$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa File: 4bfba0d7-8739-3f45-a18a-99f16f93e756.roa (raw, json) Hash identifier: 7rpPuiRhOalmR/8DTnuI2XFYLhDxixPT1lmCn/dD2cA= Subject key identifier: 39:EA:26:12:B6:20:83:65:D5:8F:6E:1A:49:4C:5A:10:BE:D5:87:5F Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F4973DF566D8B882BE59B7F00 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 149.23.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:df:56:6d:8b:88:2b:e5:9b:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fc71343c-dfdc-4ea0-a7b5-8acf53a71adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:ab:28:2f:0a:a4:76:3d:10:84:49:69:a9: e1:02:89:ab:7f:ad:e0:49:3d:f9:2c:68:1e:9a:67: 1c:fb:37:45:ab:11:74:2c:bd:ab:6e:2b:86:6b:32: 94:d9:3d:7a:2d:80:a2:5c:81:fe:24:98:16:53:54: e6:c5:dc:d0:9d:05:3d:43:76:25:32:80:35:c0:36: 42:10:0f:45:9c:35:f0:e1:7b:6b:3c:7f:78:ab:bd: 9f:60:02:a2:55:3f:3d:ab:3d:32:b8:e4:3c:d6:c9: fa:43:df:3b:e8:d0:a4:97:10:69:bc:8a:58:02:d8: bd:f4:bc:78:34:81:1b:fa:4e:3e:51:11:60:b3:d2: aa:89:df:af:6e:d7:36:fc:35:a1:f9:37:ce:54:f8: a5:eb:21:63:31:f4:17:77:74:17:87:71:7b:8d:b0: 8d:7f:84:df:a4:10:dc:33:e4:57:69:c8:f8:cd:80: b0:73:c5:e8:65:c9:fe:ff:b8:09:3d:66:71:b2:10: cf:4a:e8:77:fa:50:90:fa:e5:d5:8d:a5:f7:e4:6e: 53:05:b7:b4:7a:06:73:aa:2e:84:f4:a8:79:23:16: ff:f2:13:d0:03:12:3a:5b:57:2b:4f:26:35:fd:aa: 7a:b9:a3:cb:77:87:d2:6d:d7:f7:2c:d0:d7:e8:7d: 93:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EA:26:12:B6:20:83:65:D5:8F:6E:1A:49:4C:5A:10:BE:D5:87:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e9:f9:a2:ef:0d:b7:27:e8:05:59:7c:95:82:3b:61:72:7e: 1a:f7:d9:5d:1e:9e:28:73:ad:72:c2:43:63:cc:0d:87:7e:29: 9c:74:b7:e4:04:0b:83:3d:32:f5:76:01:df:d9:ad:5c:1a:eb: b6:01:a5:11:55:ad:3a:af:22:10:f6:62:79:bd:cd:88:d0:3c: 23:35:d2:82:2a:bc:39:ac:83:29:8b:9d:9f:e9:8a:78:e8:6f: c3:bf:ea:cf:45:49:c2:3d:19:8c:a5:04:14:21:87:e7:c3:55: d9:2f:16:5f:31:38:b6:d8:74:3d:c5:82:3d:c2:bf:0a:95:12: ac:e5:54:fb:6c:5c:69:fc:7d:95:d1:c3:4d:cf:de:a4:c4:4b: 6c:53:e1:3d:80:66:bd:e0:92:50:a0:87:e7:d9:8c:1f:42:ad: e0:97:c4:dc:01:b6:da:70:0b:33:cb:16:ff:46:e4:8e:4a:73: 57:5c:0e:ed:ff:07:68:56:05:26:19:b9:4e:a4:d3:70:af:ec: 53:d6:71:32:96:3b:c3:8b:ff:76:df:97:40:5c:1c:59:58:0e: e0:43:cb:8d:f1:af:46:b8:23:bb:b9:80:a1:f8:76:57:f1:b0: f0:51:a0:9c:87:28:34:12:05:80:54:8f:45:af:4f:b0:dc:d8: be:1d:1d:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc99WbYuIK+WbfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmM3MTM0M2MtZGZkYy00ZWEwLWE3YjUtOGFjZjUzYTcxYWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzGrKC8KpHY9EIRJaanhAomrf63gST35LGge mmcc+zdFqxF0LL2rbiuGazKU2T16LYCiXIH+JJgWU1TmxdzQnQU9Q3YlMoA1wDZC EA9FnDXw4XtrPH94q72fYAKiVT89qz0yuOQ81sn6Q9876NCklxBpvIpYAti99Lx4 NIEb+k4+URFgs9Kqid+vbtc2/DWh+TfOVPil6yFjMfQXd3QXh3F7jbCNf4TfpBDc M+RXacj4zYCwc8XoZcn+/7gJPWZxshDPSuh3+lCQ+uXVjaX35G5TBbe0egZzqi6E 9Kh5Ixb/8hPQAxI6W1crTyY1/ap6uaPLd4fSbdf3LNDX6H2T1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnqJhK2IINl1Y9uGklMWhC+1YdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNGJmYmEwZDctODczOS0z ZjQ1LWExOGEtOTlmMTZmOTNlNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRdpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzp+aLvDbcn6AVZfJWCO2Fyfhr32V0enihzrXLCQ2PMDYd+KZx0t+QE C4M9MvV2Ad/ZrVwa67YBpRFVrTqvIhD2Ynm9zYjQPCM10oIqvDmsgymLnZ/pinjo b8O/6s9FScI9GYylBBQhh+fDVdkvFl8xOLbYdD3Fgj3CvwqVEqzlVPtsXGn8fZXR w03P3qTES2xT4T2AZr3gklCgh+fZjB9CreCXxNwBttpwCzPLFv9G5I5Kc1dcDu3/ B2hWBSYZuU6k03Cv7FPWcTKWO8OL/3bfl0BcHFlYDuBDy43xr0a4I7u5gKH4dlfx sPBRoJyHKDQSBYBUj0WvT7Dc2L4dHb0= -----END CERTIFICATE-----Generated at Sat Sep 26 06:35:35 2026 by rpki-client