$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/ef472a92-1974-3c43-83a9-193c04f425d3.roa File: ef472a92-1974-3c43-83a9-193c04f425d3.roa (raw, json) Hash identifier: ig5c0ClSHAe2GhJIWZ+F8Tp9vbIvh1d0YKBAKgXlAFA= Subject key identifier: 59:F8:2A:58:58:10:46:4C:2E:97:A3:E4:5D:22:43:A0:F6:3B:D2:EE Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584B2331813A0BB4C6F8C6E23620 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/ef472a92-1974-3c43-83a9-193c04f425d3.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 33442 IP address blocks: 149.23.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:81:3a:0b:b4:c6:f8:c6:e2:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=2613771a-064d-4f23-9acd-26595aed406a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:89:6a:09:79:e1:fa:3e:a3:ed:ef:48:8f:ca: eb:51:16:01:15:7e:43:6c:da:4a:58:15:fb:94:47: cf:4d:e5:c6:20:b2:1f:0e:99:ff:90:b3:d5:af:dc: b8:8b:c6:48:a9:74:d9:53:b4:c8:f7:29:94:1d:7c: 4b:a5:fb:50:46:e2:72:23:f3:9e:2a:d2:0e:79:c6: e7:15:b5:8f:a8:14:6b:60:3d:ab:ea:4a:c5:b1:d4: c3:08:4f:a7:30:04:05:c9:47:57:a0:d4:9d:98:ca: c9:5a:8a:35:97:c0:28:95:e4:17:f0:a5:15:e0:43: bc:c0:19:25:b1:05:85:52:4b:9c:70:68:1f:77:0a: 3b:0a:ee:09:3e:bd:3e:ea:43:d4:b8:99:3d:4c:96: 3d:d3:6f:33:8b:1a:a2:71:88:4c:a2:49:41:f8:91: 70:29:33:ff:ed:ff:f8:85:e3:31:9b:b6:6d:43:f8: f4:c3:4e:93:cd:1f:34:39:d5:cb:d5:a4:f8:90:1e: 96:0c:a0:10:8c:82:55:f7:67:0b:f5:eb:cd:7d:47: b4:6e:04:94:fe:7e:90:d1:e3:20:ed:65:3d:f0:49: 31:b4:3d:07:0f:9f:d3:35:bc:13:bb:a0:6a:07:c0: 50:b7:61:cf:9e:84:9c:1c:1b:44:f4:78:ea:71:9c: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F8:2A:58:58:10:46:4C:2E:97:A3:E4:5D:22:43:A0:F6:3B:D2:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/ef472a92-1974-3c43-83a9-193c04f425d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:2e:f1:b3:0e:58:37:8f:8a:f2:af:68:84:c4:bb:8e:42:7d: ca:fe:19:d2:eb:9e:8a:cc:0a:5d:4f:07:75:ed:46:5a:c1:d8: f8:47:3a:37:df:10:1a:e8:11:44:cd:58:e2:af:a5:a3:84:99: 73:39:54:ec:fd:81:77:a4:db:ee:19:cc:05:bc:7d:7d:31:6b: 95:6e:0e:c3:22:c3:fb:9e:09:55:a8:c5:fc:01:cb:4d:19:f1: 8e:7b:57:b0:7b:1c:f9:63:ff:04:65:50:e1:1e:f9:99:1b:2a: e6:5e:a8:dd:81:fd:24:db:20:eb:3a:c9:e5:28:35:60:4e:63: 42:3e:72:61:d0:f7:25:13:37:51:44:9a:61:2e:91:2d:19:ca: 52:50:d3:02:22:14:38:58:f0:ec:5d:d4:45:89:c0:2d:ee:cb: ae:b3:98:63:18:cf:b4:c8:20:c1:ce:d3:f6:63:1b:68:95:67: 14:50:8f:f6:5d:7a:7a:a6:b2:93:7f:3b:3a:9d:70:a2:53:42: 55:a4:fe:85:66:cf:6e:af:cc:76:66:83:aa:94:11:ff:ee:2e: 63:89:70:05:54:f3:4e:d8:c0:25:7f:ef:5e:ef:2c:46:42:49: 24:38:a8:9f:b7:df:e2:fd:04:7a:c3:d6:bb:39:79:56:fa:46: 5c:86:fe:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYE6C7TG+MbiNiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MjYxMzc3MWEtMDY0ZC00ZjIzLTlhY2QtMjY1OTVhZWQ0MDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYlqCXnh+j6j7e9Ij8rrURYBFX5DbNpKWBX7 lEfPTeXGILIfDpn/kLPVr9y4i8ZIqXTZU7TI9ymUHXxLpftQRuJyI/OeKtIOecbn FbWPqBRrYD2r6krFsdTDCE+nMAQFyUdXoNSdmMrJWoo1l8AoleQX8KUV4EO8wBkl sQWFUkuccGgfdwo7Cu4JPr0+6kPUuJk9TJY9028zixqicYhMoklB+JFwKTP/7f/4 heMxm7ZtQ/j0w06TzR80OdXL1aT4kB6WDKAQjIJV92cL9evNfUe0bgSU/n6Q0eMg 7WU98EkxtD0HD5/TNbwTu6BqB8BQt2HPnoScHBtE9HjqcZzjeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn4KlhYEEZMLpej5F0iQ6D2O9LuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvZWY0NzJhOTItMTk3NC0z YzQzLTgzYTktMTkzYzA0ZjQyNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRdQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0u8bMOWDePivKvaITEu45Cfcr+GdLrnorMCl1PB3XtRlrB2PhHOjff EBroEUTNWOKvpaOEmXM5VOz9gXek2+4ZzAW8fX0xa5VuDsMiw/ueCVWoxfwBy00Z 8Y57V7B7HPlj/wRlUOEe+ZkbKuZeqN2B/STbIOs6yeUoNWBOY0I+cmHQ9yUTN1FE mmEukS0ZylJQ0wIiFDhY8Oxd1EWJwC3uy66zmGMYz7TIIMHO0/ZjG2iVZxRQj/Zd enqmspN/OzqdcKJTQlWk/oVmz26vzHZmg6qUEf/uLmOJcAVU807YwCV/717vLEZC SSQ4qJ+33+L9BHrD1rs5eVb6RlyG/nQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:15:22 2025 by rpki-client