$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa File: 42ca2390-8cdd-3071-9349-acf8de5d2be1.roa (raw, json) Hash identifier: bmiwTA1AHV1uwlkaWESEXOrhkLrD2Uc3gs/pUccdTNs= Subject key identifier: 2C:B9:B8:F6:91:14:33:C1:2B:12:24:85:FF:FB:5B:C4:FB:86:F6:99 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B328C3D8B9D7252B107BFBD00 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 33442 IP address blocks: 149.23.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3d:8b:9d:72:52:b1:07:bf:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=b778520a-458c-486c-afea-0d1dd11faf3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:13:9e:05:58:89:04:01:be:cd:c3:03:3c:2a: d0:b3:de:7f:08:f9:f0:25:1c:10:ce:39:49:bb:c1: aa:82:55:00:fb:2c:0c:41:79:26:ff:6c:e7:e0:d3: 02:18:8a:d2:96:94:6d:3a:fd:16:56:63:48:d7:c4: 87:be:d3:06:9c:47:fe:1a:5e:b5:47:66:30:58:5e: a0:11:ab:7a:5d:13:15:3a:2c:19:00:51:07:9e:1d: 73:35:3f:38:7b:20:e2:f5:8c:25:60:c5:3f:1f:97: 93:9b:32:cc:15:a5:55:74:c3:5e:61:25:3e:75:4a: 4d:c3:94:b5:e8:70:ba:6a:71:86:af:9f:c9:97:61: 59:bb:5f:1a:84:86:19:ca:9e:ec:18:aa:e0:66:a0: 4d:31:b1:04:d5:0f:c8:7b:a3:97:88:4c:59:9e:d9: e6:d8:6c:10:57:14:90:06:aa:7f:61:c4:d0:11:b1: 53:7d:89:f4:8f:63:5a:9a:9d:11:ab:14:45:af:bd: 96:c4:18:2a:8a:62:5d:f6:7e:0b:ff:48:f2:e5:f7: 23:e8:f4:55:33:bd:6c:dc:c7:e3:9b:74:0a:15:2c: 6f:39:56:a1:82:cb:70:62:de:2e:30:59:f3:a5:2d: 25:bf:90:e6:b5:24:f0:b2:6a:d9:cb:f4:be:d4:0b: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B9:B8:F6:91:14:33:C1:2B:12:24:85:FF:FB:5B:C4:FB:86:F6:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4f:26:e2:e7:77:09:11:2e:44:63:cb:fd:cb:f5:e3:e0:3f: 71:6e:b4:c7:e6:61:90:3c:c0:6b:12:0f:ed:67:d1:22:01:54: 08:33:c7:ca:bb:21:b8:cd:fd:33:6f:07:79:da:4c:08:f4:cb: ff:c4:97:45:91:34:c1:75:42:cd:29:bf:e1:80:9c:8e:69:2b: 74:f3:b0:e6:69:d0:d4:83:4e:fa:90:f4:52:40:a5:7e:90:9e: 71:c0:80:31:c8:36:a9:e7:2c:a8:ba:e8:49:e6:02:e3:5a:d7: 70:14:09:58:cd:85:a2:81:96:08:e0:12:0c:b5:50:e6:42:65: 05:bd:5a:5f:69:32:22:5b:04:7a:22:c9:2d:b5:fa:ce:6a:01: 63:4a:df:a0:62:aa:80:ca:eb:a9:7f:89:67:c4:6c:d3:f2:cc: 8d:62:22:c7:56:8b:6d:3b:a6:6c:b2:e0:85:03:ad:cb:f1:50: d6:95:1b:c3:97:74:61:5b:23:06:24:c3:35:f2:0f:cd:b5:15: 8e:33:8b:0c:03:a2:fe:c5:60:df:35:b8:f8:aa:82:5b:30:b0: f7:d3:26:9f:17:63:f4:a3:3a:2a:92:11:47:7d:ad:83:b2:0a: f6:5b:07:fd:20:15:cd:06:74:56:f3:d9:7a:64:6d:46:c2:f2: 9d:f1:e7:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjD2LnXJSsQe/vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk Yjc3ODUyMGEtNDU4Yy00ODZjLWFmZWEtMGQxZGQxMWZhZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxOeBViJBAG+zcMDPCrQs95/CPnwJRwQzjlJ u8GqglUA+ywMQXkm/2zn4NMCGIrSlpRtOv0WVmNI18SHvtMGnEf+Gl61R2YwWF6g Eat6XRMVOiwZAFEHnh1zNT84eyDi9YwlYMU/H5eTmzLMFaVVdMNeYSU+dUpNw5S1 6HC6anGGr5/Jl2FZu18ahIYZyp7sGKrgZqBNMbEE1Q/Ie6OXiExZntnm2GwQVxSQ Bqp/YcTQEbFTfYn0j2Namp0RqxRFr72WxBgqimJd9n4L/0jy5fcj6PRVM71s3Mfj m3QKFSxvOVahgstwYt4uMFnzpS0lv5DmtSTwsmrZy/S+1AueZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy5uPaRFDPBKxIkhf/7W8T7hvaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNDJjYTIzOTAtOGNkZC0z MDcxLTkzNDktYWNmOGRlNWQyYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVPJuLndwkRLkRjy/3L9ePgP3FutMfmYZA8wGsSD+1n0SIBVAgzx8q7 IbjN/TNvB3naTAj0y//El0WRNMF1Qs0pv+GAnI5pK3TzsOZp0NSDTvqQ9FJApX6Q nnHAgDHINqnnLKi66EnmAuNa13AUCVjNhaKBlgjgEgy1UOZCZQW9Wl9pMiJbBHoi yS21+s5qAWNK36BiqoDK66l/iWfEbNPyzI1iIsdWi207pmyy4IUDrcvxUNaVG8OX dGFbIwYkwzXyD821FY4ziwwDov7FYN81uPiqglswsPfTJp8XY/SjOiqSEUd9rYOy CvZbB/0gFc0GdFbz2XpkbUbC8p3x520= -----END CERTIFICATE-----Generated at Thu Oct 9 01:33:40 2025 by rpki-client