$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c6786d24-a67a-351b-a186-9ef602225e4d.roa File: c6786d24-a67a-351b-a186-9ef602225e4d.roa (raw, json) Hash identifier: VlGKbQxcbx6DZyOOvDMn2ccGcQtb5FKvlswiL0Gqoys= Subject key identifier: A8:7E:84:D8:84:78:15:FA:92:7E:7C:B6:64:AD:72:C1:AF:CF:87:5D Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B2CF6DF4E41500D110DE55A60 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c6786d24-a67a-351b-a186-9ef602225e4d.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 33442 IP address blocks: 149.23.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:df:4e:41:50:0d:11:0d:e5:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=09e6f5e8-2495-4ec5-8a13-4ea995a18e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:6f:79:e3:c6:d2:51:41:2a:e8:f3:dc:93: d9:32:ae:43:bf:32:17:39:41:2a:06:49:dc:3d:9d: 91:50:f0:55:47:87:26:6e:e8:24:6b:75:04:0f:72: ab:2a:e1:db:11:18:06:cb:78:a2:ca:3a:f7:b4:3a: c3:4e:4b:7c:f0:f8:c5:a2:a1:ee:a1:3f:98:ef:31: 0e:d4:d7:ae:46:c9:8d:3b:b4:7b:89:fd:74:ed:ce: 06:50:11:93:89:1f:82:f0:2c:bc:28:16:c4:41:d6: 7b:c8:99:fe:4a:03:23:8a:3e:7d:e0:bd:5a:e4:d1: 37:4c:73:69:21:c1:0c:dd:a4:42:85:70:b5:26:9a: c2:60:19:1a:a1:0c:e5:32:f2:59:4e:50:a2:ae:d0: fc:88:f1:d1:40:37:37:22:c5:f9:eb:68:e1:44:02: b6:5a:79:24:be:99:b8:ae:09:79:de:fd:3d:e9:94: de:7d:6d:c5:87:43:4e:10:19:e2:8d:65:6e:87:73: 57:70:8b:b3:6f:d5:52:ae:bc:13:3a:b0:dd:39:6a: 66:ce:66:4c:84:02:30:3e:5d:47:7c:23:20:2c:ac: 3e:fb:13:d7:14:87:8a:d0:9d:69:28:7a:57:06:50: d7:9c:52:e5:00:67:7e:6d:da:fa:6e:7a:7d:35:06: 27:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7E:84:D8:84:78:15:FA:92:7E:7C:B6:64:AD:72:C1:AF:CF:87:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c6786d24-a67a-351b-a186-9ef602225e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a1:88:90:1c:f8:de:50:73:f2:84:da:ad:19:5d:1a:a3:21: 26:a0:c5:1c:29:4b:f3:a7:06:36:3d:7b:92:e3:2e:70:3f:f0: d0:e3:10:f9:bb:61:67:db:98:2f:38:d4:8d:e0:69:41:56:f5: fa:d9:9a:fb:d1:d3:df:e5:af:09:3c:d3:78:76:bf:16:4c:7e: 04:3a:13:94:70:26:78:49:c8:ac:69:ee:19:f3:22:4c:b3:3d: 65:0d:5a:c5:b2:0c:dd:09:bd:24:05:46:ba:ae:2e:bb:1f:0b: 1a:d9:a0:67:a0:37:58:fe:36:fe:35:a7:66:95:ec:87:5c:77: 82:f7:77:eb:08:fb:d5:b0:3e:0f:d4:fd:87:3a:16:38:8a:9f: 5d:f1:e0:55:08:f0:7c:9d:ab:6f:c7:71:35:21:ba:0e:6c:f5: fe:13:7c:8f:54:e3:0a:64:91:19:21:77:8e:dd:40:5b:3a:2f: 19:5e:82:9a:40:a8:c0:ea:04:02:9e:04:1e:26:26:d3:6f:8f: 24:78:54:0e:64:9c:b4:e5:6d:5f:9d:22:7c:24:fa:18:75:56: 4b:db:7a:39:8a:32:08:8d:1b:a0:40:b5:ef:5b:70:fb:80:ba: 6a:2a:bd:1f:1a:71:cb:27:78:c5:72:f1:ec:62:4d:be:17:c0: 10:38:97:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9t9OQVANEQ3lWmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDllNmY1ZTgtMjQ5NS00ZWM1LThhMTMtNGVhOTk1YTE4ZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqBveePG0lFBKujz3JPZMq5DvzIXOUEqBknc PZ2RUPBVR4cmbugka3UED3KrKuHbERgGy3iiyjr3tDrDTkt88PjFoqHuoT+Y7zEO 1NeuRsmNO7R7if107c4GUBGTiR+C8Cy8KBbEQdZ7yJn+SgMjij594L1a5NE3THNp IcEM3aRChXC1JprCYBkaoQzlMvJZTlCirtD8iPHRQDc3IsX562jhRAK2Wnkkvpm4 rgl53v096ZTefW3Fh0NOEBnijWVuh3NXcIuzb9VSrrwTOrDdOWpmzmZMhAIwPl1H fCMgLKw++xPXFIeK0J1pKHpXBlDXnFLlAGd+bdr6bnp9NQYnpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKh+hNiEeBX6kn58tmStcsGvz4ddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvYzY3ODZkMjQtYTY3YS0z NTFiLWExODYtOWVmNjAyMjI1ZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHChiJAc+N5Qc/KE2q0ZXRqjISagxRwpS/OnBjY9e5LjLnA/8NDjEPm7 YWfbmC841I3gaUFW9frZmvvR09/lrwk803h2vxZMfgQ6E5RwJnhJyKxp7hnzIkyz PWUNWsWyDN0JvSQFRrquLrsfCxrZoGegN1j+Nv41p2aV7Idcd4L3d+sI+9WwPg/U /Yc6FjiKn13x4FUI8Hydq2/HcTUhug5s9f4TfI9U4wpkkRkhd47dQFs6LxlegppA qMDqBAKeBB4mJtNvjyR4VA5knLTlbV+dInwk+hh1VkvbejmKMgiNG6BAte9bcPuA umoqvR8accsneMVy8exiTb4XwBA4l+w= -----END CERTIFICATE-----Generated at Thu Oct 9 01:28:20 2025 by rpki-client