$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa File: 20ed8e04-a83d-3139-937f-62183b6e5173.roa (raw, json) Hash identifier: hXBqp/q4VFsxbEWTTSfXM89IRTAkaE1/TXMk4hDU4Hw= Subject key identifier: 10:47:19:F2:EC:4A:36:AD:04:90:00:5A:10:2D:92:AE:F0:B5:51:F6 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B2CF6D74E3A5DAB704B0F5B00 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 33442 IP address blocks: 149.23.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:d7:4e:3a:5d:ab:70:4b:0f:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=e76cd7ec-78a3-459d-ad0a-2a20f3cc865f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:97:5e:79:65:fe:19:d7:ad:d8:0f:41:90:89: 5d:4d:b7:55:43:f9:c0:cc:a1:f6:30:6c:e0:0b:49: 59:a4:2c:b2:7b:57:81:47:7f:3d:2c:08:6e:63:38: f9:fd:74:f9:cf:d2:a0:70:7d:f1:34:a3:3b:bf:3a: 2d:b9:52:b8:aa:5a:f3:9d:90:e4:09:a2:e1:ad:30: 7b:f1:2d:83:d7:67:d7:af:ac:70:b7:96:c5:d4:1c: 90:d9:2b:3f:24:64:eb:6c:53:24:86:45:5f:ee:05: da:fa:50:1f:ef:63:98:e4:e5:f4:53:92:97:d0:0e: b3:6f:4e:50:6e:76:d9:2f:09:51:7e:92:f4:1c:7d: be:33:42:de:db:76:08:9a:b7:f2:e2:c9:e6:f5:94: 8c:ed:a6:e1:a0:55:d6:8c:ed:8e:4d:cd:bc:24:01: 07:26:88:d4:73:e2:ca:12:c1:f9:a2:50:74:b3:3b: a8:ad:7b:69:60:bb:0c:9c:71:fd:62:d2:22:70:33: e7:b2:d0:20:d5:4f:c4:07:6d:d4:27:20:ec:08:23: f1:64:f9:f8:1c:fc:cd:da:12:fd:df:f4:34:3e:77: 5e:ba:b4:f0:4b:2c:dd:1a:6a:11:17:ad:ca:98:2f: d5:2d:6f:59:c5:0f:a5:d4:41:eb:bd:fa:47:a6:79: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:47:19:F2:EC:4A:36:AD:04:90:00:5A:10:2D:92:AE:F0:B5:51:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:9e:3f:bb:cf:f6:2c:43:0b:3e:a3:3f:d3:85:f6:3f:30:bf: e5:25:6b:be:7a:cd:18:de:96:60:cf:8e:66:4d:4c:3e:18:a2: e7:d1:de:f6:59:a7:0c:cf:f6:34:3d:e4:20:42:08:65:11:ab: 0c:96:97:58:67:9f:4b:d3:9b:c7:37:18:b0:ed:d4:a3:37:2f: 3a:fb:2a:d4:a2:5c:06:f6:b0:58:1c:0e:0b:84:42:15:82:22: 85:a2:cb:d6:36:7f:12:2f:64:6d:9d:5e:9a:3c:62:81:50:03: af:a6:6d:61:0f:61:23:95:19:cf:52:4b:6e:6d:c1:14:cd:bf: e5:4c:87:0a:f0:ef:d5:58:e8:6a:b8:8a:7c:37:bb:a7:4f:88: f2:3b:25:f6:53:8c:87:ca:33:8c:87:a3:4e:72:bb:68:8c:ff: b6:e9:58:e0:36:a8:35:30:11:1f:63:ad:c0:26:f3:7c:78:70: 3b:66:d8:94:93:dd:9e:8a:45:dd:af:f2:bc:7b:21:71:37:42: e5:e8:78:0e:a8:71:aa:09:d2:fa:43:f3:34:4e:7f:ed:be:d8: 50:34:9b:d4:01:45:fe:81:b4:e8:36:56:53:26:9c:d9:d3:b1: 13:a1:98:58:b7:02:01:29:f1:d5:20:3a:da:38:31:da:1e:3c: b6:88:41:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9tdOOl2rcEsPWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTc2Y2Q3ZWMtNzhhMy00NTlkLWFkMGEtMmEyMGYzY2M4NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJdeeWX+Gdet2A9BkIldTbdVQ/nAzKH2MGzg C0lZpCyye1eBR389LAhuYzj5/XT5z9KgcH3xNKM7vzotuVK4qlrznZDkCaLhrTB7 8S2D12fXr6xwt5bF1ByQ2Ss/JGTrbFMkhkVf7gXa+lAf72OY5OX0U5KX0A6zb05Q bnbZLwlRfpL0HH2+M0Le23YImrfy4snm9ZSM7abhoFXWjO2OTc28JAEHJojUc+LK EsH5olB0szuorXtpYLsMnHH9YtIicDPnstAg1U/EB23UJyDsCCPxZPn4HPzN2hL9 3/Q0PndeurTwSyzdGmoRF63KmC/VLW9ZxQ+l1EHrvfpHpnn9swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBHGfLsSjatBJAAWhAtkq7wtVH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMjBlZDhlMDQtYTgzZC0z MTM5LTkzN2YtNjIxODNiNmU1MTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRc9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6eP7vP9ixDCz6jP9OF9j8wv+Ula756zRjelmDPjmZNTD4YoufR3vZZ pwzP9jQ95CBCCGURqwyWl1hnn0vTm8c3GLDt1KM3Lzr7KtSiXAb2sFgcDguEQhWC IoWiy9Y2fxIvZG2dXpo8YoFQA6+mbWEPYSOVGc9SS25twRTNv+VMhwrw79VY6Gq4 inw3u6dPiPI7JfZTjIfKM4yHo05yu2iM/7bpWOA2qDUwER9jrcAm83x4cDtm2JST 3Z6KRd2v8rx7IXE3QuXoeA6ocaoJ0vpD8zROf+2+2FA0m9QBRf6BtOg2VlMmnNnT sROhmFi3AgEp8dUgOto4MdoePLaIQfo= -----END CERTIFICATE-----Generated at Thu Oct 9 01:38:27 2025 by rpki-client