$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa File: 0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa (raw, json) Hash identifier: qELUvohesx6k8Dxe3z10NUO0KzP5eGFCion/nF4yMHc= Subject key identifier: 05:72:D9:EA:A0:B0:21:62:66:E5:B6:43:1D:7D:B3:60:19:6B:0F:D0 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B4FDC79976632F91DADDD3800 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 33442 IP address blocks: 149.23.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:79:97:66:32:f9:1d:ad:dd:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=ed0e75d6-6dc0-4569-8a2d-c345199a0a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6f:26:5a:09:57:d1:69:60:84:57:bd:03:cb: 16:7c:76:96:9e:d6:ff:61:cf:3a:fa:45:25:c9:88: dc:21:4e:74:e5:13:3f:21:14:cd:38:f2:02:16:0c: a4:47:0b:e5:f3:a4:b3:50:6f:3d:7a:a6:e4:2a:4e: 06:04:f3:7b:0c:ec:e6:ff:3b:1e:9b:d2:78:24:f4: 55:70:2f:dc:46:16:eb:b1:88:25:d8:13:5b:27:f0: 38:b6:e7:13:af:e6:25:0c:14:e7:79:0d:c0:c5:de: 98:1f:fe:5e:d5:c7:93:3e:5e:76:6a:fd:4c:30:bc: 55:ec:62:db:7a:65:56:6e:07:4c:36:94:82:30:cb: 29:ce:3b:4e:46:d8:49:e2:fc:3b:23:16:18:06:45: 59:61:46:73:bc:b1:da:8c:cf:9e:0a:2a:e6:af:68: f4:3b:cb:34:f1:fe:60:86:2a:5f:86:04:01:e0:fe: 6a:0e:dd:0e:20:62:75:eb:8b:d6:80:17:c0:37:8c: ca:04:77:9d:5e:ac:0b:3d:51:bd:80:7f:d5:b2:86: ef:02:98:25:04:f1:8d:78:d6:03:1f:4f:14:a6:ec: 01:d2:e4:c4:7b:8f:bd:cb:14:56:ea:35:a7:b9:80: ef:a8:0f:0f:bc:46:0b:8f:46:f8:8e:27:f9:5e:0f: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:72:D9:EA:A0:B0:21:62:66:E5:B6:43:1D:7D:B3:60:19:6B:0F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ef:24:b7:9c:a8:69:4b:39:69:9a:5c:88:8d:a2:ce:b7:4d: 2f:21:8e:7b:3c:34:0e:bf:ca:1c:6c:df:9c:8e:2b:d2:d0:c8: 38:ba:95:a9:a9:6d:3f:d2:9d:3f:75:ea:02:dc:5b:df:97:3f: 92:69:27:b9:d4:1a:85:e1:40:66:f8:33:2b:70:1e:2f:95:20: 95:ba:8e:d2:c7:ec:f8:f8:a2:8e:71:5a:3d:ff:b2:1a:76:db: 3e:6f:01:9f:0b:77:7d:83:44:40:43:a3:e9:29:81:ee:a0:8d: 75:d7:95:9e:34:35:ba:95:71:e9:52:f9:90:4b:03:67:1c:69: 5c:1d:19:41:67:7e:85:20:3b:04:15:65:43:ac:89:94:26:9a: 97:1f:cb:23:59:80:9a:b8:a4:eb:28:cb:3c:06:52:97:8c:ff: 92:aa:78:06:1f:6b:b2:77:e1:32:af:35:83:c5:61:b7:41:23: 89:48:2f:0e:02:84:49:6a:bc:fa:ff:f4:36:11:47:d1:1f:af: 48:3b:2b:12:0a:5f:cb:1b:69:97:d1:aa:ac:93:6a:2c:59:95: c3:89:e7:d1:39:3b:5d:a2:13:69:c1:db:5b:83:2d:dd:d2:2d: 96:fd:e9:95:7e:05:a5:44:ba:21:15:7d:13:4a:92:b4:77:a2: 8d:5c:c3:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HmXZjL5Ha3dOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZWQwZTc1ZDYtNmRjMC00NTY5LThhMmQtYzM0NTE5OWEwYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG8mWglX0WlghFe9A8sWfHaWntb/Yc86+kUl yYjcIU505RM/IRTNOPICFgykRwvl86SzUG89eqbkKk4GBPN7DOzm/zsem9J4JPRV cC/cRhbrsYgl2BNbJ/A4tucTr+YlDBTneQ3Axd6YH/5e1ceTPl52av1MMLxV7GLb emVWbgdMNpSCMMspzjtORthJ4vw7IxYYBkVZYUZzvLHajM+eCirmr2j0O8s08f5g hipfhgQB4P5qDt0OIGJ164vWgBfAN4zKBHedXqwLPVG9gH/VsobvApglBPGNeNYD H08UpuwB0uTEe4+9yxRW6jWnuYDvqA8PvEYLj0b4jif5Xg/1UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVy2eqgsCFiZuW2Qx19s2AZaw/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMGE2YjllMTItNTA4ZS0z NTY4LWE0ZDctYWZiNmFkNjJjYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzvJLecqGlLOWmaXIiNos63TS8hjns8NA6/yhxs35yOK9LQyDi6lamp bT/SnT916gLcW9+XP5JpJ7nUGoXhQGb4MytwHi+VIJW6jtLH7Pj4oo5xWj3/shp2 2z5vAZ8Ld32DREBDo+kpge6gjXXXlZ40NbqVcelS+ZBLA2ccaVwdGUFnfoUgOwQV ZUOsiZQmmpcfyyNZgJq4pOsoyzwGUpeM/5KqeAYfa7J34TKvNYPFYbdBI4lILw4C hElqvPr/9DYRR9Efr0g7KxIKX8sbaZfRqqyTaixZlcOJ59E5O12iE2nB21uDLd3S LZb96ZV+BaVEuiEVfRNKkrR3oo1cw+k= -----END CERTIFICATE-----Generated at Thu Oct 9 01:38:28 2025 by rpki-client