$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa File: ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa (raw, json) Hash identifier: l1MvA5xS1xUaGDPJmAyWyWgTUs09qH+YcHJAiY2p5Rc= Subject key identifier: 25:22:14:45:D5:10:50:7E:27:18:25:A0:16:0B:2F:79:64:FF:CB:3D Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584D2A74E9D462DD94C69C00AFC0 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 149.72.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e9:d4:62:dd:94:c6:9c:00:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=bf599e65-3304-4ef1-a885-f6ef52e800a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:b2:4d:e9:62:78:fb:d0:cc:84:d3:04:1b: fc:8a:21:f6:0b:25:05:d2:68:b7:71:fb:c6:18:50: ac:d5:45:b2:74:21:47:5e:25:c2:74:25:ca:bf:2b: 09:67:79:13:99:06:4e:c1:8f:77:b7:51:2f:51:e6: 31:3b:fc:35:bf:51:97:27:9a:86:a2:fa:71:61:9e: 91:19:22:07:5b:5e:1e:04:56:32:61:ce:4b:d4:09: de:b7:9e:e8:46:db:37:18:0a:5d:94:e4:36:72:d4: f3:ee:33:30:c9:e0:7e:47:a3:c1:bb:18:1c:1d:e3: f7:b0:a3:9b:7a:67:ff:6e:3a:bd:e8:ff:fc:40:7a: 4d:b5:00:25:0e:7d:d3:92:a3:85:8d:f9:5e:b0:10: 74:6d:6f:1c:a6:41:dd:f7:5f:bd:2d:27:86:52:6f: ca:cb:4b:13:c4:af:77:b1:4a:77:60:15:65:6c:c9: 38:eb:54:cd:1b:28:1d:5b:f4:49:30:c1:f7:0c:3e: 86:f0:f8:90:a9:12:ec:c0:71:8c:c7:2d:6d:e2:72: b8:1d:58:3c:c0:31:2a:8c:15:20:dc:17:3c:da:c7: ae:87:ac:65:68:0a:20:47:69:bd:45:1f:b8:36:de: 5b:dc:9a:56:27:ba:dd:ac:6e:64:b6:0f:27:2b:e0: 29:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:22:14:45:D5:10:50:7E:27:18:25:A0:16:0B:2F:79:64:FF:CB:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:af:b5:11:15:d7:71:7c:fc:10:aa:98:4c:72:ef:54:f5:5c: 42:29:6c:7c:36:d3:d1:b1:e3:ff:56:f6:f0:11:92:8a:0a:44: 8a:6f:45:97:fa:fc:61:c7:10:6f:2a:5e:71:e1:57:d1:2c:e1: 45:28:83:67:e1:0c:18:36:a2:1a:f0:91:cf:41:50:5f:30:41: 1a:9d:12:81:cb:1e:5b:2b:4c:29:be:71:6e:6e:cc:cb:69:19: 57:de:e9:7f:8a:40:bc:88:b5:6d:68:82:3d:1e:11:5f:a7:4f: 89:a1:39:25:9c:f1:1e:66:30:5a:b7:a8:70:6c:0e:62:75:ba: e1:4f:57:12:83:94:2d:3d:08:bb:a4:c0:e5:19:3b:3e:2c:fc: 95:5c:6d:de:01:e5:c8:d9:8b:dc:30:35:f4:a4:36:10:e0:8f: a2:5b:cc:2b:34:80:0a:24:1a:fd:d9:c7:f3:82:d1:d8:74:7b: 43:81:60:d7:61:15:34:f4:34:d6:db:2c:76:fd:8c:82:cd:f0: a9:de:5c:b3:b2:f9:6b:9a:4f:8c:9c:55:92:1b:2b:c9:48:01: 90:19:2d:fd:ba:a5:37:84:8d:b8:79:36:6b:5c:09:a0:cc:58: 3d:6a:50:de:c2:95:aa:06:09:30:41:99:a9:fe:e9:40:b6:86: c3:f2:06:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOnUYt2UxpwAr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YmY1OTllNjUtMzMwNC00ZWYxLWE4ODUtZjZlZjUyZTgwMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn6yTeliePvQzITTBBv8iiH2CyUF0mi3cfvG GFCs1UWydCFHXiXCdCXKvysJZ3kTmQZOwY93t1EvUeYxO/w1v1GXJ5qGovpxYZ6R GSIHW14eBFYyYc5L1Anet57oRts3GApdlOQ2ctTz7jMwyeB+R6PBuxgcHeP3sKOb emf/bjq96P/8QHpNtQAlDn3TkqOFjflesBB0bW8cpkHd91+9LSeGUm/Ky0sTxK93 sUp3YBVlbMk461TNGygdW/RJMMH3DD6G8PiQqRLswHGMxy1t4nK4HVg8wDEqjBUg 3Bc82seuh6xlaAogR2m9RR+4Nt5b3JpWJ7rdrG5ktg8nK+AptQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUiFEXVEFB+JxgloBYLL3lk/8s9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvZmZhNTJjNjAtZGE5NS0z MWIxLWJmZTktYWNiZDRlNTk4NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGvtREV13F8/BCqmExy71T1XEIpbHw209Gx4/9W9vARkooKRIpvRZf6 /GHHEG8qXnHhV9Es4UUog2fhDBg2ohrwkc9BUF8wQRqdEoHLHlsrTCm+cW5uzMtp GVfe6X+KQLyItW1ogj0eEV+nT4mhOSWc8R5mMFq3qHBsDmJ1uuFPVxKDlC09CLuk wOUZOz4s/JVcbd4B5cjZi9wwNfSkNhDgj6JbzCs0gAokGv3Zx/OC0dh0e0OBYNdh FTT0NNbbLHb9jILN8KneXLOy+WuaT4ycVZIbK8lIAZAZLf26pTeEjbh5NmtcCaDM WD1qUN7ClaoGCTBBman+6UC2hsPyBtY= -----END CERTIFICATE-----Generated at Thu Mar 19 15:32:12 2026 by rpki-client