjFkMWQtOTIyZC00ZTFhLTgxODUtZjU2MzE3NGM0NDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8w5FJc8TVV04adVf3DJRprIOEe3UObt1AJq rfy1ke7Q4v02tPdK+9dlzSF4nrR0dbTr7dO6MAUZegoV5d1Ixnn1IVji1raykSg3 JKYyxXBTtZ5jUxrXWFC0zIm39WZDP3QvFWML1TFEp9I8MDlOR8WVLv7IQAdrVC+j 9uuYZyrq6r1maOt1tcHpcvjQIueciw52BWFhH84RP7mWMqz1NctzCWL6CDYDh5uo 8AS1mcehWJJdbHg0ZEhGQNiAmdut6Awf7CASQIMdSExtve1OCxeCxJDk61eO2HS9 RrfJRSLfbu706+uJRlitmgJEsO5u+DdahlWl7cMVeKoHy+m4BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjAxTj11eaLAViFWJO2BazSZIaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvNzVhNTk2NzItNTQ0MS0z YjNmLTk0YmQtNTgzOGM5MTc2NTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElUhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ36ck9Vkrizp7KbWLyz3i9paPhbJqkgcckf9jMYyRWbGJMe/1F6R3hp oTZi6fheQImmVbXBv2su9QpGqrC/D8qZim33VCxSuVATbJlG5U66xAaPDKys3keR epk4qTeXB8zYaKe2Gmjhpaz9A8ff7DCDwZbyHKw10tCZ1wJvy4OXtCZVGymzeh9s 22/p0tiywJ9heDfFWBj5ASbA3Mc34htn2Ha1p49RQH7w2kBQOvO5MR0JWehZW9ki hbC6yCvKuLcpTGG7obkLMc8ZKS3hvGzKDei5eMALS4FuEUOYManc4VLLmodCsA7z QUmcP8vY9/bOZi90kEDbNggrB+2PiVo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:21:12 2025 by rpki-client