$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa File: 42ca2390-8cdd-3071-9349-acf8de5d2be1.roa (raw, json) Hash identifier: EgDs9WyEsL3RjJ9fDgn+iADfGW6XZKWOO/8I5VJ9x3E= Subject key identifier: 63:24:26:74:F5:6D:32:BF:DC:05:45:F7:E2:29:5E:E2:86:4F:05:AE Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F49750D4FAD4B9D960128E580 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33442 IP address blocks: 149.23.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:0d:4f:ad:4b:9d:96:01:28:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=57bff6eb-1bfe-4bec-9db9-c2cc503ca44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8c:86:d4:d7:7b:25:62:ac:14:9c:7d:0d:36: 87:7b:01:75:65:81:55:f8:97:f8:11:b1:f9:29:0f: df:c3:3b:61:44:2e:03:77:f4:c7:e9:21:8f:42:4b: ef:19:4c:5a:82:e5:ba:ea:11:2d:9e:a1:30:9c:0f: 2d:c9:34:41:fb:c3:62:52:6c:90:92:9e:88:f5:92: b5:bc:8d:09:03:16:e2:2d:e1:82:a9:6c:ab:db:fa: 3a:4e:b0:16:54:01:28:6b:90:72:64:94:db:8b:f5: 84:7f:59:7b:02:e4:de:dd:44:59:fa:79:ca:44:2a: e3:f3:d9:88:d0:d3:ea:9b:92:d1:60:73:65:68:ac: 08:26:90:d3:91:25:38:1d:05:3f:8d:1b:66:54:53: 39:2d:80:87:9c:03:f4:e9:16:d2:90:b6:c7:f3:73: a8:2d:f3:2f:fc:4b:de:50:9b:c5:21:e7:86:6d:0e: 9e:88:02:99:98:2b:81:e2:3a:85:6e:22:58:a3:8a: 31:98:f2:46:55:eb:20:02:9d:61:45:91:61:20:9b: 20:cd:9f:6a:21:8a:5a:0d:5e:d0:a4:4e:bb:c2:53: da:d7:f4:08:05:aa:31:3a:98:24:b2:56:d8:2c:d9: 96:13:b8:74:2f:6e:b7:b7:bd:00:df:b0:42:f0:16: 09:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:24:26:74:F5:6D:32:BF:DC:05:45:F7:E2:29:5E:E2:86:4F:05:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/42ca2390-8cdd-3071-9349-acf8de5d2be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:57:db:ed:47:7b:fc:cb:d2:60:d1:41:ae:40:cd:14:ad:d6: 40:5f:48:2b:27:e7:b9:f8:0a:63:e3:5d:12:4d:60:0f:c4:d4: 6d:15:1a:09:7a:14:d7:0d:35:06:a7:68:6a:06:e7:cf:b3:90: 7b:36:2f:dd:e8:e7:0d:c2:2b:f1:82:ff:94:4d:9d:ce:91:9c: 00:67:1d:f5:de:c3:6c:aa:cb:3b:8e:cb:29:8a:7a:20:e4:75: eb:38:a7:27:2b:f5:23:2d:2c:5a:22:8c:fb:39:eb:53:21:54: 99:6a:d8:5a:c3:24:5a:ce:6a:08:4a:55:0a:38:15:01:cf:14: 57:c9:0b:15:71:4c:b7:89:5a:b8:22:43:a5:ff:21:df:33:c1: e2:6c:46:a2:2f:d8:7f:7f:6d:42:c2:9c:a7:6c:90:f9:b5:e8: 2c:48:f7:e8:05:8b:eb:6c:e4:84:5f:2b:f6:81:59:67:10:ed: 88:35:67:9d:7b:0e:1d:94:3f:38:73:70:19:8c:27:6f:a1:bd: 73:eb:e1:ea:94:b1:da:72:84:ad:0f:d9:99:eb:1b:dd:0e:57: 32:d4:e2:43:57:24:7e:27:44:97:e2:e8:c1:be:04:7c:8e:bf: bc:e0:68:cf:21:8e:41:3a:d5:ab:2e:6a:20:2c:d3:67:de:24: 90:dd:e9:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdQ1PrUudlgEo5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTdiZmY2ZWItMWJmZS00YmVjLTlkYjktYzJjYzUwM2NhNDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4yG1Nd7JWKsFJx9DTaHewF1ZYFV+Jf4EbH5 KQ/fwzthRC4Dd/TH6SGPQkvvGUxaguW66hEtnqEwnA8tyTRB+8NiUmyQkp6I9ZK1 vI0JAxbiLeGCqWyr2/o6TrAWVAEoa5ByZJTbi/WEf1l7AuTe3URZ+nnKRCrj89mI 0NPqm5LRYHNlaKwIJpDTkSU4HQU/jRtmVFM5LYCHnAP06RbSkLbH83OoLfMv/Eve UJvFIeeGbQ6eiAKZmCuB4jqFbiJYo4oxmPJGVesgAp1hRZFhIJsgzZ9qIYpaDV7Q pE67wlPa1/QIBaoxOpgkslbYLNmWE7h0L263t70A37BC8BYJEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMkJnT1bTK/3AVF9+IpXuKGTwWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNDJjYTIzOTAtOGNkZC0z MDcxLTkzNDktYWNmOGRlNWQyYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpX2+1He/zL0mDRQa5AzRSt1kBfSCsn57n4CmPjXRJNYA/E1G0VGgl6 FNcNNQanaGoG58+zkHs2L93o5w3CK/GC/5RNnc6RnABnHfXew2yqyzuOyymKeiDk des4pycr9SMtLFoijPs561MhVJlq2FrDJFrOaghKVQo4FQHPFFfJCxVxTLeJWrgi Q6X/Id8zweJsRqIv2H9/bULCnKdskPm16CxI9+gFi+ts5IRfK/aBWWcQ7Yg1Z517 Dh2UPzhzcBmMJ2+hvXPr4eqUsdpyhK0P2ZnrG90OVzLU4kNXJH4nRJfi6MG+BHyO v7zgaM8hjkE61asuaiAs02feJJDd6UU= -----END CERTIFICATE-----Generated at Mon Sep 28 12:32:01 2026 by rpki-client