$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa File: 20ed8e04-a83d-3139-937f-62183b6e5173.roa (raw, json) Hash identifier: HKV5ZB7/w5KbidVhPvu9NqVRgapLXQtpGAPfo6qqiEk= Subject key identifier: 02:01:D7:78:CA:1A:AF:22:DE:DC:F0:06:06:56:0B:85:14:A8:DC:7B Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584EA78769713A6C71587B6B3D80 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33442 IP address blocks: 149.23.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:69:71:3a:6c:71:58:7b:6b:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b972003b-fbd2-42fa-ab31-65c5b08fc09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:3b:8b:7c:bb:37:75:28:6f:5e:25:8c:04: f0:c9:6b:86:a0:62:77:d2:cb:2a:cf:fd:81:95:c2: c5:08:7d:af:66:ed:79:1e:a8:f1:4f:7a:60:e7:6e: 83:7f:b4:24:d4:9d:f5:e6:cb:21:be:51:4f:89:3a: 33:31:90:af:a4:af:29:88:11:e3:7a:0d:4d:bc:24: 34:39:a6:80:19:d7:50:49:e8:0d:b9:e6:72:cb:a6: 7f:5b:49:2f:fa:8d:79:ec:7e:40:31:2e:95:8b:c7: 02:f1:ab:a5:36:ce:4a:3d:30:70:fa:67:24:b7:dc: ce:f5:7e:88:26:5a:05:18:d4:04:91:47:75:48:f7: d5:80:24:ed:51:39:be:85:ae:5a:8d:fd:e0:7d:3b: 4e:04:24:2f:bd:50:96:f4:cf:f2:79:dc:ad:f6:b8: 17:b9:0e:5d:8f:3d:13:a6:53:b9:7a:43:08:3a:e2: 57:b5:78:34:b4:e9:d9:9e:41:8d:0d:2f:91:89:42: a5:63:94:bf:c6:d5:21:c8:32:06:eb:ca:a0:f9:94: 2c:66:ed:38:39:92:fc:25:7d:1a:b4:b8:50:33:cc: df:af:c9:79:3c:f3:50:dd:e2:c8:83:27:18:bb:6d: 22:8f:32:c4:2f:20:00:0e:77:31:a2:c7:dc:13:8a: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:01:D7:78:CA:1A:AF:22:DE:DC:F0:06:06:56:0B:85:14:A8:DC:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b4:5c:63:83:3f:c8:03:f3:0f:7f:1c:c4:c5:7d:81:2d:67: c8:78:0a:1b:7d:45:74:6b:dd:2b:28:73:c7:5b:90:c9:2f:85: 89:f6:89:26:d8:06:6f:f2:2a:cd:56:1c:6e:da:a7:a3:b1:cc: fe:92:70:71:01:4c:d9:aa:88:8d:83:f2:03:55:6f:6b:38:98: 3c:06:fd:6c:3a:df:7f:b4:21:e3:53:d3:5b:f5:c5:77:9e:a8: 52:cf:d2:88:a5:04:55:8b:69:ec:02:04:60:d0:90:34:4e:21: dd:2c:c5:ea:9b:e5:5f:41:e8:2a:33:fa:64:8c:c1:ad:1f:2e: f9:01:2e:2c:75:c3:81:8b:48:09:c6:b9:17:a1:53:8e:a4:e0: cc:9b:f3:bd:6c:c9:3b:08:10:4d:c9:6a:11:50:aa:c1:2f:8e: 07:c3:25:f7:d8:20:13:54:ea:5c:3a:16:e4:8e:f5:ad:d3:13: 6a:50:34:4e:8b:4c:58:a1:9a:e2:80:2e:9e:8a:a1:46:13:9b: 71:01:6c:30:6b:33:b0:e3:7c:08:6e:9a:c4:91:68:45:3e:c7: 51:6a:27:11:5b:f4:95:f3:4b:9b:09:50:5e:4f:a8:5f:82:7b: 98:02:e9:76:b2:a8:c4:a4:90:4c:93:39:91:76:03:8d:7a:2d: 2b:4f:85:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh2lxOmxxWHtrPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Yjk3MjAwM2ItZmJkMi00MmZhLWFiMzEtNjVjNWIwOGZjMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquE7i3y7N3Uob14ljATwyWuGoGJ30ssqz/2B lcLFCH2vZu15HqjxT3pg526Df7Qk1J315sshvlFPiTozMZCvpK8piBHjeg1NvCQ0 OaaAGddQSegNueZyy6Z/W0kv+o157H5AMS6Vi8cC8aulNs5KPTBw+mckt9zO9X6I JloFGNQEkUd1SPfVgCTtUTm+ha5ajf3gfTtOBCQvvVCW9M/yedyt9rgXuQ5djz0T plO5ekMIOuJXtXg0tOnZnkGNDS+RiUKlY5S/xtUhyDIG68qg+ZQsZu04OZL8JX0a tLhQM8zfr8l5PPNQ3eLIgycYu20ijzLELyAADncxosfcE4rluwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIB13jKGq8i3tzwBgZWC4UUqNx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMjBlZDhlMDQtYTgzZC0z MTM5LTkzN2YtNjIxODNiNmU1MTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRc9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO0XGODP8gD8w9/HMTFfYEtZ8h4Cht9RXRr3Ssoc8dbkMkvhYn2iSbY Bm/yKs1WHG7ap6OxzP6ScHEBTNmqiI2D8gNVb2s4mDwG/Ww633+0IeNT01v1xXee qFLP0oilBFWLaewCBGDQkDROId0sxeqb5V9B6Coz+mSMwa0fLvkBLix1w4GLSAnG uRehU46k4Myb871syTsIEE3JahFQqsEvjgfDJffYIBNU6lw6FuSO9a3TE2pQNE6L TFihmuKALp6KoUYTm3EBbDBrM7DjfAhumsSRaEU+x1FqJxFb9JXzS5sJUF5PqF+C e5gC6XayqMSkkEyTOZF2A416LStPhUo= -----END CERTIFICATE-----Generated at Wed Jul 29 05:56:16 2026 by rpki-client