$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa File: 3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa (raw, json) Hash identifier: gy2r2lDOugAYcTYyfHMPXLDCtHhXTsmN/kT+PQXau3M= Subject key identifier: C9:1D:4D:59:C0:6F:CE:A8:64:93:4A:CD:47:64:37:ED:02:16:72:02 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B2CF6DF788BAA5C8003B755C0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 33442 IP address blocks: 149.23.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:df:78:8b:aa:5c:80:03:b7:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=1489d0c8-f1fd-4a79-a071-5647248c9fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:16:54:56:2c:e1:6a:13:12:a5:18:78:36:8b: 9e:92:07:b7:c5:97:9b:34:47:1b:06:e2:c6:2b:84: 68:e2:79:8f:e6:8b:6b:b1:e9:39:f5:6b:5b:f8:a1: b5:1c:a5:9c:6a:3b:62:f2:04:1e:4c:e9:00:77:85: 64:00:a8:c2:81:31:ff:34:0a:0f:07:2e:56:da:9b: 37:45:f5:88:ba:3d:63:e8:3e:f7:fe:48:c2:ca:c3: c9:e8:e4:56:2a:ba:a1:f8:53:04:06:e3:29:e8:51: 4f:2e:e1:e3:0e:46:e5:7e:c1:b2:b3:3c:0b:ab:f7: 4f:40:06:52:20:24:51:4e:00:27:d5:31:9c:bc:b5: e5:14:b0:fe:3d:90:8e:39:73:ca:a8:f2:43:a5:fc: e0:6e:23:27:3e:46:d8:58:88:6d:2c:79:21:3e:08: 38:e9:1c:eb:9e:2e:cd:46:f5:38:66:32:a9:ba:9b: b0:ae:ca:df:7c:53:71:d4:8d:a8:ee:d8:a7:41:60: ef:3a:b8:6c:53:83:42:82:92:7a:3c:4c:3f:7f:7b: 0b:dc:cb:c9:82:44:eb:7f:85:93:2e:63:05:d1:11: 6f:69:7b:7f:ea:cf:85:c7:f3:1f:3b:64:bd:aa:3f: 95:d3:23:fe:8d:f5:65:f3:f5:c4:58:44:b0:be:f1: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1D:4D:59:C0:6F:CE:A8:64:93:4A:CD:47:64:37:ED:02:16:72:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:70:68:9f:d2:18:d1:2f:51:bc:30:bc:9e:61:15:65:c5:36: 39:7f:1a:3d:a3:d8:3b:90:20:00:1f:26:20:6d:f5:9c:f1:db: cc:04:26:6c:52:12:2b:50:69:54:4c:16:3e:eb:51:74:8c:b3: d2:1e:67:c4:1f:66:7a:4a:43:8e:2a:0e:30:18:80:4f:9c:fc: 49:df:0a:a1:e4:34:8a:39:c4:60:57:7c:0e:f4:ff:8d:68:8b: 36:e8:39:9d:96:35:21:50:cf:b3:35:f7:12:6a:5d:c2:29:a0: c3:23:fa:59:93:e7:d1:07:b4:78:91:ee:d0:e3:82:0d:0a:02: a6:62:31:04:18:59:ca:5c:b2:29:1b:d9:39:f6:98:7e:47:a6: cc:cd:9f:68:fc:a3:0c:1d:3b:d4:31:0a:cd:4f:22:ff:95:c5: 4b:dc:de:c8:a7:b8:1a:9c:c1:41:71:02:81:e5:a4:0f:56:cc: 1b:b6:b3:9b:04:1b:b4:5c:c1:1b:ad:0f:49:63:9b:44:f0:75: f8:66:fe:60:78:d7:57:97:97:fa:2d:5c:d9:fa:9c:17:17:83: 1b:8c:94:80:d8:95:47:c4:c0:03:f8:e4:e0:f5:86:6b:44:dc: 1f:ca:bd:ae:6f:17:b7:4f:73:75:da:a7:c7:0b:1d:f8:4c:8d: 91:65:02:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9t94i6pcgAO3VcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MTQ4OWQwYzgtZjFmZC00YTc5LWEwNzEtNTY0NzI0OGM5ZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xZUVizhahMSpRh4Nouekge3xZebNEcbBuLG K4Ro4nmP5otrsek59Wtb+KG1HKWcajti8gQeTOkAd4VkAKjCgTH/NAoPBy5W2ps3 RfWIuj1j6D73/kjCysPJ6ORWKrqh+FMEBuMp6FFPLuHjDkblfsGyszwLq/dPQAZS ICRRTgAn1TGcvLXlFLD+PZCOOXPKqPJDpfzgbiMnPkbYWIhtLHkhPgg46Rzrni7N RvU4ZjKpupuwrsrffFNx1I2o7tinQWDvOrhsU4NCgpJ6PEw/f3sL3MvJgkTrf4WT LmMF0RFvaXt/6s+Fx/MfO2S9qj+V0yP+jfVl8/XEWESwvvG0FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkdTVnAb86oZJNKzUdkN+0CFnICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvM2QyMGZmY2EtMjhjYy0z ZGEzLTlkYWEtMzJlYmNiN2IwMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5waJ/SGNEvUbwwvJ5hFWXFNjl/Gj2j2DuQIAAfJiBt9Zzx28wEJmxS EitQaVRMFj7rUXSMs9IeZ8QfZnpKQ44qDjAYgE+c/EnfCqHkNIo5xGBXfA70/41o izboOZ2WNSFQz7M19xJqXcIpoMMj+lmT59EHtHiR7tDjgg0KAqZiMQQYWcpcsikb 2Tn2mH5HpszNn2j8owwdO9QxCs1PIv+VxUvc3sinuBqcwUFxAoHlpA9WzBu2s5sE G7RcwRutD0ljm0Twdfhm/mB411eXl/otXNn6nBcXgxuMlIDYlUfEwAP45OD1hmtE 3B/Kva5vF7dPc3Xap8cLHfhMjZFlAgI= -----END CERTIFICATE-----Generated at Thu Oct 9 01:38:30 2025 by rpki-client