$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa File: ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa (raw, json) Hash identifier: o8xcP/sD5wqOt+7ONCOmEt6VEqx4U2XYCK8ncnxO3Q0= Subject key identifier: C1:F4:D7:E2:F9:23:1F:CE:7B:30:49:72:AD:A4:B6:C4:06:69:7F:75 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584F4F08158C2DE078C9E09F91C0 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 149.72.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:15:8c:2d:e0:78:c9:e0:9f:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=358f6867-6782-4296-b57e-a66ffa92efa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:f8:fc:84:74:d8:6d:50:2d:56:43:6e:9a: 36:a7:0e:31:7a:3e:20:56:77:0f:11:e0:06:60:3d: bc:96:01:ef:a2:b9:0a:e1:ba:63:04:43:61:d0:26: bb:3f:3f:92:6b:be:9f:f6:0e:19:7c:91:0d:50:67: b3:98:63:c2:da:09:84:c6:95:a5:60:81:3a:ae:79: 4d:f8:28:ee:02:dc:eb:5a:d9:19:27:85:56:ea:53: 4c:45:f9:5c:ad:a2:a1:02:0b:e1:65:f5:0e:07:8f: 35:df:dd:46:f6:16:8a:73:c6:53:a6:b7:c1:7e:e7: 2b:a3:bd:d1:53:22:9b:a9:98:a8:45:00:cd:cc:2c: 7a:50:a9:a7:72:8b:2a:b0:3d:70:77:75:d3:db:d4: e5:4b:cb:e4:4d:bc:0b:5f:ac:57:ae:7a:99:68:f3: 6a:51:cd:81:10:f5:c7:d8:ee:a5:af:f8:f3:ee:e2: be:71:a2:f4:0a:55:f2:7a:b5:0c:f4:b9:88:44:33: 07:11:3a:82:7e:35:06:01:3a:9c:e7:68:e5:2c:89: 0d:c9:1e:86:fa:40:5d:36:3c:95:3a:5b:97:b0:a6: 6d:4d:fd:9d:44:53:39:8a:be:e8:4e:db:3b:88:67: 3b:0b:f0:53:ab:13:93:84:56:f3:c2:23:bb:19:ee: d0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F4:D7:E2:F9:23:1F:CE:7B:30:49:72:AD:A4:B6:C4:06:69:7F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:42:cb:7f:eb:9c:4b:f0:a1:5d:91:83:af:ec:c8:7a:b9:d2: 2d:9c:9d:6e:9c:88:4d:bf:ae:14:2d:26:c1:1e:a9:65:25:0b: c2:20:69:b0:75:87:d8:af:d6:75:0d:65:8c:26:c2:d7:d0:c8: 5c:4b:22:87:3c:36:39:26:e4:a7:b6:c3:42:bc:09:66:6e:54: cd:79:24:8f:6d:c2:40:5b:64:95:8b:36:3c:4c:eb:04:07:15: 91:24:ff:64:71:0e:5f:1f:45:14:5d:ff:40:11:fa:46:15:79: 36:93:1d:91:17:11:64:0b:e4:f6:3d:41:46:bd:ad:94:35:4a: 6e:4e:80:3d:fc:33:a7:16:95:71:11:ce:3e:8b:61:5a:c4:77: 46:1a:7e:0a:93:6d:69:6d:d7:3f:32:da:e5:60:94:c0:c4:53: 59:de:ee:27:fc:3e:83:dc:a6:bf:ca:38:4a:20:0e:ed:aa:02: 0c:60:7c:df:ec:24:be:60:9f:17:48:f9:9f:d0:68:48:13:44: 77:95:43:59:d7:a6:8b:10:19:b0:0e:3a:19:60:4f:7d:b8:0b: b7:dd:1e:9c:b8:bb:8c:70:1b:91:4d:3a:1b:6b:9b:99:ec:fd: b9:9b:30:b2:73:27:d3:0e:ac:7e:4f:16:7f:c7:df:51:61:4f: 33:37:d8:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBWMLeB4yeCfkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MzU4ZjY4NjctNjc4Mi00Mjk2LWI1N2UtYTY2ZmZhOTJlZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx774/IR02G1QLVZDbpo2pw4xej4gVncPEeAG YD28lgHvorkK4bpjBENh0Ca7Pz+Sa76f9g4ZfJENUGezmGPC2gmExpWlYIE6rnlN +CjuAtzrWtkZJ4VW6lNMRflcraKhAgvhZfUOB481391G9haKc8ZTprfBfucro73R UyKbqZioRQDNzCx6UKmncosqsD1wd3XT29TlS8vkTbwLX6xXrnqZaPNqUc2BEPXH 2O6lr/jz7uK+caL0ClXyerUM9LmIRDMHETqCfjUGATqc52jlLIkNyR6G+kBdNjyV OluXsKZtTf2dRFM5ir7oTts7iGc7C/BTqxOThFbzwiO7Ge7QCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH01+L5Ix/OezBJcq2ktsQGaX91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvZmZhNTJjNjAtZGE5NS0z MWIxLWJmZTktYWNiZDRlNTk4NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdCy3/rnEvwoV2Rg6/syHq50i2cnW6ciE2/rhQtJsEeqWUlC8IgabB1 h9iv1nUNZYwmwtfQyFxLIoc8Njkm5Ke2w0K8CWZuVM15JI9twkBbZJWLNjxM6wQH FZEk/2RxDl8fRRRd/0AR+kYVeTaTHZEXEWQL5PY9QUa9rZQ1Sm5OgD38M6cWlXER zj6LYVrEd0YafgqTbWlt1z8y2uVglMDEU1ne7if8PoPcpr/KOEogDu2qAgxgfN/s JL5gnxdI+Z/QaEgTRHeVQ1nXposQGbAOOhlgT324C7fdHpy4u4xwG5FNOhtrm5ns /bmbMLJzJ9MOrH5PFn/H31FhTzM32FA= -----END CERTIFICATE-----Generated at Tue Oct 6 18:58:22 2026 by rpki-client