$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa File: 832a3037-6f58-31ad-97d9-1d5379dadd18.roa (raw, json) Hash identifier: 3KoSAkkkdNShciqwrhW8q7rmgaojwHM/J1tG/KWYmt4= Subject key identifier: F9:EE:D1:FD:61:4D:EC:24:ED:5B:D4:F3:37:9B:04:4D:2A:A1:E8:34 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B2CF6D7390FC4A5ED499482C0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 33442 IP address blocks: 149.23.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:d7:39:0f:c4:a5:ed:49:94:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=16918c63-e9cb-4737-9f96-92536348e173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:f5:6b:0b:d7:1b:98:62:f3:17:ed:cc:99: 62:17:75:9c:30:8c:af:a8:6a:d1:7c:49:1d:4b:16: 7e:67:e4:ac:4a:ed:d9:d0:c0:83:69:93:2f:9e:5c: f3:5c:cc:d3:84:c9:d1:f9:b5:b0:a2:a1:29:b9:8f: 2e:66:24:54:33:b5:d1:c5:d2:25:3f:a1:02:cd:7c: f8:d8:57:44:6c:c6:6b:a4:d2:6e:b4:af:b8:d8:9a: b5:d0:75:40:b9:02:b6:c9:26:a6:43:79:28:7a:c2: 58:2d:80:a8:dc:70:b9:3d:01:8c:f4:47:16:10:a3: 6d:32:31:4d:a9:e2:4b:34:eb:1e:ff:6d:17:fe:35: dd:be:8c:cc:a7:fc:a4:b2:04:48:81:b0:30:49:48: 70:07:2c:e7:24:9b:b9:f2:b2:e9:eb:26:ad:67:aa: 98:12:9e:b6:4e:a0:38:a4:30:94:dc:26:3e:b8:7d: fa:ae:33:7e:b5:f5:78:32:6e:eb:72:b6:34:3d:8c: 6e:46:de:41:ad:c5:f8:f3:53:9d:18:3b:10:07:fe: 90:28:74:96:f1:85:0f:ba:50:13:e5:fa:98:b0:b0: 37:2b:c0:70:6e:06:25:91:52:d1:6c:ca:8f:03:75: 1b:4f:9f:31:15:79:36:a6:82:6e:bb:86:4e:c3:f5: 99:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EE:D1:FD:61:4D:EC:24:ED:5B:D4:F3:37:9B:04:4D:2A:A1:E8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:8a:bc:f1:4e:58:a5:a1:13:72:e1:8d:40:1f:5c:9e:0e:fb: cc:bf:56:02:d4:73:a3:c3:46:4e:ec:fd:f4:f3:f7:9f:56:4b: a8:37:22:71:dd:89:d2:b1:06:bc:5d:9c:1f:1d:02:86:89:76: ae:f7:d7:b0:07:fc:a1:f6:d4:60:55:55:9d:e1:94:64:c5:e7: 4f:ac:9b:4a:0e:d0:63:bc:17:c9:64:67:da:cc:63:83:57:0e: ce:bd:f9:30:9e:d4:28:9d:60:ea:5a:c5:d3:62:22:87:b2:4b: 4a:6d:20:cd:78:d2:94:c6:06:7b:aa:12:72:24:be:45:89:68: 6e:a8:39:72:1d:04:3a:13:5c:64:cb:f5:08:79:e2:7f:f7:e7: 1c:b5:1b:f4:aa:c7:da:f6:27:bb:89:52:e5:4e:12:fd:ee:37: 19:fb:4f:5d:d5:6b:db:cf:04:31:52:10:b6:91:df:21:87:ef: 64:20:37:da:1e:02:1a:d1:4e:36:2d:d4:8b:d6:d9:0b:d9:45: dc:43:5c:b9:02:e2:86:19:2c:29:f2:d5:23:a4:ce:c2:db:a5: 20:ba:46:26:45:87:3e:f9:be:bf:d2:a5:95:ac:26:ef:80:79: 17:5c:b4:7e:3d:cb:da:f9:2d:03:49:44:ca:a2:a5:f9:77:2e: 56:7d:60:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9tc5D8Sl7UmUgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MTY5MThjNjMtZTljYi00NzM3LTlmOTYtOTI1MzYzNDhlMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyv1awvXG5hi8xftzJliF3WcMIyvqGrRfEkd SxZ+Z+SsSu3Z0MCDaZMvnlzzXMzThMnR+bWwoqEpuY8uZiRUM7XRxdIlP6ECzXz4 2FdEbMZrpNJutK+42Jq10HVAuQK2ySamQ3koesJYLYCo3HC5PQGM9EcWEKNtMjFN qeJLNOse/20X/jXdvozMp/yksgRIgbAwSUhwByznJJu58rLp6yatZ6qYEp62TqA4 pDCU3CY+uH36rjN+tfV4Mm7rcrY0PYxuRt5BrcX481OdGDsQB/6QKHSW8YUPulAT 5fqYsLA3K8BwbgYlkVLRbMqPA3UbT58xFXk2poJuu4ZOw/WZvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnu0f1hTewk7VvU8zebBE0qoeg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvODMyYTMwMzctNmY1OC0z MWFkLTk3ZDktMWQ1Mzc5ZGFkZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGKvPFOWKWhE3LhjUAfXJ4O+8y/VgLUc6PDRk7s/fTz959WS6g3InHd idKxBrxdnB8dAoaJdq7317AH/KH21GBVVZ3hlGTF50+sm0oO0GO8F8lkZ9rMY4NX Ds69+TCe1CidYOpaxdNiIoeyS0ptIM140pTGBnuqEnIkvkWJaG6oOXIdBDoTXGTL 9Qh54n/35xy1G/Sqx9r2J7uJUuVOEv3uNxn7T13Va9vPBDFSELaR3yGH72QgN9oe AhrRTjYt1IvW2QvZRdxDXLkC4oYZLCny1SOkzsLbpSC6RiZFhz75vr/SpZWsJu+A eRdctH49y9r5LQNJRMqipfl3LlZ9YN4= -----END CERTIFICATE-----Generated at Wed Nov 5 03:14:42 2025 by rpki-client