$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c3dc1e54-174b-3ff1-b750-2d475e420129.roa File: c3dc1e54-174b-3ff1-b750-2d475e420129.roa (raw, json) Hash identifier: BzegeIronHt0Y2U0EZH/Bz93XpVccRN2SMejO1q4LEQ= Subject key identifier: 77:0E:02:65:8D:A9:5A:EB:93:53:61:C2:A4:BB:6A:0D:0C:E6:7B:F2 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F506D67B4C4E8DE9FA9B43200 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c3dc1e54-174b-3ff1-b750-2d475e420129.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 33442 IP address blocks: 149.23.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:67:b4:c4:e8:de:9f:a9:b4:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=0de818f1-9d59-4950-a577-fe1460350893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:62:74:95:98:bf:68:7b:54:6d:97:1a:57:04: 2e:82:0c:0e:da:6d:e1:08:c7:ae:96:87:75:36:2c: 71:3e:60:37:d1:65:08:83:9d:0a:e9:a4:75:b9:52: 7a:ff:ba:88:fe:56:11:c7:6e:ba:95:9d:be:22:c0: de:6d:be:a6:0f:52:28:45:cc:00:9b:08:fd:b0:3c: 98:14:54:19:0d:9c:ae:34:4e:d5:06:f8:be:a5:90: 9f:cc:eb:2a:ab:19:af:6a:1e:23:89:81:1c:67:62: 7f:d3:1b:f5:da:5c:f2:be:b0:a3:cd:f4:48:cb:5d: 1b:20:75:11:9b:d1:41:8c:dd:8b:b9:b8:40:83:bd: d5:dd:b4:fc:2d:53:0d:6c:ab:98:35:48:31:eb:6e: 24:61:ad:76:53:d6:1a:2c:70:ee:e4:8a:a4:ef:81: 4c:0a:79:8c:d6:47:56:5c:cb:38:18:29:b8:56:ec: 7d:21:81:bb:61:ee:31:4c:98:da:35:84:b5:80:d2: c0:26:0b:f0:a3:23:5f:ee:e7:20:5f:58:5d:6d:ce: 63:4d:ff:0e:a5:86:2d:3b:6f:51:22:7f:89:94:33: b5:e4:6d:33:70:05:3e:c6:a7:c1:d0:04:c4:7d:6c: 39:8a:30:8f:47:55:90:51:1d:05:fa:6e:00:1a:f0: fd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0E:02:65:8D:A9:5A:EB:93:53:61:C2:A4:BB:6A:0D:0C:E6:7B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c3dc1e54-174b-3ff1-b750-2d475e420129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:49:3d:8a:54:a2:ba:58:54:98:21:d9:35:63:f2:98:4e:57: 9f:fb:4d:a8:da:e7:2a:14:a6:42:ce:30:67:5a:2f:7d:67:83: 65:a8:0b:fc:2e:97:26:99:40:9a:0d:bf:78:dd:46:43:cc:95: e4:86:01:0e:06:d4:52:2d:ce:1f:a7:96:53:5b:50:75:e0:3f: 9f:52:57:19:38:7c:59:43:b9:b9:d7:e8:7e:09:78:84:64:f4: 45:fe:27:15:99:1f:d9:d4:c4:38:04:f9:12:a1:0f:83:64:59: ed:9f:79:8c:b2:6f:06:75:b5:3a:ef:d0:9f:c9:20:13:b3:15: 88:92:cb:b8:46:aa:1c:b5:5f:f3:7d:d8:01:46:74:73:99:9c: 7a:61:6a:f9:db:ee:d6:9c:b2:7d:ec:1e:4b:8e:c5:38:b4:3d: 99:cf:d5:15:a5:59:52:a6:88:2e:77:60:2c:05:e0:ca:7b:ee: 51:59:ce:43:82:07:76:10:36:63:97:16:d4:c2:ce:6c:a0:82: 3c:73:a7:37:6c:8a:95:16:f0:ab:89:ce:8d:9c:6c:97:37:17: cc:9f:d8:d4:44:6e:21:e7:93:af:97:51:0a:16:e5:53:52:ce: 80:db:ee:83:ee:66:02:6c:23:b5:af:36:f3:4d:aa:05:87:f2: b0:9d:79:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWe0xOjen6m0MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MGRlODE4ZjEtOWQ1OS00OTUwLWE1NzctZmUxNDYwMzUwODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2J0lZi/aHtUbZcaVwQuggwO2m3hCMeulod1 NixxPmA30WUIg50K6aR1uVJ6/7qI/lYRx266lZ2+IsDebb6mD1IoRcwAmwj9sDyY FFQZDZyuNE7VBvi+pZCfzOsqqxmvah4jiYEcZ2J/0xv12lzyvrCjzfRIy10bIHUR m9FBjN2LubhAg73V3bT8LVMNbKuYNUgx624kYa12U9YaLHDu5Iqk74FMCnmM1kdW XMs4GCm4Vux9IYG7Ye4xTJjaNYS1gNLAJgvwoyNf7ucgX1hdbc5jTf8OpYYtO29R In+JlDO15G0zcAU+xqfB0ATEfWw5ijCPR1WQUR0F+m4AGvD99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcOAmWNqVrrk1NhwqS7ag0M5nvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvYzNkYzFlNTQtMTc0Yi0z ZmYxLWI3NTAtMmQ0NzVlNDIwMTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJJPYpUorpYVJgh2TVj8phOV5/7Taja5yoUpkLOMGdaL31ng2WoC/wu lyaZQJoNv3jdRkPMleSGAQ4G1FItzh+nllNbUHXgP59SVxk4fFlDubnX6H4JeIRk 9EX+JxWZH9nUxDgE+RKhD4NkWe2feYyybwZ1tTrv0J/JIBOzFYiSy7hGqhy1X/N9 2AFGdHOZnHphavnb7tacsn3sHkuOxTi0PZnP1RWlWVKmiC53YCwF4Mp77lFZzkOC B3YQNmOXFtTCzmyggjxzpzdsipUW8KuJzo2cbJc3F8yf2NREbiHnk6+XUQoW5VNS zoDb7oPuZgJsI7WvNvNNqgWH8rCdeSE= -----END CERTIFICATE-----Generated at Tue Sep 29 00:59:13 2026 by rpki-client