$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0dcfacc2-136d-3e1d-b629-e4ecc7e0d0ce.roa File: 0dcfacc2-136d-3e1d-b629-e4ecc7e0d0ce.roa (raw, json) Hash identifier: yVug/aY7rGWaprfZIKTKRHokQPUgiehdHJDE5z5e6fs= Subject key identifier: B3:9C:1A:CD:3F:95:EB:66:55:07:A7:83:6F:87:CE:44:A8:8E:60:0D Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F49736DEFD096DA8A730699A0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0dcfacc2-136d-3e1d-b629-e4ecc7e0d0ce.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33442 IP address blocks: 149.23.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:6d:ef:d0:96:da:8a:73:06:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b599c1cd-0ff9-4cd1-8cb2-ef747762de6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:26:bc:28:5d:c9:43:04:39:c4:b3:49:61: 3f:17:ef:15:d2:50:94:19:3e:ae:23:7f:f5:5a:22: d7:1a:54:b9:a1:b0:0a:1c:a5:3f:ab:ef:12:76:fb: 17:e6:2b:35:18:04:0b:4c:ff:c4:57:f1:26:a8:7d: f4:4d:b7:e2:e3:76:46:91:4b:0b:8b:9c:f7:73:b5: 7d:49:78:10:ba:8b:07:33:94:79:64:a3:6b:35:7e: a0:64:c5:22:7a:ab:6f:57:dc:c5:dd:9d:cf:f7:6b: 1a:26:c0:06:38:1f:68:cd:20:c7:a0:cc:c4:15:53: e1:65:bc:06:ca:5d:95:85:7d:8b:6f:91:93:b0:e3: 83:63:bf:dc:d0:15:d8:d9:73:99:17:75:b9:2e:61: 44:7d:93:f3:f2:9e:97:bf:d9:cb:a0:b6:43:3e:49: ee:8a:36:c9:a9:26:f2:a3:c4:f5:a7:09:66:05:0d: 9e:f7:77:e6:57:33:4c:14:ea:15:bf:c6:b6:64:12: 6d:ec:c9:57:f5:2f:90:71:0c:32:1a:5b:77:1d:41: 9f:b9:58:f7:46:66:51:da:9a:d7:a6:a8:d3:b0:a8: 41:32:ae:c3:a7:1b:88:9c:a5:19:b8:95:5c:4f:45: 8d:9d:90:56:58:99:3d:26:8c:ed:4d:70:b0:c9:11: bb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9C:1A:CD:3F:95:EB:66:55:07:A7:83:6F:87:CE:44:A8:8E:60:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0dcfacc2-136d-3e1d-b629-e4ecc7e0d0ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:dd:97:40:50:ad:e3:b4:a5:3a:b7:7f:b5:e2:28:cd:b8:ca: dd:92:79:f7:70:22:68:4e:81:2d:9b:85:3e:59:6f:49:8c:8f: e8:98:c7:1c:90:f1:92:08:65:22:20:38:89:13:5a:8a:16:bc: 5c:24:4c:1d:6d:29:c6:d3:9d:51:6e:0f:87:81:2c:ec:70:8e: 87:08:4b:a5:4a:dc:85:fa:4a:4c:11:0f:1e:39:49:85:ef:4c: 7d:d5:17:4b:1e:9f:21:bd:94:84:e5:9f:92:a4:79:ee:fe:44: f2:46:ad:04:78:4c:3b:88:6f:1f:a2:0c:0f:ac:d1:55:46:74: a5:f6:38:5d:74:35:d4:a7:79:ca:08:97:a8:67:62:fc:5c:82: 23:c7:79:62:9d:37:32:88:33:32:f4:c0:e8:bd:5a:d3:59:9b: 22:18:66:6c:8e:b3:93:e3:08:c6:a3:92:c8:65:c0:d0:86:5a: ae:c0:4f:8c:8e:00:14:0a:c3:88:4b:df:1a:fe:5c:f5:fe:55: ed:15:d4:26:0f:d1:2a:41:30:fa:00:8d:a8:e1:50:d8:f6:e8: 66:92:c0:bc:1f:99:ed:73:6f:06:83:ce:32:e0:02:a9:64:04: f3:cc:a8:06:3b:3c:7c:66:74:e3:f7:aa:be:a4:64:bc:8e:92: 07:5a:89:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc23v0JbainMGmaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjU5OWMxY2QtMGZmOS00Y2QxLThjYjItZWY3NDc3NjJkZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeomvChdyUMEOcSzSWE/F+8V0lCUGT6uI3/1 WiLXGlS5obAKHKU/q+8SdvsX5is1GAQLTP/EV/EmqH30Tbfi43ZGkUsLi5z3c7V9 SXgQuosHM5R5ZKNrNX6gZMUieqtvV9zF3Z3P92saJsAGOB9ozSDHoMzEFVPhZbwG yl2VhX2Lb5GTsOODY7/c0BXY2XOZF3W5LmFEfZPz8p6Xv9nLoLZDPknuijbJqSby o8T1pwlmBQ2e93fmVzNMFOoVv8a2ZBJt7MlX9S+QcQwyGlt3HUGfuVj3RmZR2prX pqjTsKhBMq7DpxuInKUZuJVcT0WNnZBWWJk9JoztTXCwyRG7mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOcGs0/letmVQeng2+HzkSojmANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMGRjZmFjYzItMTM2ZC0z ZTFkLWI2MjktZTRlY2M3ZTBkMGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRd/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrdl0BQreO0pTq3f7XiKM24yt2SefdwImhOgS2bhT5Zb0mMj+iYxxyQ 8ZIIZSIgOIkTWooWvFwkTB1tKcbTnVFuD4eBLOxwjocIS6VK3IX6SkwRDx45SYXv TH3VF0senyG9lITln5Kkee7+RPJGrQR4TDuIbx+iDA+s0VVGdKX2OF10NdSnecoI l6hnYvxcgiPHeWKdNzKIMzL0wOi9WtNZmyIYZmyOs5PjCMajkshlwNCGWq7AT4yO ABQKw4hL3xr+XPX+Ve0V1CYP0SpBMPoAjajhUNj26GaSwLwfme1zbwaDzjLgAqlk BPPMqAY7PHxmdOP3qr6kZLyOkgdaiaE= -----END CERTIFICATE-----Generated at Sat Sep 26 01:31:30 2026 by rpki-client