$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa File: 6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa (raw, json) Hash identifier: ERpDljaG6F/27YTlX6jDy59bU4hSOeXMh6nNn73O9SA= Subject key identifier: D8:35:A2:AC:D3:89:C6:B8:43:94:A0:F2:F0:C5:69:08:9E:BB:45:B7 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B2CF6D68D39AA518149BA1700 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 33442 IP address blocks: 149.23.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:d6:8d:39:aa:51:81:49:ba:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=04627f4d-a85f-4698-a6af-4b07de3cda7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:68:3e:11:51:20:99:4b:9d:04:99:cd:36:6d: 99:6f:1c:b9:36:83:ef:ed:08:23:a8:de:2b:30:d2: 43:83:02:0c:08:5c:e3:ea:73:60:36:d6:d6:3f:13: 0a:b6:fc:1f:9f:95:0c:03:ac:ff:98:5b:54:f4:98: 12:fb:7d:38:50:09:b0:1b:90:88:18:b2:94:1a:43: db:0f:47:79:2c:1b:8c:4d:7a:3f:6e:b9:ae:46:61: 6e:c9:b6:43:46:36:d0:28:66:01:11:c0:80:a5:21: a4:38:a6:4a:02:62:27:6e:fe:b1:21:5a:40:1d:91: 15:c6:72:b3:76:70:e0:05:ce:d2:d6:d9:e3:06:bd: 5e:44:f7:ea:2d:b0:a0:43:11:71:14:e6:49:c8:8d: ba:90:7c:2a:0f:b9:2e:27:a0:b2:4a:34:60:8f:06: 8b:fa:63:b6:b1:fc:25:f3:0e:92:d2:c8:35:7f:1a: ea:e9:c9:f3:91:1b:97:95:28:d3:2d:ff:3d:09:e8: 2f:2f:b9:67:d6:59:a6:b8:61:08:34:71:3e:9f:43: 67:23:37:f5:db:b8:c3:75:ea:d5:d3:83:67:49:fe: 34:c3:c1:f4:28:e9:02:8f:37:3c:02:91:05:0f:5d: 8a:ac:ae:6a:e5:15:42:1c:de:06:df:83:94:3a:24: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:35:A2:AC:D3:89:C6:B8:43:94:A0:F2:F0:C5:69:08:9E:BB:45:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c4:88:93:14:8b:06:47:b9:2b:37:90:ce:f3:63:7c:c5:58: da:75:a6:6e:cd:3d:5a:00:27:bc:c2:df:c3:73:5c:e0:95:96: 6f:05:35:8a:a2:8c:b8:2b:4f:ef:05:81:c1:bb:29:0a:3a:c4: e2:3d:5e:96:ca:d9:ed:f2:2b:b0:a9:e7:0c:6a:33:89:2e:ee: 5a:82:45:0e:95:92:2d:e1:b1:cf:3b:5a:fb:d9:4f:5f:a5:e1: 8f:be:4b:d1:dd:92:36:45:71:48:b2:73:44:ae:21:9e:a3:a4: 78:0c:12:2d:59:9d:9f:cc:17:0d:34:64:38:0f:6c:08:69:5e: 6d:34:b3:cf:e5:fd:16:1b:f4:dc:74:0f:ec:92:45:26:de:6d: 37:1f:19:12:62:28:a6:eb:57:13:44:25:3c:d4:e8:63:17:9d: d8:57:43:63:43:60:ed:33:76:29:da:3d:9d:55:70:02:36:94: 17:ce:d4:e9:31:82:36:ca:43:ea:e4:76:94:23:39:e1:70:4f: b4:66:e7:bf:8b:0a:70:1c:a8:85:fe:0c:d3:b8:d3:bb:48:1c: ee:e4:b5:7d:ff:dc:23:2e:ec:0c:c2:da:96:f6:dd:9b:ad:f3: 4c:a6:44:db:a5:5a:bd:69:56:44:b2:a9:26:41:3e:b0:5a:01: 53:47:7a:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9taNOapRgUm6FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDQ2MjdmNGQtYTg1Zi00Njk4LWE2YWYtNGIwN2RlM2NkYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWg+EVEgmUudBJnNNm2Zbxy5NoPv7QgjqN4r MNJDgwIMCFzj6nNgNtbWPxMKtvwfn5UMA6z/mFtU9JgS+304UAmwG5CIGLKUGkPb D0d5LBuMTXo/brmuRmFuybZDRjbQKGYBEcCApSGkOKZKAmInbv6xIVpAHZEVxnKz dnDgBc7S1tnjBr1eRPfqLbCgQxFxFOZJyI26kHwqD7kuJ6CySjRgjwaL+mO2sfwl 8w6S0sg1fxrq6cnzkRuXlSjTLf89CegvL7ln1lmmuGEINHE+n0NnIzf127jDderV 04NnSf40w8H0KOkCjzc8ApEFD12KrK5q5RVCHN4G34OUOiSEPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNg1oqzTica4Q5Sg8vDFaQieu0W3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNmQ3N2VhNGQtNDFhYi0z ZDZiLWEyYmItMGUzMWE5OTdlMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADEiJMUiwZHuSs3kM7zY3zFWNp1pm7NPVoAJ7zC38NzXOCVlm8FNYqi jLgrT+8FgcG7KQo6xOI9XpbK2e3yK7Cp5wxqM4ku7lqCRQ6Vki3hsc87WvvZT1+l 4Y++S9HdkjZFcUiyc0SuIZ6jpHgMEi1ZnZ/MFw00ZDgPbAhpXm00s8/l/RYb9Nx0 D+ySRSbebTcfGRJiKKbrVxNEJTzU6GMXndhXQ2NDYO0zdinaPZ1VcAI2lBfO1Okx gjbKQ+rkdpQjOeFwT7Rm57+LCnAcqIX+DNO407tIHO7ktX3/3CMu7AzC2pb23Zut 80ymRNulWr1pVkSyqSZBPrBaAVNHej8= -----END CERTIFICATE-----Generated at Thu Oct 9 01:30:30 2025 by rpki-client