$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa File: 3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa (raw, json) Hash identifier: 9DxDeHOUNSAh5DTWrSeaA/OtedPFfbrAtFtKMlmyyFg= Subject key identifier: 38:AD:60:A0:8B:61:32:00:D1:82:B0:EC:5F:C6:CE:4A:D6:77:5F:EC Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584EA7876CD5195F37E22B01C280 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33442 IP address blocks: 149.23.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:6c:d5:19:5f:37:e2:2b:01:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=17f896fb-a2ec-4246-a49d-c9ca14024783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:c5:2f:8b:2e:1c:89:e0:fc:94:21:6e:17: 3a:a4:b2:ac:68:d0:24:db:62:6b:7b:c8:7c:50:9b: c1:c8:59:b7:e5:9c:5d:c7:7a:6b:6b:5d:a4:7f:2c: a5:ac:c3:9c:c8:cc:ef:f3:34:41:8a:8e:8b:d5:51: c2:9b:de:31:6f:e5:12:63:db:6e:83:13:66:d8:90: 41:bc:30:11:83:9f:08:cb:02:e3:3f:ee:02:fd:ec: 12:b8:25:b3:85:8c:af:5f:d6:a4:cc:fe:10:35:aa: 83:70:94:7d:fd:d5:77:3b:45:f2:04:cf:1d:63:b0: 77:2b:92:59:31:f5:82:3d:07:43:4f:14:2c:18:80: 9c:34:fc:62:95:ee:14:3c:df:56:f4:97:30:00:b7: 39:33:db:fc:00:e0:10:f0:85:d7:43:6d:e1:68:d6: 2c:77:02:a1:cb:82:80:af:9d:a4:f5:db:d5:bf:a9: 0c:b3:1c:ba:9b:cd:00:ab:b8:a7:68:1e:67:40:15: 6e:0b:db:14:b3:ad:65:5c:b4:e1:05:67:ce:1d:d4: a4:26:07:0a:ca:a3:59:e4:7f:8a:92:fd:77:f6:8f: 34:f5:4b:64:07:2c:b9:c7:4d:01:50:46:98:03:49: 9d:bc:63:d3:ff:49:86:21:35:5d:94:e1:eb:c0:e6: 87:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AD:60:A0:8B:61:32:00:D1:82:B0:EC:5F:C6:CE:4A:D6:77:5F:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:1d:8e:dc:8b:70:70:db:d8:6c:b3:8b:d7:a0:66:a7:08:96: 42:b6:30:22:53:62:c0:09:4a:08:84:06:9b:da:ff:d7:b9:b1: 98:2c:88:e4:af:17:5c:13:22:b9:b5:ec:a0:f4:7e:ea:5b:e1: 64:d7:b3:8a:0d:e4:0d:45:dc:d8:09:a2:36:42:9d:63:e9:f7: e3:d0:c4:0b:da:60:37:fc:0f:04:b2:54:9d:93:a5:22:f4:09: 3c:81:50:f8:57:f5:c1:df:0b:aa:13:07:61:67:b8:0a:14:ff: 3a:3f:3e:da:09:86:49:2d:03:21:07:bd:35:c6:de:ce:51:2a: b0:82:d6:bd:cd:5c:b5:24:1e:62:de:f1:f1:55:84:2a:39:c1: e3:2a:7d:89:b0:e3:ae:12:07:3d:77:fd:37:c1:06:e7:0c:91: f2:99:4d:a6:03:93:fd:cb:6c:23:5e:27:68:91:4a:98:7f:3a: 93:59:ae:73:f8:c8:6c:2c:32:27:33:03:2b:98:e0:40:09:22: 41:13:64:db:0c:97:0a:4e:a9:16:45:0f:c7:b9:a7:bd:08:c1: b9:6f:ed:e4:d0:3f:81:d3:38:af:52:c1:6a:84:8b:29:e4:1f: 5f:e0:5b:59:de:47:09:46:36:b9:a8:7b:4b:bc:43:e6:c9:6d: dd:8a:f0:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh2zVGV834isBwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTdmODk2ZmItYTJlYy00MjQ2LWE0OWQtYzljYTE0MDI0NzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQPFL4suHIng/JQhbhc6pLKsaNAk22Jre8h8 UJvByFm35Zxdx3pra12kfyylrMOcyMzv8zRBio6L1VHCm94xb+USY9tugxNm2JBB vDARg58IywLjP+4C/ewSuCWzhYyvX9akzP4QNaqDcJR9/dV3O0XyBM8dY7B3K5JZ MfWCPQdDTxQsGICcNPxile4UPN9W9JcwALc5M9v8AOAQ8IXXQ23haNYsdwKhy4KA r52k9dvVv6kMsxy6m80Aq7inaB5nQBVuC9sUs61lXLThBWfOHdSkJgcKyqNZ5H+K kv139o809UtkByy5x00BUEaYA0mdvGPT/0mGITVdlOHrwOaHAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDitYKCLYTIA0YKw7F/GzkrWd1/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvM2QyMGZmY2EtMjhjYy0z ZGEzLTlkYWEtMzJlYmNiN2IwMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcdjtyLcHDb2Gyzi9egZqcIlkK2MCJTYsAJSgiEBpva/9e5sZgsiOSv F1wTIrm17KD0fupb4WTXs4oN5A1F3NgJojZCnWPp9+PQxAvaYDf8DwSyVJ2TpSL0 CTyBUPhX9cHfC6oTB2FnuAoU/zo/PtoJhkktAyEHvTXG3s5RKrCC1r3NXLUkHmLe 8fFVhCo5weMqfYmw464SBz13/TfBBucMkfKZTaYDk/3LbCNeJ2iRSph/OpNZrnP4 yGwsMiczAyuY4EAJIkETZNsMlwpOqRZFD8e5p70Iwblv7eTQP4HTOK9SwWqEiynk H1/gW1neRwlGNrmoe0u8Q+bJbd2K8NU= -----END CERTIFICATE-----Generated at Wed Jul 29 08:47:58 2026 by rpki-client