$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa File: 0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa (raw, json) Hash identifier: /4Mk3v4hNlA8uCgfUZiVCCfbFEpoNt1pMvo2x+o9bZ0= Subject key identifier: 27:8E:B3:1A:0A:3C:0C:3F:6C:97:F8:FA:D6:3F:60:87:8D:BC:27:D2 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F49773D12A98CAF27BA816F40 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33442 IP address blocks: 149.23.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:3d:12:a9:8c:af:27:ba:81:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d7d6e92e-9e71-46dd-b120-fd9d058595bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:a0:f1:75:bc:4e:a0:4c:ed:82:60:ae:53: d7:78:75:00:3e:41:ca:8d:df:5a:4d:34:6b:a6:82: 78:9b:a4:75:66:c3:c3:ec:50:55:a3:59:95:51:23: 33:d0:50:43:d3:96:ba:9f:e2:c2:b4:6f:ea:34:87: 3f:5a:ad:51:49:28:0b:a8:d9:e7:cd:77:5d:be:9f: 59:5f:58:9d:c2:5b:02:de:b6:61:e6:3b:ab:72:04: d3:4e:64:ef:2d:b1:62:31:1c:1a:be:02:f5:00:97: 71:bb:a6:84:4c:8c:2d:4c:87:b2:e6:fc:1e:7c:0d: 2d:39:f3:36:ee:33:91:18:c1:e4:43:93:d5:fc:2a: 6c:44:63:d7:fe:00:aa:99:00:e5:1e:fd:4b:23:7a: fd:76:54:56:f6:75:df:30:bc:45:e3:67:9d:02:e6: ab:5b:04:9d:0e:2a:eb:df:9d:f0:1e:04:fe:60:dd: 52:5e:98:a3:6d:2d:e7:ec:c8:08:0b:de:d1:40:58: 2b:b0:91:d0:d7:8f:84:b1:2c:29:7d:e2:5a:59:61: 4a:93:de:82:70:9c:cb:4a:cb:27:42:b0:d7:8e:99: dc:86:08:78:cd:4b:0d:fe:e4:6d:c7:44:61:f5:e3: df:ed:24:65:a2:62:67:27:a3:e9:1c:89:53:d3:5e: f6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8E:B3:1A:0A:3C:0C:3F:6C:97:F8:FA:D6:3F:60:87:8D:BC:27:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:94:62:da:3b:51:ec:5c:5e:d8:35:ad:90:b1:16:33:11:3d: 1d:2d:98:55:07:92:d9:b4:1b:99:a2:67:be:26:47:24:28:b6: 82:af:cc:a9:ee:89:8c:79:4c:5d:da:be:00:67:6c:e4:c8:45: 5e:c5:08:42:6e:82:e6:f7:63:6c:a0:de:a0:f3:2e:d3:8b:4a: 87:c9:90:0f:ec:cb:7d:b5:9c:23:b8:07:2a:f6:c0:a3:c9:2b: 52:7b:b9:ff:5f:86:d4:a4:5e:7e:15:84:a8:1f:64:56:a2:b8: 45:2e:23:5f:86:69:dd:d8:fb:7d:d9:a3:c0:a0:56:14:2b:29: c6:53:56:c8:a5:70:83:a3:9a:64:4b:0c:c7:2c:c7:0a:6b:77: fc:53:dc:22:6b:31:2a:f2:78:80:d3:e1:2f:d3:3e:dc:ff:44: 83:1d:e9:1d:c3:dd:50:c8:ad:c5:40:63:0f:a1:74:59:5c:97: 92:58:44:e8:61:a0:55:10:69:89:87:fd:1a:f6:d0:f2:51:bd: c7:0e:35:9a:5c:c2:d5:b5:7a:a5:1a:fd:4d:53:38:a8:4e:67: 27:bc:52:b3:42:95:43:d7:fe:c6:ba:80:9f:84:9b:b9:d6:d0: 51:f3:90:05:85:ed:9b:7a:7a:e2:58:16:fc:34:25:e3:fc:8c: f2:10:c5:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdz0SqYyvJ7qBb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDdkNmU5MmUtOWU3MS00NmRkLWIxMjAtZmQ5ZDA1ODU5NWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmag8XW8TqBM7YJgrlPXeHUAPkHKjd9aTTRr poJ4m6R1ZsPD7FBVo1mVUSMz0FBD05a6n+LCtG/qNIc/Wq1RSSgLqNnnzXddvp9Z X1idwlsC3rZh5jurcgTTTmTvLbFiMRwavgL1AJdxu6aETIwtTIey5vwefA0tOfM2 7jORGMHkQ5PV/CpsRGPX/gCqmQDlHv1LI3r9dlRW9nXfMLxF42edAuarWwSdDirr 353wHgT+YN1SXpijbS3n7MgIC97RQFgrsJHQ14+EsSwpfeJaWWFKk96CcJzLSssn QrDXjpnchgh4zUsN/uRtx0Rh9ePf7SRlomJnJ6PpHIlT0172AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeOsxoKPAw/bJf4+tY/YIeNvCfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMGE2YjllMTItNTA4ZS0z NTY4LWE0ZDctYWZiNmFkNjJjYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACUYto7UexcXtg1rZCxFjMRPR0tmFUHktm0G5miZ74mRyQotoKvzKnu iYx5TF3avgBnbOTIRV7FCEJugub3Y2yg3qDzLtOLSofJkA/sy321nCO4Byr2wKPJ K1J7uf9fhtSkXn4VhKgfZFaiuEUuI1+Gad3Y+33Zo8CgVhQrKcZTVsilcIOjmmRL DMcsxwprd/xT3CJrMSryeIDT4S/TPtz/RIMd6R3D3VDIrcVAYw+hdFlcl5JYROhh oFUQaYmH/Rr20PJRvccONZpcwtW1eqUa/U1TOKhOZye8UrNClUPX/sa6gJ+Em7nW 0FHzkAWF7Zt6euJYFvw0JeP8jPIQxQI= -----END CERTIFICATE-----Generated at Sat Sep 26 23:15:38 2026 by rpki-client