$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa File: 76c44b00-989e-36fc-900c-bd70d2bf1e52.roa (raw, json) Hash identifier: aSP+87uN58oFnyGeJdRS1GL/1G7D61pcCMxD/dYQyKM= Subject key identifier: 0F:34:DF:30:3F:2A:3A:7F:9A:7F:47:38:4B:EE:EC:3E:27:36:B1:7A Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F4973A5530983374321CA1F80 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33442 IP address blocks: 149.23.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a5:53:09:83:37:43:21:ca:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ddbf7f94-7ad6-48f6-a606-84f36ca843f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:f5:44:62:f7:f7:5b:b0:25:25:5c:88:12: 6c:66:46:6b:dc:f3:79:8c:f2:88:77:4e:d0:b7:71: 7e:de:8a:98:3b:87:c2:e7:6b:e5:28:62:8c:61:19: 6d:db:28:0b:c2:45:cc:1c:12:ba:2c:d9:e9:fa:f9: cb:90:05:46:99:fe:c8:ed:ce:2f:a4:64:43:fd:19: d3:4f:10:31:50:77:bc:93:5d:a5:1b:72:96:de:58: 11:25:24:a7:7f:09:a2:b7:fe:20:a9:b6:00:93:ae: 03:da:94:12:06:6d:4b:f0:5e:57:2f:e8:e6:f1:f4: 0c:e5:59:7e:60:1f:74:94:f4:33:e9:03:f9:44:89: a9:f8:70:b7:27:b5:49:28:e3:2f:bc:0d:9d:fc:14: 52:ec:83:78:1d:a8:75:54:da:14:5a:59:63:8f:18: f6:ec:e5:81:35:13:d2:cd:63:89:05:1a:63:05:59: b8:78:27:7b:ff:c0:f1:c8:52:2e:6d:71:4d:fc:bf: 11:0a:85:2c:60:54:2c:6b:d0:3f:06:34:98:0e:db: dd:43:fc:f6:08:e0:06:43:68:72:bc:4b:26:97:02: 4b:7c:54:e0:87:bf:42:84:61:c4:93:29:f1:a4:7d: 57:78:9c:56:e5:1a:cf:a4:46:6b:26:86:a5:4b:77: 7b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:34:DF:30:3F:2A:3A:7F:9A:7F:47:38:4B:EE:EC:3E:27:36:B1:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:88:b1:f4:d5:b8:e1:dd:fe:fb:5a:2e:6f:13:2f:28:95:a4: b9:27:41:ae:37:72:ce:55:32:1b:b0:79:1f:9b:96:13:5d:db: d6:f9:2e:b2:d5:b9:b8:46:a8:1a:29:d2:5d:dc:b1:34:b8:f2: a4:1b:b1:7a:0c:7a:26:80:1c:b6:26:de:f0:84:0b:46:7c:76: 9e:46:9e:89:97:59:1f:d6:fc:b6:10:68:b2:41:28:f3:78:b5: 84:27:d1:9e:09:74:88:0b:cc:f2:a1:c9:a1:e5:7e:38:9d:6a: ee:13:08:15:11:1d:65:41:8c:66:93:ca:8d:be:fb:33:fc:7d: c4:86:1c:54:a4:86:28:48:07:68:7f:ad:b8:eb:cf:3b:be:77: b7:92:ae:ed:52:b4:a2:6a:1d:91:06:86:1b:63:ff:97:f4:fb: ed:95:f5:e8:e8:4d:26:0d:3e:c7:16:c7:b3:cf:2d:9e:cc:bf: 27:66:c4:58:97:0b:fa:88:7a:44:10:21:0f:87:db:42:2a:68: 19:ee:2f:67:d0:6c:f0:4b:7f:6c:35:76:0d:6c:fd:81:a4:9b: bb:d3:3e:e9:9e:8e:cf:d3:4c:f5:52:de:4b:3c:3d:b3:f4:d6: 84:bf:c1:1d:d1:4e:93:ca:b6:cf:2d:ef:31:8c:90:b4:6f:65: 1a:37:ba:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6VTCYM3QyHKH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGRiZjdmOTQtN2FkNi00OGY2LWE2MDYtODRmMzZjYTg0M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lr1RGL391uwJSVciBJsZkZr3PN5jPKId07Q t3F+3oqYO4fC52vlKGKMYRlt2ygLwkXMHBK6LNnp+vnLkAVGmf7I7c4vpGRD/RnT TxAxUHe8k12lG3KW3lgRJSSnfwmit/4gqbYAk64D2pQSBm1L8F5XL+jm8fQM5Vl+ YB90lPQz6QP5RImp+HC3J7VJKOMvvA2d/BRS7IN4Hah1VNoUWlljjxj27OWBNRPS zWOJBRpjBVm4eCd7/8DxyFIubXFN/L8RCoUsYFQsa9A/BjSYDtvdQ/z2COAGQ2hy vEsmlwJLfFTgh79ChGHEkynxpH1XeJxW5RrPpEZrJoalS3d7swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA803zA/Kjp/mn9HOEvu7D4nNrF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNzZjNDRiMDAtOTg5ZS0z NmZjLTkwMGMtYmQ3MGQyYmYxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeIsfTVuOHd/vtaLm8TLyiVpLknQa43cs5VMhuweR+blhNd29b5LrLV ubhGqBop0l3csTS48qQbsXoMeiaAHLYm3vCEC0Z8dp5GnomXWR/W/LYQaLJBKPN4 tYQn0Z4JdIgLzPKhyaHlfjidau4TCBURHWVBjGaTyo2++zP8fcSGHFSkhihIB2h/ rbjrzzu+d7eSru1StKJqHZEGhhtj/5f0++2V9ejoTSYNPscWx7PPLZ7MvydmxFiX C/qIekQQIQ+H20IqaBnuL2fQbPBLf2w1dg1s/YGkm7vTPumejs/TTPVS3ks8PbP0 1oS/wR3RTpPKts8t7zGMkLRvZRo3uvQ= -----END CERTIFICATE-----Generated at Sat Sep 26 10:54:00 2026 by rpki-client