$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa File: 8ecb86e6-8311-3057-8829-f64fb18d5879.roa (raw, json) Hash identifier: Ot+5J0T9gqF0JsQ//AS/u5qwur8TwwndA3oW3QUKfiM= Subject key identifier: FA:1F:93:4B:12:60:72:55:E8:1C:71:41:43:17:4D:40:6F:0E:6F:A0 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584A90A0B3FDBEACD2EAB7151E80 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 33442 IP address blocks: 149.23.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:b3:fd:be:ac:d2:ea:b7:15:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=04239e6b-ca1e-4819-b2bd-1190b23bb3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d0:4e:40:0c:0a:ed:fa:42:49:4e:c8:b4:6e: 02:d9:3d:58:c0:fd:c1:c9:4f:4f:d1:ee:5f:6d:c5: f8:ac:04:52:4b:a1:55:6b:a8:87:7f:94:83:15:82: 89:a7:21:bf:73:f5:b2:a2:12:bd:67:e1:4f:29:79: 96:d2:43:51:c4:65:84:8b:cc:79:32:24:aa:17:3e: 5f:a0:fe:e3:ca:41:45:59:db:d8:dc:ac:dc:00:9f: 3e:32:0b:d1:4c:8d:b0:92:81:0c:ce:93:d6:fb:ab: c8:cf:2f:e3:6b:82:b6:49:a2:b4:d5:7b:e2:6c:5f: 16:72:9d:09:d5:f0:9e:10:3c:f3:7c:5a:85:a0:ad: 06:05:a1:6f:74:96:c1:d9:d3:a7:5f:72:7a:f1:8e: 0f:e4:38:6b:27:b5:ea:c2:be:a8:2b:77:40:ab:75: 21:3d:7c:ea:6e:6b:86:d9:99:5e:cb:8c:61:25:5e: 32:42:56:2f:fb:bf:63:56:e7:d8:6f:f1:e5:9b:2f: 93:0c:20:a3:77:d3:23:ec:f9:86:90:8a:f8:85:6d: 79:17:5f:3e:3f:2b:6e:4d:c7:f7:89:90:fa:bc:ec: 8d:dc:09:db:be:5d:dc:78:45:16:97:9e:80:71:d0: 66:48:06:4c:c1:e4:be:cf:87:63:15:1f:14:f3:05: e5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1F:93:4B:12:60:72:55:E8:1C:71:41:43:17:4D:40:6F:0E:6F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/8ecb86e6-8311-3057-8829-f64fb18d5879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8b:a6:5f:4c:e5:4b:67:1b:97:a0:8d:83:1e:53:68:21:8c: d9:b5:ed:9f:bd:9c:01:d1:ad:ea:bc:08:37:be:b4:93:87:75: 0a:a1:ef:85:c3:07:63:61:e6:f4:3a:78:42:85:9e:07:3e:1d: be:2a:97:fb:f6:c4:17:6a:90:07:d3:e8:f5:93:92:59:71:fe: 85:66:05:2f:03:45:f9:81:b9:81:50:c1:ea:14:15:1f:ea:ac: 6c:fb:54:2b:7e:46:ee:98:b1:3f:e8:c6:3d:9b:11:f0:3d:35: a4:4a:99:f8:4a:e1:de:02:96:e6:73:10:c0:3b:10:eb:2e:de: 45:aa:c3:c5:ed:91:9e:af:e9:d8:78:3a:fa:84:b4:cb:b8:1a: 45:cb:25:1f:ad:9c:1b:f0:67:94:56:d4:d1:aa:44:9a:da:76: d0:de:37:1d:5a:a3:94:7a:1f:b4:69:89:fe:db:26:7a:a4:01: 02:cd:a6:73:bd:c9:8e:1c:36:71:0c:3b:fe:e2:58:41:fe:e5: 20:59:33:92:95:b4:c3:f9:42:b7:f9:3d:08:5c:31:38:68:9d: 2b:6b:34:78:fa:a6:bd:1a:a4:21:95:8d:55:19:15:fc:c7:c4: 64:8a:79:ef:25:8b:3e:8f:2a:5a:1d:06:2b:19:f1:e8:a9:59: b0:83:fe:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLP9vqzS6rcVHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MDQyMzllNmItY2ExZS00ODE5LWIyYmQtMTE5MGIyM2JiM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtBOQAwK7fpCSU7ItG4C2T1YwP3ByU9P0e5f bcX4rARSS6FVa6iHf5SDFYKJpyG/c/WyohK9Z+FPKXmW0kNRxGWEi8x5MiSqFz5f oP7jykFFWdvY3KzcAJ8+MgvRTI2wkoEMzpPW+6vIzy/ja4K2SaK01XvibF8Wcp0J 1fCeEDzzfFqFoK0GBaFvdJbB2dOnX3J68Y4P5DhrJ7Xqwr6oK3dAq3UhPXzqbmuG 2Zley4xhJV4yQlYv+79jVufYb/Hlmy+TDCCjd9Mj7PmGkIr4hW15F18+PytuTcf3 iZD6vOyN3Anbvl3ceEUWl56AcdBmSAZMweS+z4djFR8U8wXl8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPofk0sSYHJV6BxxQUMXTUBvDm+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvOGVjYjg2ZTYtODMxMS0z MDU3LTg4MjktZjY0ZmIxOGQ1ODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSLpl9M5UtnG5egjYMeU2ghjNm17Z+9nAHRreq8CDe+tJOHdQqh74XD B2Nh5vQ6eEKFngc+Hb4ql/v2xBdqkAfT6PWTkllx/oVmBS8DRfmBuYFQweoUFR/q rGz7VCt+Ru6YsT/oxj2bEfA9NaRKmfhK4d4CluZzEMA7EOsu3kWqw8XtkZ6v6dh4 OvqEtMu4GkXLJR+tnBvwZ5RW1NGqRJradtDeNx1ao5R6H7Rpif7bJnqkAQLNpnO9 yY4cNnEMO/7iWEH+5SBZM5KVtMP5Qrf5PQhcMThonStrNHj6pr0apCGVjVUZFfzH xGSKee8liz6PKlodBisZ8eipWbCD/hE= -----END CERTIFICATE-----Generated at Wed Aug 6 05:59:21 2025 by rpki-client