$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa File: 3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa (raw, json) Hash identifier: df8xooNjkzmNSIlas+n7W8Ev/77wmZ46PPJipa4v5wU= Subject key identifier: 3F:0B:83:8F:6D:DF:55:DF:54:0D:71:44:7D:37:A1:DF:B5:04:45:28 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F4973DF6C1B8FE57EB9DF6700 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33442 IP address blocks: 149.23.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:df:6c:1b:8f:e5:7e:b9:df:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5c7a8650-aca7-434a-aa8c-613a090c7786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:51:12:6c:af:a9:fc:17:86:f7:69:8d:67: 27:50:3b:06:38:79:42:40:0a:d1:39:23:87:38:20: 07:b6:49:c7:72:10:65:ec:76:b0:51:1a:26:ac:a9: 1d:fe:8f:2d:b9:82:87:fb:a4:16:bf:ff:7d:91:1f: 1a:95:fd:0a:71:7c:d8:90:a9:e4:59:df:eb:fe:22: 3e:c2:27:0d:d6:37:ad:41:b4:9e:88:88:5c:3b:4c: bf:c2:3f:58:25:fd:2f:26:57:ce:a1:36:2f:2a:6b: ec:cb:32:b1:ae:90:e6:1e:4f:f6:d2:45:b8:e1:ed: e5:25:72:8f:e7:d2:91:33:15:df:5b:91:06:7c:ca: 22:cd:b1:1a:9e:b3:84:78:7a:90:58:eb:59:05:20: d3:fa:10:92:26:5a:bb:c2:a4:40:1a:38:0e:31:b7: 78:18:47:89:91:6b:4f:96:60:72:b5:0b:15:4b:84: a0:58:85:0c:8c:3f:62:79:bc:1f:c7:0b:aa:b9:a5: 31:31:6b:77:cf:48:13:6f:8d:29:22:a3:1a:f1:23: ba:da:30:eb:b8:0e:fd:58:73:1d:a2:0f:3c:b9:23: ec:61:3e:44:45:00:18:48:61:6e:17:d5:5e:e3:c9: d8:f8:11:26:6d:11:94:18:f5:32:8e:34:54:16:5f: 51:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0B:83:8F:6D:DF:55:DF:54:0D:71:44:7D:37:A1:DF:B5:04:45:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ee:ee:99:22:21:8b:71:8e:43:4c:42:39:4a:9d:89:46:7d: 78:e9:b3:43:d1:4b:8b:a7:20:1d:4e:24:0c:9a:f1:34:90:1e: 3e:9c:f0:06:68:2c:54:f0:08:5c:36:14:41:fb:66:af:cb:14: ac:13:76:88:83:00:dc:da:d6:da:20:11:9c:5b:b9:34:68:86: b1:85:d6:d5:91:28:00:0e:5f:6a:4e:fe:15:ec:ec:3e:e8:61: 0c:52:b7:58:cc:33:5c:c7:65:89:50:2f:4f:b8:f3:98:9d:95: 32:0d:01:0d:b3:0b:5d:e6:ef:cf:21:a3:15:cb:8b:84:4e:d4: 39:c7:a9:ab:c7:d1:d3:46:7c:4e:18:91:11:27:1c:66:12:44: 61:7e:33:4c:d6:98:a1:c5:2e:13:2f:5b:2b:1a:66:4a:2e:1a: f4:12:2d:a4:09:dd:4a:a9:b6:39:29:53:48:85:e4:0c:5e:c9: 6a:3d:2b:e5:81:15:c5:42:e5:5a:07:be:84:d0:52:d8:9f:d7: e3:62:76:9f:5d:52:f8:33:f9:58:1a:27:fd:e0:5f:c9:ce:0e: be:98:8a:f9:e9:2d:f1:c6:1e:86:62:2c:44:dc:df:8e:a7:6e: 09:87:4f:9e:3e:aa:01:01:9b:2f:d0:d4:42:8b:05:22:31:c2: ad:68:24:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc99sG4/lfrnfZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWM3YTg2NTAtYWNhNy00MzRhLWFhOGMtNjEzYTA5MGM3Nzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+tREmyvqfwXhvdpjWcnUDsGOHlCQArROSOH OCAHtknHchBl7HawURomrKkd/o8tuYKH+6QWv/99kR8alf0KcXzYkKnkWd/r/iI+ wicN1jetQbSeiIhcO0y/wj9YJf0vJlfOoTYvKmvsyzKxrpDmHk/20kW44e3lJXKP 59KRMxXfW5EGfMoizbEanrOEeHqQWOtZBSDT+hCSJlq7wqRAGjgOMbd4GEeJkWtP lmBytQsVS4SgWIUMjD9iebwfxwuquaUxMWt3z0gTb40pIqMa8SO62jDruA79WHMd og88uSPsYT5ERQAYSGFuF9Ve48nY+BEmbRGUGPUyjjRUFl9RHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8Lg49t31XfVA1xRH03od+1BEUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvM2QyMGZmY2EtMjhjYy0z ZGEzLTlkYWEtMzJlYmNiN2IwMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDu7pkiIYtxjkNMQjlKnYlGfXjps0PRS4unIB1OJAya8TSQHj6c8AZo LFTwCFw2FEH7Zq/LFKwTdoiDANza1togEZxbuTRohrGF1tWRKAAOX2pO/hXs7D7o YQxSt1jMM1zHZYlQL0+485idlTINAQ2zC13m788hoxXLi4RO1DnHqavH0dNGfE4Y kREnHGYSRGF+M0zWmKHFLhMvWysaZkouGvQSLaQJ3UqptjkpU0iF5AxeyWo9K+WB FcVC5VoHvoTQUtif1+Nidp9dUvgz+VgaJ/3gX8nODr6YivnpLfHGHoZiLETc346n bgmHT54+qgEBmy/Q1EKLBSIxwq1oJOM= -----END CERTIFICATE-----Generated at Sat Sep 26 07:56:32 2026 by rpki-client