$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c3dc1e54-174b-3ff1-b750-2d475e420129.roa File: c3dc1e54-174b-3ff1-b750-2d475e420129.roa (raw, json) Hash identifier: jeeBVn4Fd1exiFqmj0/759QVHAorkV7fYzNxZmmR8oQ= Subject key identifier: 2A:3A:07:4A:17:4E:9F:F3:8D:D7:CC:F9:31:52:B7:4E:AD:B2:11:B0 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584D2BD9FE37DC76BB08B61D3540 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c3dc1e54-174b-3ff1-b750-2d475e420129.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 33442 IP address blocks: 149.23.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:d9:fe:37:dc:76:bb:08:b6:1d:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=866971d2-586c-4e2c-86e1-e41535d0cac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:43:f3:35:a1:a3:3e:46:9d:76:91:93:93:5e: 8e:46:b2:b0:e4:a1:74:b9:f3:4c:1e:ac:d8:3a:11: 49:b3:5c:61:87:26:4c:31:9e:c8:e0:e9:76:ef:8a: 33:ba:7e:d8:76:79:55:25:bc:ee:23:2f:e8:3b:cd: e8:63:57:5d:f1:9b:27:ca:ff:7e:47:54:5a:23:28: 12:a3:d3:05:14:a7:54:9a:f6:1c:6b:61:8f:c3:e5: aa:5e:fb:7e:ae:dc:10:ef:41:c9:df:7a:2e:70:0d: 25:6d:80:c0:33:2b:e9:33:4a:d9:6a:05:2c:c9:be: 50:e5:45:9c:58:df:23:09:b9:b6:28:47:93:e0:a6: 8c:91:82:f3:3d:7d:17:37:78:b6:f9:ba:66:68:63: 4f:bc:78:9a:90:a5:4e:87:a1:99:4f:94:4f:c2:74: 66:63:58:7e:7c:9b:ea:05:1b:5f:a9:e3:8d:61:32: cb:c7:49:6f:58:95:91:17:12:80:53:69:61:d1:c3: ae:12:04:e7:a7:81:30:fd:97:02:a1:c3:76:a2:6e: 6b:60:91:a4:2f:9b:94:52:8d:44:ef:fc:d0:c1:02: 01:fe:fc:c2:e8:02:c1:b9:ba:f7:6d:f0:4e:20:58: cd:c4:a9:e1:06:64:93:81:9a:a7:59:f2:b3:16:6f: 29:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3A:07:4A:17:4E:9F:F3:8D:D7:CC:F9:31:52:B7:4E:AD:B2:11:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/c3dc1e54-174b-3ff1-b750-2d475e420129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:07:98:86:20:91:c6:7c:e7:29:5a:cd:60:4c:82:4e:b7:02: 2c:b3:e2:ab:31:79:b0:28:a3:e3:a7:b3:e7:81:65:88:8a:a3: ff:35:8b:7d:aa:82:03:bd:1e:f6:3e:d6:cb:dd:6c:aa:b2:cc: 10:3f:41:56:53:fe:77:fa:f6:2a:05:65:5b:3a:e4:05:0b:b2: 7c:3b:7f:50:31:cc:2d:2c:53:8d:3c:87:a4:00:21:7d:d8:59: 80:27:b7:88:8a:48:be:30:a3:1e:bf:43:cf:7d:71:e6:70:ae: 1f:57:bf:8b:3a:46:06:32:82:60:37:d6:07:b7:59:a6:9b:51: 7d:9c:42:02:b1:93:85:98:de:4b:bc:f0:fe:f4:5e:fb:b4:0d: 9d:17:72:c6:71:65:82:78:b1:49:55:78:f3:91:52:2d:43:da: f0:54:f0:27:f3:3b:83:0e:a4:e6:0f:73:60:16:e0:bd:86:4f: 63:00:73:b2:68:6a:bc:59:10:c6:72:8e:46:c9:22:3b:21:6e: bc:e7:26:6a:3c:83:a6:28:e9:13:74:be:4d:bd:7a:d3:03:68: 7d:47:cf:79:73:2f:87:b0:1a:74:e3:5b:4d:0b:21:3c:a3:3f: f2:68:d8:1b:85:35:f1:5d:87:10:cd:2f:89:9b:51:27:fd:08: a6:ad:80:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2f433Ha7CLYdNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ODY2OTcxZDItNTg2Yy00ZTJjLTg2ZTEtZTQxNTM1ZDBjYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0PzNaGjPkaddpGTk16ORrKw5KF0ufNMHqzY OhFJs1xhhyZMMZ7I4Ol274ozun7YdnlVJbzuIy/oO83oY1dd8Zsnyv9+R1RaIygS o9MFFKdUmvYca2GPw+WqXvt+rtwQ70HJ33oucA0lbYDAMyvpM0rZagUsyb5Q5UWc WN8jCbm2KEeT4KaMkYLzPX0XN3i2+bpmaGNPvHiakKVOh6GZT5RPwnRmY1h+fJvq BRtfqeONYTLLx0lvWJWRFxKAU2lh0cOuEgTnp4Ew/ZcCocN2om5rYJGkL5uUUo1E 7/zQwQIB/vzC6ALBubr3bfBOIFjNxKnhBmSTgZqnWfKzFm8pswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo6B0oXTp/zjdfM+TFSt06tshGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvYzNkYzFlNTQtMTc0Yi0z ZmYxLWI3NTAtMmQ0NzVlNDIwMTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8HmIYgkcZ85ylazWBMgk63Aiyz4qsxebAoo+Ons+eBZYiKo/81i32q ggO9HvY+1svdbKqyzBA/QVZT/nf69ioFZVs65AULsnw7f1AxzC0sU408h6QAIX3Y WYAnt4iKSL4wox6/Q899ceZwrh9Xv4s6RgYygmA31ge3WaabUX2cQgKxk4WY3ku8 8P70Xvu0DZ0XcsZxZYJ4sUlVePORUi1D2vBU8CfzO4MOpOYPc2AW4L2GT2MAc7Jo arxZEMZyjkbJIjshbrznJmo8g6Yo6RN0vk29etMDaH1Hz3lzL4ewGnTjW00LITyj P/Jo2BuFNfFdhxDNL4mbUSf9CKatgO8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:59:48 2026 by rpki-client