$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa File: f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa (raw, json) Hash identifier: HXx5R+Q6Fh+M0xEirZEyZYRYFR0nNQXchbe3ysehYJk= Subject key identifier: B9:0A:DF:65:78:E7:5C:98:46:B1:FE:69:31:6B:C0:F8:A4:AF:CF:F9 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F23C25D8F63D996BD63689480 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 33442 IP address blocks: 149.23.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5d:8f:63:d9:96:bd:63:68:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=ec0ae1b3-aacb-47ac-8823-162a3bfedb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:d5:ff:12:5a:83:c6:f2:fa:48:c7:6d:1d: 38:8b:b8:d0:b7:49:59:ed:87:88:af:5a:0f:1d:dd: ec:a8:69:45:fc:7b:5f:87:37:f4:81:cf:85:2d:1b: 41:40:db:c3:85:65:bb:e8:ea:79:87:5f:75:61:81: 3a:5f:4c:25:cc:f4:10:c6:95:94:9d:12:8e:16:51: b7:f0:d7:fd:5d:41:bc:1b:72:7f:2b:52:97:2c:26: fc:6c:66:91:35:46:71:ee:ee:da:0a:ed:76:c2:38: 1d:0b:b9:c1:bb:40:61:4c:c2:0e:ca:ee:da:97:eb: d5:b2:f6:d5:04:19:54:57:28:65:99:7d:8c:d8:01: 06:d7:45:e1:3c:52:d5:52:b6:b4:c4:8e:55:3c:af: 0d:97:03:a2:26:f4:b6:7d:e4:be:f2:9c:1b:31:f3: 77:f8:a9:31:92:f9:2a:7d:79:e4:cc:64:36:ed:13: 05:d7:10:18:5b:cd:60:83:96:26:b5:74:62:26:16: 2b:1f:2f:47:7a:a8:08:c5:95:35:97:ae:10:e9:66: 29:e2:1c:6f:5f:8c:d0:a0:76:8b:21:12:ec:26:52: 15:75:29:73:ad:92:48:ce:b5:f8:a5:d2:98:fe:73: cc:74:cc:50:46:bc:3e:d2:3e:33:86:45:9c:f7:3d: c2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0A:DF:65:78:E7:5C:98:46:B1:FE:69:31:6B:C0:F8:A4:AF:CF:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:42:0c:9e:46:5a:e6:17:2a:2e:ad:42:55:fd:af:ee:9b:2d: 0b:6b:e8:e1:96:40:4e:af:fa:1e:da:bb:8c:2f:b0:bf:2b:1a: 3e:30:86:da:60:6a:13:53:a3:ff:00:18:de:93:7e:c1:ef:71: d0:8e:0c:3d:3a:cb:1b:f3:fc:8a:3f:56:ae:51:d4:d4:15:7f: 97:47:19:65:27:fe:d4:f8:dc:22:ca:21:ba:53:83:0b:23:aa: 7f:06:bb:ac:25:27:07:54:3f:bd:5b:ac:4f:d0:8e:94:52:90: b6:24:99:a1:ed:26:19:3c:5e:bb:76:dd:23:0f:e1:1a:ae:ed: b7:e2:fb:9f:ac:7e:70:06:8c:f7:a6:80:4b:2d:22:2b:0f:1a: f3:27:b5:01:8b:8f:a3:0e:32:70:91:bf:aa:59:44:b7:f2:a0: c8:42:45:2d:88:b8:9c:5f:86:a4:8e:d0:4f:d4:33:aa:84:82: 9a:4a:89:43:17:51:0d:9a:9d:7c:88:91:ab:e2:d1:70:13:56: 3f:15:07:12:64:f0:e9:9d:6a:ec:82:86:2b:47:64:14:71:5d: 59:d6:a8:7f:fe:e0:67:4a:5f:5f:93:5c:93:80:42:3b:de:77: 49:b9:07:ca:94:f8:d6:41:1e:40:52:a6:b5:06:39:66:e2:2b: 1e:d7:55:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwl2PY9mWvWNolIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZWMwYWUxYjMtYWFjYi00N2FjLTg4MjMtMTYyYTNiZmVkYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoezV/xJag8by+kjHbR04i7jQt0lZ7YeIr1oP Hd3sqGlF/Htfhzf0gc+FLRtBQNvDhWW76Op5h191YYE6X0wlzPQQxpWUnRKOFlG3 8Nf9XUG8G3J/K1KXLCb8bGaRNUZx7u7aCu12wjgdC7nBu0BhTMIOyu7al+vVsvbV BBlUVyhlmX2M2AEG10XhPFLVUra0xI5VPK8NlwOiJvS2feS+8pwbMfN3+Kkxkvkq fXnkzGQ27RMF1xAYW81gg5YmtXRiJhYrHy9HeqgIxZU1l64Q6WYp4hxvX4zQoHaL IRLsJlIVdSlzrZJIzrX4pdKY/nPMdMxQRrw+0j4zhkWc9z3CZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkK32V451yYRrH+aTFrwPikr8/5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvZjJkYzhhYzMtMDYwYS0z N2JhLWI2YzktNzg4MjdmY2E1OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRd+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9CDJ5GWuYXKi6tQlX9r+6bLQtr6OGWQE6v+h7au4wvsL8rGj4whtpg ahNTo/8AGN6TfsHvcdCODD06yxvz/Io/Vq5R1NQVf5dHGWUn/tT43CLKIbpTgwsj qn8Gu6wlJwdUP71brE/QjpRSkLYkmaHtJhk8Xrt23SMP4Rqu7bfi+5+sfnAGjPem gEstIisPGvMntQGLj6MOMnCRv6pZRLfyoMhCRS2IuJxfhqSO0E/UM6qEgppKiUMX UQ2anXyIkavi0XATVj8VBxJk8OmdauyChitHZBRxXVnWqH/+4GdKX1+TXJOAQjve d0m5B8qU+NZBHkBSprUGOWbiKx7XVRs= -----END CERTIFICATE-----Generated at Mon Sep 28 12:20:28 2026 by rpki-client