$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa File: ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa (raw, json) Hash identifier: 57qzVhyqiLebOpxqJ8FTMZ5uHkyNHIDvtYuRADZR0TE= Subject key identifier: B8:AA:E4:47:FC:AE:81:92:B6:CA:0F:61:A6:35:B7:79:EF:30:11:56 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584A89A61C693C1BD144BCF055C0 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 14618 IP address blocks: 149.72.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1c:69:3c:1b:d1:44:bc:f0:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=4e4c9bd9-dc3f-4bc7-80ed-d273df958ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:55:36:7f:f7:97:e2:87:70:a7:34:e4:60: fd:1a:4c:1d:b3:52:79:41:18:f6:cc:45:28:9a:01: 02:cb:2d:b8:4a:6a:78:40:6a:b1:00:f4:0d:1e:05: c6:a7:97:84:9a:9f:e2:d9:77:1e:09:0a:d6:5f:a2: 92:c1:ab:26:b4:9f:8d:99:ab:0c:28:ea:16:90:3a: 93:c1:f5:64:ca:16:f3:2a:f9:da:70:c8:30:d7:6d: f9:22:a6:23:65:be:c5:9d:9a:62:07:11:76:e9:1e: e9:65:c4:eb:cd:68:3b:2f:e7:0d:97:de:41:06:d3: 36:fe:2c:3c:8e:d6:bd:97:cc:6c:ed:d5:cd:74:01: 18:c6:2e:28:e1:d7:1d:bd:47:2e:b7:71:3a:47:3e: 4c:86:17:1f:9e:03:bd:29:f2:70:e8:54:3d:13:8e: dd:33:08:d1:8b:74:9e:74:21:45:24:31:99:9e:6d: b5:4c:5f:4d:e7:80:be:8d:fc:57:a3:2c:8d:dc:74: 81:1c:ff:bb:1e:24:11:e9:03:61:b6:7c:32:3d:04: a1:ad:88:58:fe:8d:d5:0b:8a:35:4e:ad:d8:85:4c: a5:86:5f:0f:27:f9:04:fa:70:38:fa:67:5a:c4:20: fc:37:58:bb:c3:77:6f:44:a8:e6:2f:91:95:f2:9c: 09:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AA:E4:47:FC:AE:81:92:B6:CA:0F:61:A6:35:B7:79:EF:30:11:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:4c:42:20:04:89:f6:a4:1e:71:ce:8c:3d:10:58:5a:9f:e1: 47:bb:60:40:8b:7d:38:44:f6:f2:d2:43:2b:54:d8:d7:c0:f4: dc:1c:83:ae:66:43:5b:2b:ab:a2:73:5d:d1:60:ba:97:b1:f5: f4:17:16:ad:93:83:f5:fe:bd:cf:f9:30:94:b4:95:14:20:89: 81:45:d5:41:b2:71:d0:83:ec:8b:00:2e:41:4f:f0:c0:f9:62: 97:22:25:6a:e2:02:20:d9:26:5f:aa:15:32:bc:da:e9:73:f3: ff:26:53:45:1d:2f:05:44:e1:bb:88:77:d3:eb:65:f5:cb:f9: 35:06:c3:ea:65:e2:7f:75:5a:70:dd:5b:e1:ac:ab:93:76:6c: 69:95:af:7f:74:b6:7c:04:8c:2d:eb:6c:26:2f:19:ec:78:fc: b5:40:f8:73:2e:44:78:6b:30:95:a1:fb:70:19:db:8d:36:6c: 9d:3f:ce:51:58:66:76:88:0f:ce:de:a2:34:61:26:92:ba:38: 78:cc:6c:f1:e1:8a:5a:12:dd:cd:ea:63:d0:f2:00:93:82:91: 5e:53:df:47:65:3b:91:1a:db:a8:6e:11:40:d5:05:29:4c:8d: 53:9e:ce:ff:7b:e6:81:35:e0:da:4e:52:4f:1a:af:7e:11:1b: ab:0b:45:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJphxpPBvRRLzwVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk NGU0YzliZDktZGMzZi00YmM3LTgwZWQtZDI3M2RmOTU4ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKVVNn/3l+KHcKc05GD9Gkwds1J5QRj2zEUo mgECyy24Smp4QGqxAPQNHgXGp5eEmp/i2XceCQrWX6KSwasmtJ+NmasMKOoWkDqT wfVkyhbzKvnacMgw1235IqYjZb7FnZpiBxF26R7pZcTrzWg7L+cNl95BBtM2/iw8 jta9l8xs7dXNdAEYxi4o4dcdvUcut3E6Rz5MhhcfngO9KfJw6FQ9E47dMwjRi3Se dCFFJDGZnm21TF9N54C+jfxXoyyN3HSBHP+7HiQR6QNhtnwyPQShrYhY/o3VC4o1 Tq3YhUylhl8PJ/kE+nA4+mdaxCD8N1i7w3dvRKjmL5GV8pwJxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiq5Ef8roGStsoPYaY1t3nvMBFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvZmZhNTJjNjAtZGE5NS0z MWIxLWJmZTktYWNiZDRlNTk4NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1MQiAEifakHnHOjD0QWFqf4Ue7YECLfThE9vLSQytU2NfA9Nwcg65m Q1srq6JzXdFgupex9fQXFq2Tg/X+vc/5MJS0lRQgiYFF1UGycdCD7IsALkFP8MD5 YpciJWriAiDZJl+qFTK82ulz8/8mU0UdLwVE4buId9PrZfXL+TUGw+pl4n91WnDd W+Gsq5N2bGmVr390tnwEjC3rbCYvGex4/LVA+HMuRHhrMJWh+3AZ2402bJ0/zlFY ZnaID87eojRhJpK6OHjMbPHhiloS3c3qY9DyAJOCkV5T30dlO5Ea26huEUDVBSlM jVOezv975oE14NpOUk8ar34RG6sLRZU= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:00 2025 by rpki-client