$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa File: 8ecb86e6-8311-3057-8829-f64fb18d5879.roa (raw, json) Hash identifier: UverhUBcc6Gj5EAh4hTkhgvK+25tNt+s8NKKXJRAMx8= Subject key identifier: A7:7B:9D:26:2F:81:FC:54:0F:9A:FD:86:50:55:03:12:70:E5:C4:1F Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B715CA8061A3D53E50D73CC00 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 33442 IP address blocks: 149.23.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a8:06:1a:3d:53:e5:0d:73:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=120beb4a-7f75-49ab-95cb-a1a1e5ccaa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:08:72:78:19:b1:77:58:3d:f3:5f:02:e1:fb: 4e:b9:c9:e3:6e:93:16:5f:e0:9f:a5:44:8e:7b:05: 48:df:1f:a2:04:cf:a1:6d:18:68:76:ae:55:ae:d2: aa:69:c1:5c:bf:89:07:4b:71:9b:a2:b6:6c:ae:10: 40:65:f5:1e:28:16:b7:8d:58:d1:10:fc:59:fb:20: bc:81:2c:c8:90:81:7a:5d:ef:b5:28:11:cd:d2:a7: 8a:71:94:1b:8d:c5:84:43:22:7e:43:c6:ef:a0:26: 7c:0e:cd:83:c1:00:19:03:e3:54:19:b1:78:c7:63: a6:be:6c:b5:54:f7:bd:9a:4b:88:2a:e1:cd:1f:57: 36:d6:40:8d:d7:25:35:5d:b6:c6:97:90:f2:4c:54: 94:65:47:fc:e5:41:f3:17:54:94:a4:c2:42:0d:64: 3e:0e:34:04:b0:73:b9:b3:ec:f0:5a:6c:a4:7f:d9: af:98:e8:2e:19:6e:de:c8:e2:0d:8e:e2:7d:fe:b4: fe:f3:59:d5:8b:73:78:f8:6a:e3:92:3f:d3:28:86: 55:6c:7f:1a:93:af:13:86:9b:38:e7:33:e5:7e:71: 0f:38:fb:10:2d:bd:e7:8d:31:7c:e2:19:f6:f4:b0: 64:60:cc:4d:c2:05:74:e2:37:d8:c9:4b:da:34:21: e6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7B:9D:26:2F:81:FC:54:0F:9A:FD:86:50:55:03:12:70:E5:C4:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:6c:3b:c5:4a:8e:13:e6:f7:6a:62:c0:a3:5b:5b:0b:ff:5b: 98:4c:16:9f:17:2d:8c:01:0e:9a:f3:24:11:a1:f0:6d:b9:24: 75:90:4e:c6:a0:8c:ca:c0:b2:15:31:88:ba:5a:a6:1d:38:4b: 9c:e7:45:7f:30:19:e4:f9:9f:d0:5c:40:b0:2a:50:25:13:6c: 8a:e7:10:9e:32:6b:e0:3b:8c:76:3d:aa:e1:4e:d6:7e:51:85: 01:f3:58:f2:87:7e:f4:91:85:20:ef:89:8f:04:9e:b6:e0:22: b5:31:32:3f:ac:a5:be:3d:d2:f4:0e:75:ba:e0:74:73:f4:bf: d6:67:f0:60:5f:66:25:9d:e6:4b:c7:e8:a5:a3:85:07:7e:02: 33:a5:6f:f0:08:fb:e1:00:4d:8e:7e:bc:e2:93:df:83:51:5b: dd:32:f7:0e:04:ea:ac:66:0e:61:53:db:9d:a5:9a:4c:03:39: 15:fc:79:48:95:13:64:28:c0:94:7a:91:fb:78:00:53:59:9a: e8:03:64:fa:21:60:15:b5:30:86:c2:8a:c9:7c:39:a9:0d:22: 70:37:53:51:c9:00:4b:73:2d:25:34:13:dc:be:5b:ce:df:4a: 2f:2a:cf:13:98:13:7e:ca:2e:9b:63:1c:3a:ea:e4:ba:5c:ba: dd:52:8b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKgGGj1T5Q1zzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTIwYmViNGEtN2Y3NS00OWFiLTk1Y2ItYTFhMWU1Y2NhYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQhyeBmxd1g9818C4ftOucnjbpMWX+CfpUSO ewVI3x+iBM+hbRhodq5VrtKqacFcv4kHS3GborZsrhBAZfUeKBa3jVjREPxZ+yC8 gSzIkIF6Xe+1KBHN0qeKcZQbjcWEQyJ+Q8bvoCZ8Ds2DwQAZA+NUGbF4x2Omvmy1 VPe9mkuIKuHNH1c21kCN1yU1XbbGl5DyTFSUZUf85UHzF1SUpMJCDWQ+DjQEsHO5 s+zwWmykf9mvmOguGW7eyOINjuJ9/rT+81nVi3N4+Grjkj/TKIZVbH8ak68Thps4 5zPlfnEPOPsQLb3njTF84hn29LBkYMxNwgV04jfYyUvaNCHm5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd7nSYvgfxUD5r9hlBVAxJw5cQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvOGVjYjg2ZTYtODMxMS0z MDU3LTg4MjktZjY0ZmIxOGQ1ODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdsO8VKjhPm92piwKNbWwv/W5hMFp8XLYwBDprzJBGh8G25JHWQTsag jMrAshUxiLpaph04S5znRX8wGeT5n9BcQLAqUCUTbIrnEJ4ya+A7jHY9quFO1n5R hQHzWPKHfvSRhSDviY8EnrbgIrUxMj+spb490vQOdbrgdHP0v9Zn8GBfZiWd5kvH 6KWjhQd+AjOlb/AI++EATY5+vOKT34NRW90y9w4E6qxmDmFT252lmkwDORX8eUiV E2QowJR6kft4AFNZmugDZPohYBW1MIbCisl8OakNInA3U1HJAEtzLSU0E9y+W87f Si8qzxOYE37KLptjHDrq5Lpcut1Si9Y= -----END CERTIFICATE-----Generated at Thu Oct 9 01:34:22 2025 by rpki-client