$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa File: 76c44b00-989e-36fc-900c-bd70d2bf1e52.roa (raw, json) Hash identifier: lmr690q/sdd89jmjB5SYNuPccTqfxI3z30Ar+wuch68= Subject key identifier: 71:E8:18:69:74:5D:8A:55:EC:53:B0:35:20:A5:70:CA:65:D9:9A:9A Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B2CF6D77CD8019DA53F440100 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 33442 IP address blocks: 149.23.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:d7:7c:d8:01:9d:a5:3f:44:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=aa8392db-3836-469b-83a2-b39c07136e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:29:d4:ce:eb:68:0e:2e:80:47:cb:ca:f8: 49:26:47:55:37:f1:fc:86:ec:30:5f:53:8f:35:a1: b6:33:2d:f5:ab:2e:91:09:97:dc:ed:6c:83:56:bb: 78:c4:36:2d:6e:c0:1d:65:f6:98:68:1f:9f:cf:0a: 03:f8:c2:10:3d:1f:fc:82:50:04:35:76:f3:d5:c0: 83:df:f2:f9:cf:4a:cb:d8:23:30:b3:ed:60:5d:f5: 7c:13:0a:30:8a:87:47:20:1e:3d:8c:a1:43:97:3a: ae:f8:4a:33:72:0b:d0:e3:e5:b3:e9:5b:77:e9:ba: 9e:d8:76:c2:85:fa:66:2d:a6:47:f2:c3:d7:6a:ae: dd:bc:dc:c1:48:fa:cd:a9:07:5c:13:a5:7c:c4:09: b0:d8:38:eb:04:aa:ce:8c:4c:c2:9f:63:96:37:67: bf:4b:df:f8:d5:32:62:78:4f:35:5b:a8:69:2d:b0: 06:f5:25:d1:e5:bb:6d:f5:43:5f:1d:ed:ab:74:6f: af:b9:b2:83:47:d3:5f:68:34:15:97:07:cc:90:e7: ba:51:10:60:d8:42:87:51:10:c9:c1:48:18:0e:3e: 9f:47:49:c9:56:f2:58:45:74:15:28:0d:0e:32:e5: c4:a4:33:21:36:aa:62:d2:2a:c4:89:a3:69:7f:9c: f2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E8:18:69:74:5D:8A:55:EC:53:B0:35:20:A5:70:CA:65:D9:9A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b8:eb:95:3e:5a:d3:d3:b3:58:21:6d:58:cd:5f:0f:d8:71: 30:0b:3c:99:3e:e3:7f:b6:0b:03:d4:d1:90:d1:ce:5c:7d:88: b3:6d:15:ac:3a:c5:84:f6:7a:74:62:a1:b1:0b:93:ae:52:a3: a3:95:16:b1:d6:8b:ed:72:62:b5:2d:e2:b3:04:36:1e:43:1f: d7:0a:77:9e:01:a8:c0:00:64:50:72:c9:89:96:fd:40:0e:47: 59:59:a9:33:58:67:56:99:74:35:e6:21:04:19:ee:96:6f:73: a6:6d:ef:74:56:4c:95:39:51:8f:48:76:47:d1:a8:8a:05:65: 37:b4:d9:86:02:50:21:16:4c:c0:53:e1:33:0b:89:32:f4:94: 8e:76:4a:c1:27:88:80:79:e5:24:2a:75:f4:f8:b9:29:74:01: 53:ec:84:c8:96:33:0a:b1:97:88:92:d7:6a:bb:9d:72:c5:3f: 9c:fe:f3:96:b5:55:fe:81:80:cd:ff:7d:b6:a0:83:6d:e7:d9: e2:40:32:23:91:fd:77:cc:7d:06:ef:db:61:3d:ee:9a:47:a5: 49:75:e2:8e:fe:a0:db:3c:c4:c0:eb:b7:61:9e:01:73:2b:6f: 01:3d:d7:47:93:21:ff:bc:0a:ab:89:09:04:c2:6b:f0:eb:bc: 07:a6:a6:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9td82AGdpT9EAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk YWE4MzkyZGItMzgzNi00NjliLTgzYTItYjM5YzA3MTM2ZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkkp1M7raA4ugEfLyvhJJkdVN/H8huwwX1OP NaG2My31qy6RCZfc7WyDVrt4xDYtbsAdZfaYaB+fzwoD+MIQPR/8glAENXbz1cCD 3/L5z0rL2CMws+1gXfV8EwowiodHIB49jKFDlzqu+EozcgvQ4+Wz6Vt36bqe2HbC hfpmLaZH8sPXaq7dvNzBSPrNqQdcE6V8xAmw2DjrBKrOjEzCn2OWN2e/S9/41TJi eE81W6hpLbAG9SXR5btt9UNfHe2rdG+vubKDR9NfaDQVlwfMkOe6URBg2EKHURDJ wUgYDj6fR0nJVvJYRXQVKA0OMuXEpDMhNqpi0irEiaNpf5zygwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHoGGl0XYpV7FOwNSClcMpl2ZqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNzZjNDRiMDAtOTg5ZS0z NmZjLTkwMGMtYmQ3MGQyYmYxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq465U+WtPTs1ghbVjNXw/YcTALPJk+43+2CwPU0ZDRzlx9iLNtFaw6 xYT2enRiobELk65So6OVFrHWi+1yYrUt4rMENh5DH9cKd54BqMAAZFByyYmW/UAO R1lZqTNYZ1aZdDXmIQQZ7pZvc6Zt73RWTJU5UY9IdkfRqIoFZTe02YYCUCEWTMBT 4TMLiTL0lI52SsEniIB55SQqdfT4uSl0AVPshMiWMwqxl4iS12q7nXLFP5z+85a1 Vf6BgM3/fbagg23n2eJAMiOR/XfMfQbv22E97ppHpUl14o7+oNs8xMDrt2GeAXMr bwE910eTIf+8CquJCQTCa/DrvAempqk= -----END CERTIFICATE-----Generated at Wed Nov 5 04:33:37 2025 by rpki-client