$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa File: 832a3037-6f58-31ad-97d9-1d5379dadd18.roa (raw, json) Hash identifier: XD4/yDmvx1BUQkHpFOa9HQXHtO9WmDahprefBw/xxf4= Subject key identifier: D2:38:CE:7A:9F:B4:C5:3C:55:49:C5:FD:14:5C:15:8A:22:E3:2A:A6 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F4973A53308415DA8322C5600 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33442 IP address blocks: 149.23.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a5:33:08:41:5d:a8:32:2c:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=efcb5121-6989-4d7e-8b38-9487dfe8ccac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:76:5d:26:20:a7:9f:d4:6b:e9:77:b9:3d:03: 49:2a:88:ac:59:5f:46:e5:ee:c5:23:c5:c5:b0:b0: dd:b6:32:d2:78:bb:61:28:1e:4f:9a:39:6f:ad:58: f5:37:e2:d1:c0:61:66:44:0f:0b:36:9e:67:1f:74: 02:5b:77:65:35:43:ee:1e:b7:ec:a7:d3:db:8e:db: 49:85:46:df:2c:35:02:85:2c:7d:8a:4d:89:09:57: cd:d8:33:d0:17:ab:66:f1:bb:65:bd:dc:77:cf:8d: 1d:9b:4c:e7:40:c6:11:08:4b:15:85:23:fe:f3:20: b1:37:1f:74:4c:fb:4b:7b:fb:87:49:fb:21:79:eb: ee:bc:48:d7:ee:86:43:cb:f4:58:d2:14:30:84:72: 26:68:48:8e:86:b4:36:d5:bd:5f:4a:02:71:eb:94: c3:e1:2d:ac:69:21:68:cc:6a:65:ad:31:7b:f5:00: b8:c4:8d:2a:70:c0:d9:a8:81:b4:3b:44:f4:3e:d0: 59:6c:63:d5:e9:a6:b1:52:2a:da:cb:a2:6b:c4:be: 54:42:e1:61:d2:ed:e7:1e:49:9e:cf:30:d1:74:cf: 97:73:49:c0:02:b0:2c:0e:d7:08:b7:c6:5b:ee:5d: db:1b:fc:1e:14:87:93:48:a0:e7:e0:c6:33:fa:00: b2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:38:CE:7A:9F:B4:C5:3C:55:49:C5:FD:14:5C:15:8A:22:E3:2A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/832a3037-6f58-31ad-97d9-1d5379dadd18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:46:99:a5:87:9c:45:df:07:ac:cc:c7:ce:a3:a5:44:de:ca: 60:b4:bd:cf:b4:84:16:8c:b5:a9:2d:57:5d:51:a2:1f:03:65: 53:4d:17:b8:d9:3d:df:c0:39:bb:78:d4:42:8b:5d:23:5e:c1: f6:ab:c6:e6:ad:89:9c:f4:88:3d:08:e6:69:1b:f0:af:e9:ef: ad:41:e4:3d:36:66:ac:8c:02:57:91:1a:75:4b:0c:8f:cf:ba: c0:e2:aa:ee:40:0b:8e:a6:e5:7b:c4:3e:95:fa:0b:9f:b0:bb: a5:a4:54:4f:ac:05:a7:39:7d:d8:13:80:69:ba:24:8c:cc:71: fd:0a:09:79:d6:54:a3:c8:fb:1a:54:12:6f:02:7d:93:2a:74: 0c:f9:ec:8d:8d:c3:26:50:3f:e3:78:c8:7f:a9:e2:d0:86:34: 16:f7:3d:3c:55:ab:cc:a0:a3:8b:7d:7e:06:04:c0:e4:e7:86: 00:ea:d8:7d:61:44:80:a6:f1:bd:a3:48:c7:cf:86:85:f1:b1: 03:fa:73:cc:d7:c3:0a:46:0a:4c:29:12:76:48:ee:46:3f:d5: eb:e4:53:42:4d:2d:aa:45:e6:72:5d:1f:c5:2a:00:e4:9f:2a: 62:c0:92:64:08:b0:9e:7a:8f:10:98:cd:97:7a:e9:92:50:96: d6:fe:44:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6UzCEFdqDIsVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWZjYjUxMjEtNjk4OS00ZDdlLThiMzgtOTQ4N2RmZThjY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonZdJiCnn9Rr6Xe5PQNJKoisWV9G5e7FI8XF sLDdtjLSeLthKB5PmjlvrVj1N+LRwGFmRA8LNp5nH3QCW3dlNUPuHrfsp9PbjttJ hUbfLDUChSx9ik2JCVfN2DPQF6tm8btlvdx3z40dm0znQMYRCEsVhSP+8yCxNx90 TPtLe/uHSfsheevuvEjX7oZDy/RY0hQwhHImaEiOhrQ21b1fSgJx65TD4S2saSFo zGplrTF79QC4xI0qcMDZqIG0O0T0PtBZbGPV6aaxUiray6JrxL5UQuFh0u3nHkme zzDRdM+Xc0nAArAsDtcIt8Zb7l3bG/weFIeTSKDn4MYz+gCyVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNI4znqftMU8VUnF/RRcFYoi4yqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvODMyYTMwMzctNmY1OC0z MWFkLTk3ZDktMWQ1Mzc5ZGFkZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9GmaWHnEXfB6zMx86jpUTeymC0vc+0hBaMtaktV11Roh8DZVNNF7jZ Pd/AObt41EKLXSNewfarxuatiZz0iD0I5mkb8K/p761B5D02ZqyMAleRGnVLDI/P usDiqu5AC46m5XvEPpX6C5+wu6WkVE+sBac5fdgTgGm6JIzMcf0KCXnWVKPI+xpU Em8CfZMqdAz57I2NwyZQP+N4yH+p4tCGNBb3PTxVq8ygo4t9fgYEwOTnhgDq2H1h RICm8b2jSMfPhoXxsQP6c8zXwwpGCkwpEnZI7kY/1evkU0JNLapF5nJdH8UqAOSf KmLAkmQIsJ56jxCYzZd66ZJQltb+RPE= -----END CERTIFICATE-----Generated at Sun Oct 4 22:48:58 2026 by rpki-client