$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa File: 0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa (raw, json) Hash identifier: BZTRPZ35xjDx/ufQS9EamuICqDmWTMUhFc/HB3pkInA= Subject key identifier: 43:5D:C4:29:80:06:76:0A:A2:CD:21:D5:51:E3:9E:35:E2:5C:DE:87 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B80B7526C5A49D812472EF220 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 33442 IP address blocks: 149.23.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:52:6c:5a:49:d8:12:47:2e:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=42c78699-5d22-464e-b6ae-0bc85a6bdad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c8:d6:7f:e6:ac:46:4c:ce:5a:b4:0e:d2:14: 99:2a:58:eb:f4:a7:fa:61:8d:46:3e:11:0d:9e:c2: a8:71:34:ee:39:89:89:58:e8:be:89:06:a4:9d:f3: 1e:63:e6:73:85:90:06:f4:25:93:45:cb:ab:0b:45: 2e:b2:dd:74:97:c0:17:9a:af:4b:bf:98:f7:df:b3: 39:72:55:18:f4:96:a3:02:a5:fd:eb:67:80:65:46: 13:a3:c1:a1:a6:06:93:ee:1d:52:2d:54:1b:d4:c2: ea:52:5c:2f:31:e2:3e:d3:a8:20:97:4b:63:54:d1: 5f:1e:37:2d:af:46:15:d3:89:4e:09:41:97:cc:44: ab:90:d1:4a:c5:77:16:dd:b3:af:84:16:af:73:df: 84:45:6f:9f:3e:cf:35:3a:c5:39:d6:a0:ac:f0:34: 91:ca:93:e9:3b:b1:51:ee:21:5c:eb:55:da:83:5f: 08:3c:a1:30:99:5c:22:4e:17:c4:59:c1:ab:cd:e1: 95:66:44:a8:c6:cc:fd:4a:ca:b2:ab:96:bf:6c:b5: 18:00:46:31:0a:64:9c:42:67:ad:ef:5d:ec:09:91: c2:6d:ad:02:c6:f1:e4:4f:69:11:3f:fc:34:f4:de: 5b:47:99:22:6e:29:fe:ed:66:02:9f:f7:17:ff:93: 2a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5D:C4:29:80:06:76:0A:A2:CD:21:D5:51:E3:9E:35:E2:5C:DE:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0c6a5ba2-e8ea-3112-a3e5-7f3b0efc866d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a6:58:8d:f1:a4:77:e3:ed:cf:b1:08:65:ed:43:e3:37:6c: 1a:02:05:fe:d9:46:e9:f5:25:a3:8c:18:7c:0b:be:f6:5a:46: a3:2d:6b:d0:3d:7b:ae:77:ee:ee:1a:f9:6b:31:69:be:ff:94: 50:a0:cf:6c:9a:77:57:3e:b3:ea:ab:6c:35:fd:5a:d8:b7:a9: 8d:ad:94:af:82:38:34:a7:3a:ce:11:c2:5d:9d:f4:72:4b:46: 15:7c:01:f0:91:5d:2a:f7:5e:ca:d1:66:af:6e:ee:9d:3e:40: 75:d0:fd:db:fa:e5:e2:13:8d:b3:0d:e7:40:df:31:db:33:02: 37:af:cc:e8:f7:99:35:14:3b:ff:ee:0b:e1:00:1d:bb:1e:2f: c0:eb:6e:48:29:7a:74:68:55:bd:77:f0:0e:fc:19:84:ee:75: 34:6c:65:f7:f2:12:fc:58:96:ff:7a:76:6e:55:b8:c8:1b:a3: 08:93:e5:03:0d:65:8f:47:57:83:65:27:5a:97:16:e9:f6:4e: a7:59:98:da:a2:fc:91:8d:15:9b:ec:a1:da:d5:2b:82:16:dd: 58:c8:5e:73:27:d3:00:3e:96:0c:4e:33:70:96:24:76:80:0f: 97:8e:8c:77:66:51:88:ff:e3:c1:33:83:fe:f2:1f:6b:0f:c3: 47:37:b0:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1JsWknYEkcu8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NDJjNzg2OTktNWQyMi00NjRlLWI2YWUtMGJjODVhNmJkYWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcjWf+asRkzOWrQO0hSZKljr9Kf6YY1GPhEN nsKocTTuOYmJWOi+iQaknfMeY+ZzhZAG9CWTRcurC0Uust10l8AXmq9Lv5j337M5 clUY9JajAqX962eAZUYTo8GhpgaT7h1SLVQb1MLqUlwvMeI+06ggl0tjVNFfHjct r0YV04lOCUGXzESrkNFKxXcW3bOvhBavc9+ERW+fPs81OsU51qCs8DSRypPpO7FR 7iFc61Xag18IPKEwmVwiThfEWcGrzeGVZkSoxsz9Ssqyq5a/bLUYAEYxCmScQmet 713sCZHCba0CxvHkT2kRP/w09N5bR5kibin+7WYCn/cX/5MqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENdxCmABnYKos0h1VHjnjXiXN6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMGM2YTViYTItZThlYS0z MTEyLWEzZTUtN2YzYjBlZmM4NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCmWI3xpHfj7c+xCGXtQ+M3bBoCBf7ZRun1JaOMGHwLvvZaRqMta9A9 e6537u4a+Wsxab7/lFCgz2yad1c+s+qrbDX9Wti3qY2tlK+CODSnOs4Rwl2d9HJL RhV8AfCRXSr3XsrRZq9u7p0+QHXQ/dv65eITjbMN50DfMdszAjevzOj3mTUUO//u C+EAHbseL8DrbkgpenRoVb138A78GYTudTRsZffyEvxYlv96dm5VuMgbowiT5QMN ZY9HV4NlJ1qXFun2TqdZmNqi/JGNFZvsodrVK4IW3VjIXnMn0wA+lgxOM3CWJHaA D5eOjHdmUYj/48Ezg/7yH2sPw0c3sOc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:33:01 2025 by rpki-client