$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa File: 8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa (raw, json) Hash identifier: Yedzk3gVfxd9wbyA7tswMpzeqYvwM5J+DttnAUMvRao= Subject key identifier: 7C:36:6F:AF:88:34:EB:74:65:A0:AA:73:AD:07:CC:32:2B:5B:23:30 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B2CF6D764F8665AF99A41B640 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 33442 IP address blocks: 149.23.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:d7:64:f8:66:5a:f9:9a:41:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=8b72199a-c9d1-4e1f-a798-113fb87a0d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9a:d5:6a:57:27:16:4d:ba:0f:8b:05:2a:30: 7b:fb:c8:d6:b6:92:38:1d:be:c4:a0:c9:9a:35:32: 8f:de:67:5f:1a:67:16:30:fa:c1:ca:f5:0d:80:bb: 0e:ca:88:b7:62:0f:9b:af:2a:37:5e:48:6f:7a:cf: 37:be:b1:69:1b:6f:eb:2d:80:46:ff:23:cc:7d:0f: 31:0c:cd:52:87:14:19:73:6d:d2:9d:c9:c0:6b:90: ab:81:19:5f:26:58:f8:53:24:5d:6e:da:13:1a:4c: 89:1c:c8:dc:ca:ad:9b:93:d8:4a:42:57:8d:43:2a: e1:bc:17:d1:a7:a0:25:2b:31:24:fd:a9:44:0d:3e: ac:11:0e:9b:8a:38:61:a8:06:cb:8d:08:70:f2:17: 71:5f:e8:69:42:2e:54:2e:6e:0f:4f:f9:3f:6b:5a: 13:9c:22:b4:2d:fe:2b:d9:61:3d:d8:5e:35:c7:cc: 47:89:aa:52:f0:af:51:0b:e1:3c:7a:ff:83:0a:76: 67:0a:e2:7f:3c:2e:42:61:bb:e3:71:88:4f:7b:ee: c2:b0:b5:f0:d8:ec:13:16:a2:46:95:db:cb:01:e7: 8d:7d:40:41:7c:36:2a:42:3d:ae:0d:24:48:35:32: c0:65:4a:13:7e:05:19:de:3f:3b:35:bf:9c:8b:5a: f9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:36:6F:AF:88:34:EB:74:65:A0:AA:73:AD:07:CC:32:2B:5B:23:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8aa07820-b4a8-3042-9b4c-5d997eb47b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:3e:b9:a3:e4:86:2e:d9:74:a9:39:2f:7e:ac:96:94:1d:08: 53:86:0d:16:a7:d9:a5:11:fd:c9:8b:5e:7b:06:64:2c:89:4e: c6:9f:c2:94:41:0d:99:4b:51:d4:a3:b0:81:d0:75:0b:13:8a: ee:f2:f1:57:f8:63:7d:6d:26:88:fe:dd:ff:33:a2:75:a7:57: a8:f0:c4:64:27:5c:9d:9c:98:4c:56:62:52:b9:da:dd:8d:50: 19:f8:a1:98:97:e3:02:0d:94:57:f0:cb:4f:72:d7:d2:29:d1: cc:91:2e:ea:b7:50:88:6c:72:ee:a0:e7:72:70:35:b9:a7:2e: 8b:20:12:84:1d:34:df:2c:b7:dc:c8:e9:a5:df:a5:76:bc:d4: 3f:9d:34:01:e4:6a:7c:9c:df:eb:f5:6e:20:87:87:ef:24:f0: 01:33:c3:cd:35:f7:a0:d0:8e:57:d4:c1:b7:0d:2a:5e:c6:a5: 4e:71:d9:8b:f1:74:83:fc:88:8a:d1:6b:e5:5d:17:f0:27:72: 56:a1:28:8d:db:17:d3:96:54:ec:0e:dd:ff:7b:ec:72:06:65: 8b:32:04:96:af:ae:2f:83:9b:33:63:f3:37:5a:9e:14:f6:72: b6:84:93:61:ec:de:7d:ea:a8:99:03:c8:66:20:be:92:8a:42: 07:6d:66:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9tdk+GZa+ZpBtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk OGI3MjE5OWEtYzlkMS00ZTFmLWE3OTgtMTEzZmI4N2EwZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZrValcnFk26D4sFKjB7+8jWtpI4Hb7EoMma NTKP3mdfGmcWMPrByvUNgLsOyoi3Yg+bryo3Xkhves83vrFpG2/rLYBG/yPMfQ8x DM1ShxQZc23SncnAa5CrgRlfJlj4UyRdbtoTGkyJHMjcyq2bk9hKQleNQyrhvBfR p6AlKzEk/alEDT6sEQ6bijhhqAbLjQhw8hdxX+hpQi5ULm4PT/k/a1oTnCK0Lf4r 2WE92F41x8xHiapS8K9RC+E8ev+DCnZnCuJ/PC5CYbvjcYhPe+7CsLXw2OwTFqJG ldvLAeeNfUBBfDYqQj2uDSRINTLAZUoTfgUZ3j87Nb+ci1r5+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHw2b6+INOt0ZaCqc60HzDIrWyMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvOGFhMDc4MjAtYjRhOC0z MDQyLTliNGMtNWQ5OTdlYjQ3YjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc+uaPkhi7ZdKk5L36slpQdCFOGDRan2aUR/cmLXnsGZCyJTsafwpRB DZlLUdSjsIHQdQsTiu7y8Vf4Y31tJoj+3f8zonWnV6jwxGQnXJ2cmExWYlK52t2N UBn4oZiX4wINlFfwy09y19Ip0cyRLuq3UIhscu6g53JwNbmnLosgEoQdNN8st9zI 6aXfpXa81D+dNAHkanyc3+v1biCHh+8k8AEzw80196DQjlfUwbcNKl7GpU5x2Yvx dIP8iIrRa+VdF/AnclahKI3bF9OWVOwO3f977HIGZYsyBJavri+DmzNj8zdanhT2 craEk2Hs3n3qqJkDyGYgvpKKQgdtZoM= -----END CERTIFICATE-----Generated at Thu Oct 9 01:38:28 2025 by rpki-client