$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/911d192a-8add-325c-a5eb-88bbefdeee71.roa File: 911d192a-8add-325c-a5eb-88bbefdeee71.roa (raw, json) Hash identifier: a23HayAawFjRhZVbXXXkTiQSOPThLuCGlGf0g5dxD2c= Subject key identifier: 09:41:15:0A:A3:72:47:BF:82:93:DB:B5:99:C3:58:EF:24:05:08:7A Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584B970CD76AF9C160C34491E4A0 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/911d192a-8add-325c-a5eb-88bbefdeee71.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 11377 IP address blocks: 149.72.128.0/19 maxlen: 19 149.72.160.0/19 maxlen: 19 149.72.192.0/19 maxlen: 19 149.72.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d7:6a:f9:c1:60:c3:44:91:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=b25d1005-4340-44ac-9837-26b9a64ae97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:59:09:66:93:c2:13:ca:dd:9c:0e:87:b8:48: a1:2a:a1:f6:ca:61:66:d2:5f:87:b7:ad:62:82:23: 6f:ee:c6:9f:39:4a:eb:8a:38:aa:a9:8a:bc:a0:ec: 6b:07:b3:52:6a:17:4f:5c:bb:b5:fb:a0:13:60:41: fe:a2:04:5b:18:de:87:0a:3a:20:21:7a:78:86:4e: 03:8b:9f:69:28:da:05:35:94:27:6c:ad:09:10:20: d8:ab:3b:0e:fb:1c:34:0d:93:a5:c7:16:15:91:33: ea:be:2c:f2:fe:5e:f2:9c:64:75:71:f5:a2:94:c4: d1:b8:a2:c8:dd:94:a8:68:4c:c7:11:5e:c5:15:19: 86:c2:10:c3:a3:9d:6d:d6:dc:10:3a:de:de:9d:e3: 2b:31:e9:f5:44:99:e5:40:15:4b:4c:0d:bd:13:1f: da:b5:60:ab:56:03:11:f8:29:85:c2:17:92:da:b6: 5c:d0:fd:fd:56:b2:77:bb:76:13:9e:56:bc:e6:68: be:dc:ac:47:2a:bf:54:9d:26:e4:28:f7:ae:18:a2: 53:d4:46:43:a9:da:c7:48:d8:c0:d4:d2:48:51:1d: 5f:1c:8c:54:1b:b8:a9:3f:a0:ba:32:e6:41:ed:3a: 7d:9a:42:2d:e8:ad:98:b4:79:bd:29:f4:0e:12:07: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:41:15:0A:A3:72:47:BF:82:93:DB:B5:99:C3:58:EF:24:05:08:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/911d192a-8add-325c-a5eb-88bbefdeee71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:68:e9:b0:4b:68:d3:6b:49:71:c9:25:0a:75:be:36:3f:53: 0f:f0:9c:36:f2:1d:93:3d:f6:d6:35:ce:8d:14:f6:e4:61:c4: e7:41:f0:dd:5f:35:1f:bb:75:e6:a0:af:db:41:d1:8e:f6:53: 5a:26:31:e4:ac:35:ac:df:7a:8f:d4:c8:9d:bc:59:39:a0:3a: 4b:b5:9a:b9:f8:cf:a2:35:98:09:6a:46:95:7f:ac:bc:cb:40: 43:30:0c:fe:14:5f:dd:13:cb:84:34:55:87:01:37:55:7a:01: 25:d2:08:52:a9:1e:d9:36:04:2e:43:ce:d1:c3:ff:ab:0b:d1: 2c:1d:db:44:f8:4f:c1:01:42:9e:a1:0c:5c:9d:dd:ff:57:70: 9f:15:e7:fa:f8:3c:d1:b0:d6:6c:fa:82:6a:ed:23:0c:75:f2: 35:44:9d:c6:0c:1c:1a:c6:3f:aa:91:b8:6a:62:19:1f:98:a9: 06:4b:3c:89:c8:72:7e:1b:43:99:02:2b:57:cc:e3:e5:6d:1e: f2:ab:5e:1e:19:8f:87:73:55:fa:50:08:bb:19:0b:b7:15:17: 32:44:58:59:26:af:14:fe:b5:ac:60:c9:5d:bb:e5:c8:c1:67: f1:6c:a1:84:03:17:c5:0f:92:cb:7e:c1:c0:00:2e:a3:91:e6: 6e:da:17:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNdq+cFgw0SR5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YjI1ZDEwMDUtNDM0MC00NGFjLTk4MzctMjZiOWE2NGFlOTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVkJZpPCE8rdnA6HuEihKqH2ymFm0l+Ht61i giNv7safOUrrijiqqYq8oOxrB7NSahdPXLu1+6ATYEH+ogRbGN6HCjogIXp4hk4D i59pKNoFNZQnbK0JECDYqzsO+xw0DZOlxxYVkTPqvizy/l7ynGR1cfWilMTRuKLI 3ZSoaEzHEV7FFRmGwhDDo51t1twQOt7eneMrMen1RJnlQBVLTA29Ex/atWCrVgMR +CmFwheS2rZc0P39VrJ3u3YTnla85mi+3KxHKr9UnSbkKPeuGKJT1EZDqdrHSNjA 1NJIUR1fHIxUG7ipP6C6MuZB7Tp9mkIt6K2YtHm9KfQOEgfy0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlBFQqjcke/gpPbtZnDWO8kBQh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvOTExZDE5MmEtOGFkZC0z MjVjLWE1ZWItODhiYmVmZGVlZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlUiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAto6bBLaNNrSXHJJQp1vjY/Uw/wnDbyHZM99tY1zo0U9uRhxOdB8N1f NR+7deagr9tB0Y72U1omMeSsNazfeo/UyJ28WTmgOku1mrn4z6I1mAlqRpV/rLzL QEMwDP4UX90Ty4Q0VYcBN1V6ASXSCFKpHtk2BC5DztHD/6sL0Swd20T4T8EBQp6h DFyd3f9XcJ8V5/r4PNGw1mz6gmrtIwx18jVEncYMHBrGP6qRuGpiGR+YqQZLPInI cn4bQ5kCK1fM4+VtHvKrXh4Zj4dzVfpQCLsZC7cVFzJEWFkmrxT+taxgyV275cjB Z/FsoYQDF8UPkst+wcAALqOR5m7aF58= -----END CERTIFICATE-----Generated at Wed Nov 5 10:16:22 2025 by rpki-client