$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3031b8ab-37d0-3807-a567-ad748c7b1712.roa File: 3031b8ab-37d0-3807-a567-ad748c7b1712.roa (raw, json) Hash identifier: UGW0SLMjVOFiKQv+4kmD8bP9OnAE04QgzODUJuPyimM= Subject key identifier: 6F:70:F5:35:80:BB:51:AE:BF:0D:7D:4A:9B:69:D6:C0:7B:AA:45:4F Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B2CF6DF2735D25B34904F90A4 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3031b8ab-37d0-3807-a567-ad748c7b1712.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 149.23.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:df:27:35:d2:5b:34:90:4f:90:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=5fd47b7e-82d5-40d2-a706-5f00a4561501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:dd:65:4b:5e:18:59:e5:40:c1:43:64:be: 3d:7f:88:b6:50:c3:6b:20:61:94:21:1a:6d:ff:a2: 6b:ac:0e:6e:12:65:dd:87:97:ed:21:ba:67:56:04: ef:35:6b:90:4c:4f:e9:17:de:01:59:19:3b:f9:84: 8f:b5:e6:71:e5:65:fc:a7:21:60:16:80:32:7a:ed: ec:1a:b7:d4:0a:50:f8:fb:d9:27:0b:df:6b:ca:f6: 91:fe:20:f3:59:c0:e6:b6:04:2e:56:28:64:37:ce: 5c:db:b6:72:c6:4a:ac:03:2f:3b:1e:2e:28:92:d1: d7:99:a9:aa:78:3c:33:63:2d:63:1c:18:46:1e:18: 4f:82:52:ae:3c:4a:4f:b8:10:16:3d:12:05:22:8f: 18:76:63:94:36:31:9f:2c:e3:2d:7a:bd:60:7e:54: f2:d3:b8:51:a2:e2:dd:d6:43:6d:89:4c:ba:8a:72: c6:95:62:89:ac:a7:7c:62:e8:59:f9:c0:51:5a:16: 7c:ea:51:73:80:08:31:f1:f6:5b:4b:a5:f0:2b:d0: 55:55:79:29:90:de:8f:3d:74:18:bb:e8:58:cf:39: d8:93:75:d3:26:92:3b:c7:18:3c:b8:80:7f:55:dd: 8e:95:46:7f:b3:3c:64:a7:2a:9a:4f:d3:16:b1:e0: 51:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:70:F5:35:80:BB:51:AE:BF:0D:7D:4A:9B:69:D6:C0:7B:AA:45:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3031b8ab-37d0-3807-a567-ad748c7b1712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f2:b0:76:6a:0a:b6:00:75:78:7b:f4:b4:08:b0:d7:a3:0b: 48:72:d7:26:ab:8e:c7:88:e7:3a:96:a4:6f:e7:88:6d:e0:6f: 16:be:f9:5b:b4:d6:1d:b3:b2:e1:7a:32:a4:d1:32:e9:07:15: d0:e5:6b:94:40:1b:6e:97:f8:a2:fb:9b:72:1b:c1:3b:ff:cf: 38:3f:cb:b3:eb:a6:c0:cc:7b:a6:af:2a:35:be:02:e0:f7:e8: e7:2b:f6:50:94:27:c4:03:9b:20:65:7a:9c:14:92:ba:d2:55: 5f:a1:6e:42:04:87:67:84:d1:a4:73:6c:1c:48:cf:d5:a7:74: 20:4a:33:dd:df:af:aa:c7:d4:cf:aa:03:b9:c2:c6:4d:56:63: 61:cf:fb:27:3a:fe:5e:8d:2a:4b:55:af:49:8a:98:6f:aa:16: 9c:60:ac:47:9f:d1:3f:dc:f1:92:c1:13:a9:5a:16:0e:4d:e2: 0f:33:c2:2d:dd:dd:64:46:3e:f6:8a:15:c3:c3:86:58:8f:88: f5:49:03:75:54:af:27:58:48:6a:07:87:87:42:1f:61:4d:9a: 66:8f:98:c2:9f:d5:77:5c:c6:de:e9:b8:6a:0f:4b:14:9a:7f: 00:9a:68:3f:06:50:37:7a:72:db:bd:d4:85:c1:d3:db:9a:89: 83:e0:3d:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9t8nNdJbNJBPkKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NWZkNDdiN2UtODJkNS00MGQyLWE3MDYtNWYwMGE0NTYxNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng3dZUteGFnlQMFDZL49f4i2UMNrIGGUIRpt /6JrrA5uEmXdh5ftIbpnVgTvNWuQTE/pF94BWRk7+YSPteZx5WX8pyFgFoAyeu3s GrfUClD4+9knC99ryvaR/iDzWcDmtgQuVihkN85c27ZyxkqsAy87Hi4oktHXmamq eDwzYy1jHBhGHhhPglKuPEpPuBAWPRIFIo8YdmOUNjGfLOMter1gflTy07hRouLd 1kNtiUy6inLGlWKJrKd8YuhZ+cBRWhZ86lFzgAgx8fZbS6XwK9BVVXkpkN6PPXQY u+hYzznYk3XTJpI7xxg8uIB/Vd2OlUZ/szxkpyqaT9MWseBRXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9w9TWAu1Guvw19Sptp1sB7qkVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMzAzMWI4YWItMzdkMC0z ODA3LWE1NjctYWQ3NDhjN2IxNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRdpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHysHZqCrYAdXh79LQIsNejC0hy1yarjseI5zqWpG/niG3gbxa++Vu0 1h2zsuF6MqTRMukHFdDla5RAG26X+KL7m3IbwTv/zzg/y7PrpsDMe6avKjW+AuD3 6Ocr9lCUJ8QDmyBlepwUkrrSVV+hbkIEh2eE0aRzbBxIz9WndCBKM93fr6rH1M+q A7nCxk1WY2HP+yc6/l6NKktVr0mKmG+qFpxgrEef0T/c8ZLBE6laFg5N4g8zwi3d 3WRGPvaKFcPDhliPiPVJA3VUrydYSGoHh4dCH2FNmmaPmMKf1Xdcxt7puGoPSxSa fwCaaD8GUDd6ctu91IXB09uaiYPgPW0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:56:06 2025 by rpki-client