$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/911d192a-8add-325c-a5eb-88bbefdeee71.roa File: 911d192a-8add-325c-a5eb-88bbefdeee71.roa (raw, json) Hash identifier: VIsKw2GqL64jzSmDUqrSy+KFpeIS5JzX71JkWixKDeA= Subject key identifier: 7B:E6:DD:E5:E6:71:E1:00:D6:89:70:41:D2:4F:4D:5B:23:C7:95:E3 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584ED9C746B00A63E27DB0800400 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/911d192a-8add-325c-a5eb-88bbefdeee71.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 11377 IP address blocks: 149.72.128.0/19 maxlen: 19 149.72.160.0/19 maxlen: 19 149.72.192.0/19 maxlen: 19 149.72.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:46:b0:0a:63:e2:7d:b0:80:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=fa8ddcbd-bbc0-4881-ad67-778af5cb92dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:fd:0e:e6:bc:b0:1a:e1:66:66:18:f1:4d: 7e:3d:3b:e5:fe:cc:a0:c8:7a:83:9b:01:56:18:d4: 17:14:7f:8f:52:80:1f:a2:f5:4b:f9:ad:3e:e2:4b: a4:bd:9a:51:89:dc:32:9d:fb:73:07:78:73:65:8d: a4:8d:3f:8a:89:af:16:05:79:b9:83:a9:97:be:52: 0e:71:89:97:a4:b2:48:14:b6:07:71:7d:d4:c9:88: df:36:25:31:ae:35:a9:0e:45:86:50:6a:fd:5b:c7: b1:5f:69:0e:4a:94:ad:f1:aa:df:dc:56:13:03:5d: 08:95:9a:49:ee:e7:e5:88:b1:bf:f1:51:1b:da:76: f3:a7:24:0c:a0:48:60:56:89:fa:96:cd:84:59:be: 08:33:00:91:e3:67:28:cb:84:07:79:cb:bb:82:02: de:3a:fe:6e:a3:35:bd:e2:e5:b3:05:f1:83:fa:59: fc:17:5a:78:46:77:6a:f4:3f:d6:9f:6f:82:4b:3c: 82:82:5a:ad:a9:52:97:92:66:ca:37:ad:96:a8:c4: 4e:4e:a8:62:6d:7a:e1:e4:e8:f5:65:57:99:90:23: 49:11:75:22:91:e6:0f:f9:d0:4a:98:a3:95:e8:3a: e0:56:3e:03:2e:e5:2e:cc:cc:16:08:67:8f:ec:35: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E6:DD:E5:E6:71:E1:00:D6:89:70:41:D2:4F:4D:5B:23:C7:95:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/911d192a-8add-325c-a5eb-88bbefdeee71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:b4:79:70:7c:d4:14:ee:0c:a5:9a:c5:95:d7:37:d6:14:93: 96:c4:75:b2:0c:2a:4b:91:5d:1b:79:a2:25:19:5e:53:e7:e0: 39:6a:fd:bf:4d:79:26:60:8d:2e:d5:20:ce:f1:8b:93:75:46: 6a:69:ca:9f:a2:4b:bf:c9:b1:8d:1d:2a:4f:ac:f8:bc:5f:5c: e4:0b:e6:29:c5:ae:53:ec:94:7e:1e:f9:a6:35:30:89:44:b3: 2c:7a:38:5b:e8:78:4b:c1:f5:33:bd:61:3a:5a:92:eb:93:84: 81:ff:68:0a:6f:4e:78:cc:ac:53:4b:36:90:d6:cf:fe:41:cf: 27:2f:f0:0a:67:50:e6:97:b5:1a:ea:b3:7b:70:14:1d:3e:43: b7:dc:5a:84:e1:95:c0:50:cd:0a:46:37:5e:3c:68:66:e1:8a: 63:ea:4c:88:87:ed:bb:1f:48:0a:bf:4d:c2:81:8f:c9:b0:08: 71:ac:cd:82:d0:c1:f1:05:9f:8b:9d:e2:d4:fc:fd:a8:da:e4: 92:4d:de:9e:39:ab:33:51:ba:34:66:d3:35:40:e7:b3:c1:65: 64:bf:e9:b6:75:6e:9d:56:71:3c:80:c0:ed:31:be:67:8d:ec: 62:4f:44:a5:ec:4e:6b:ac:24:18:13:34:23:d5:6a:04:a6:b0: b2:6a:d5:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx0awCmPifbCABAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZmE4ZGRjYmQtYmJjMC00ODgxLWFkNjctNzc4YWY1Y2I5MmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMT9Dua8sBrhZmYY8U1+PTvl/sygyHqDmwFW GNQXFH+PUoAfovVL+a0+4kukvZpRidwynftzB3hzZY2kjT+Kia8WBXm5g6mXvlIO cYmXpLJIFLYHcX3UyYjfNiUxrjWpDkWGUGr9W8exX2kOSpSt8arf3FYTA10IlZpJ 7ufliLG/8VEb2nbzpyQMoEhgVon6ls2EWb4IMwCR42coy4QHecu7ggLeOv5uozW9 4uWzBfGD+ln8F1p4Rndq9D/Wn2+CSzyCglqtqVKXkmbKN62WqMROTqhibXrh5Oj1 ZVeZkCNJEXUikeYP+dBKmKOV6DrgVj4DLuUuzMwWCGeP7DULRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvm3eXmceEA1olwQdJPTVsjx5XjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvOTExZDE5MmEtOGFkZC0z MjVjLWE1ZWItODhiYmVmZGVlZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlUiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK20eXB81BTuDKWaxZXXN9YUk5bEdbIMKkuRXRt5oiUZXlPn4Dlq/b9N eSZgjS7VIM7xi5N1Rmppyp+iS7/JsY0dKk+s+LxfXOQL5inFrlPslH4e+aY1MIlE syx6OFvoeEvB9TO9YTpakuuThIH/aApvTnjMrFNLNpDWz/5Bzycv8ApnUOaXtRrq s3twFB0+Q7fcWoThlcBQzQpGN148aGbhimPqTIiH7bsfSAq/TcKBj8mwCHGszYLQ wfEFn4ud4tT8/aja5JJN3p45qzNRujRm0zVA57PBZWS/6bZ1bp1WcTyAwO0xvmeN 7GJPRKXsTmusJBgTNCPVagSmsLJq1RI= -----END CERTIFICATE-----Generated at Wed Sep 23 21:42:46 2026 by rpki-client