$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa File: a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa (raw, json) Hash identifier: YVYqnlaqOQfQ75tU5/IkBtEJpS5KxlG6nRotq6V8dls= Subject key identifier: 0A:55:41:39:01:AE:61:72:9E:38:CF:49:E5:DC:8F:42:2A:96:BA:10 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584AB91B9055E7CBBC62A3296B40 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 11377 IP address blocks: 149.72.100.0/23 maxlen: 23 149.72.102.0/23 maxlen: 23 149.72.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:90:55:e7:cb:bc:62:a3:29:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=6286e886-7b1b-4ffd-93b0-e993b6fca88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:12:54:eb:33:72:d7:cd:b7:4b:ca:b4:63: fb:fa:cd:96:5f:6d:b5:12:0e:2d:20:49:5c:b2:06: 66:6d:7d:6b:0e:06:5f:78:22:da:31:48:85:5c:44: a9:28:c6:7d:e3:70:26:47:33:12:ec:4d:59:98:bf: 81:32:03:16:63:b1:37:2f:7a:81:21:4a:cc:bb:e6: a1:dc:b8:98:93:3c:70:6a:85:9a:48:0e:91:cd:fc: 1d:53:9b:d9:fc:cf:8b:01:8a:07:56:62:2b:f2:c2: 10:45:bc:e6:4f:c9:18:f0:af:c4:65:8d:c1:f6:4e: 95:b3:b5:6a:1c:8c:33:3a:e2:ae:9e:ae:4d:4d:4c: cf:b7:e2:fd:5d:32:ea:48:c3:ce:9f:bf:80:4b:c4: 5c:b1:37:04:63:a6:32:0b:14:78:e8:45:66:43:34: 5b:1d:4f:c3:79:e8:cd:b4:d1:4b:c5:23:0b:70:a2: eb:2e:03:09:31:53:c2:7a:4e:3d:4f:2b:dd:43:8d: db:d5:b4:89:2b:1c:8f:96:77:af:57:42:63:f7:ae: 95:2d:cf:6a:0b:ce:61:53:5f:97:ae:20:19:fa:6f: 4e:bd:03:50:22:65:55:46:65:ea:1d:d1:a2:aa:fc: 06:e8:51:9a:c1:98:2b:96:45:02:6e:3f:ce:05:2e: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:55:41:39:01:AE:61:72:9E:38:CF:49:E5:DC:8F:42:2A:96:BA:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.100.0-149.72.105.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:cd:6d:b0:3c:03:9c:87:0f:56:81:15:cc:17:d3:ca:25:68: d4:a1:14:d6:8b:16:1b:d4:63:c3:45:7f:73:d8:07:9f:9d:8f: da:7b:68:4d:71:1a:99:da:70:4b:fb:59:1e:c7:a9:6f:41:7d: 43:f7:6a:7f:5b:cf:bc:c9:fe:03:ef:22:3e:e4:94:d5:15:e1: 9a:f0:e5:83:6b:4b:bd:86:44:87:13:b2:bd:20:f4:ff:0c:73: 65:8d:af:14:9b:7a:de:b8:1b:f5:d3:2f:6c:25:ad:32:6f:ff: d0:7c:86:b8:ca:48:a4:91:4b:db:23:d3:b7:4e:7c:15:d2:d9: dd:08:8f:b8:85:60:e9:42:d9:e1:c9:63:98:a0:6f:51:71:d6: 04:f1:b2:3e:11:42:bb:05:fe:6b:57:77:0c:23:8f:69:e6:3b: 38:4d:56:93:56:65:59:a6:3a:bb:ba:2f:7f:8a:e2:eb:a2:c7: 84:0d:6e:12:37:30:db:ad:8e:4a:5e:0a:43:b7:f4:b9:87:61: 0a:0a:be:d6:f1:93:b9:7e:c3:5d:9b:28:be:6d:c1:1e:2f:ca: d8:bf:93:10:1c:40:70:b0:96:d9:fb:91:f9:6e:ae:f9:23:53: b1:96:e2:10:70:b1:7a:a6:6a:e5:72:4d:be:1e:ff:6b:0b:59: 2a:ae:a9:43 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEq5G5BV58u8YqMpa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NjI4NmU4ODYtN2IxYi00ZmZkLTkzYjAtZTk5M2I2ZmNhODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCkSVOszctfNt0vKtGP7+s2WX221Eg4tIElc sgZmbX1rDgZfeCLaMUiFXESpKMZ943AmRzMS7E1ZmL+BMgMWY7E3L3qBIUrMu+ah 3LiYkzxwaoWaSA6RzfwdU5vZ/M+LAYoHVmIr8sIQRbzmT8kY8K/EZY3B9k6Vs7Vq HIwzOuKunq5NTUzPt+L9XTLqSMPOn7+AS8RcsTcEY6YyCxR46EVmQzRbHU/DeejN tNFLxSMLcKLrLgMJMVPCek49TyvdQ43b1bSJKxyPlnevV0Jj966VLc9qC85hU1+X riAZ+m9OvQNQImVVRmXqHdGiqvwG6FGawZgrlkUCbj/OBS6HFQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFApVQTkBrmFynjjPSeXcj0IqlroQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvYTQ1Zjc0YzAtOWZlOS0z OWExLThlYzEtODZjMjhkNWI1YzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKVSGQD BAGVSGgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMM1tsDwDnIcPVoEVzBfTyiVo1KEU1osWG9Rjw0V/c9gH n52P2ntoTXEamdpwS/tZHsepb0F9Q/dqf1vPvMn+A+8iPuSU1RXhmvDlg2tLvYZE hxOyvSD0/wxzZY2vFJt63rgb9dMvbCWtMm//0HyGuMpIpJFL2yPTt058FdLZ3QiP uIVg6ULZ4cljmKBvUXHWBPGyPhFCuwX+a1d3DCOPaeY7OE1Wk1ZlWaY6u7ovf4ri 66LHhA1uEjcw262OSl4KQ7f0uYdhCgq+1vGTuX7DXZsovm3BHi/K2L+TEBxAcLCW 2fuR+W6u+SNTsZbiEHCxeqZq5XJNvh7/awtZKq6pQw== -----END CERTIFICATE-----Generated at Mon Aug 4 14:11:31 2025 by rpki-client