$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/d44e4c40-a9e7-3b68-bd9f-53ab896d6d40.roa File: d44e4c40-a9e7-3b68-bd9f-53ab896d6d40.roa (raw, json) Hash identifier: gL/KdP6hQBObHtb43DnKHm6gKH29KxJh/9PydafVs8Q= Subject key identifier: BB:53:78:A9:D9:9E:77:3D:DC:5E:43:60:C8:20:7B:37:90:B2:0E:04 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584E8D9B495F8F342B600F046E40 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/d44e4c40-a9e7-3b68-bd9f-53ab896d6d40.roa Signing time: Sun 19 Jul 2026 18:10:22 +0000 ROA not before: Sun 19 Jul 2026 18:10:22 +0000 ROA not after: Sat 17 Oct 2026 18:01:47 +0000 asID: 33442 IP address blocks: 149.23.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:9b:49:5f:8f:34:2b:60:0f:04:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Jul 19 18:10:22 2026 GMT Not After : Oct 17 18:01:47 2026 GMT Subject: CN=4f39eb20-abd2-4693-a038-214ce6057a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:f3:a7:82:d9:57:48:4d:2e:46:77:13:9b: ec:b1:e3:92:f1:47:a3:58:a8:06:2a:b0:14:e4:4b: 43:f5:5c:9f:de:90:33:3a:33:d2:15:5d:67:65:3e: 1e:7f:dd:8e:4d:fe:81:d1:0c:79:a7:2d:8d:94:f7: ca:ec:91:cc:2b:76:11:35:05:f3:99:8f:51:13:66: 3a:85:b8:6d:a1:70:c5:d2:1a:c6:5f:93:46:50:7a: 6b:b2:d9:63:2c:61:e5:2c:30:b2:86:77:5d:8f:d1: f9:37:f4:8c:29:80:08:fd:1a:85:0d:33:56:c9:d5: dc:cf:2f:8e:ee:9c:3e:f3:50:f7:8a:1a:7e:1a:70: 20:fa:61:f9:40:ab:b3:b9:56:c5:38:31:d2:73:c8: fa:0d:5f:36:32:da:dd:92:a2:f7:8d:2c:0a:fa:2e: 8c:13:d3:52:62:d0:63:95:07:a4:20:d2:2f:93:5b: c8:90:e8:28:d5:bf:c4:ce:7b:28:36:97:eb:0a:3f: 30:a3:31:1a:b3:fe:d3:29:da:ff:e3:4b:4f:1f:36: e4:76:95:b3:2b:e7:ee:fd:8a:77:47:25:70:b5:f3: 2f:bb:dd:38:6a:54:41:a5:79:2c:35:1b:d7:02:0f: 68:39:76:c9:7d:91:0c:22:ba:cf:fe:d2:8c:19:46: 20:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:53:78:A9:D9:9E:77:3D:DC:5E:43:60:C8:20:7B:37:90:B2:0E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/d44e4c40-a9e7-3b68-bd9f-53ab896d6d40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:dc:7b:71:be:30:72:27:a0:22:05:c6:bd:59:45:fd:83:49: fa:b1:e2:41:32:f4:85:7b:e9:32:07:66:62:57:0b:ab:6b:37: e7:08:eb:50:4d:80:08:b2:05:e6:22:7c:bb:23:4d:03:8a:9f: 10:19:75:db:bf:bd:4e:e6:5e:c8:32:72:a6:3f:4a:00:e2:d9: 1e:e5:f5:2e:78:ec:d0:93:7c:e1:0b:dc:a0:91:6f:00:a7:21: 9f:11:9b:b8:d1:7a:d8:98:3b:ac:30:94:83:43:38:4d:7c:bb: 7a:74:1e:01:22:94:6b:8d:f5:c8:2c:05:12:ab:e2:47:04:aa: 31:42:fc:63:4d:fc:9d:2e:6f:b0:59:93:29:92:30:04:97:f9: 38:91:77:ec:9d:9f:1c:d8:f6:a0:85:70:ae:c7:21:6d:bd:8e: 1d:e1:3e:31:39:a4:ae:61:0b:e7:ed:77:8b:fa:94:99:b5:39: 7c:f8:09:f0:4a:de:7b:78:7b:6a:e1:e2:df:c6:91:3d:e8:b7: 55:40:66:64:1d:d3:84:4c:bb:de:53:42:7c:4f:db:08:a6:7e: c7:85:85:e5:cd:a9:f6:19:5d:be:7a:fc:64:27:eb:11:a8:c6: 2f:93:0c:b6:6a:7c:ca:49:b1:a5:f3:7a:8d:56:6c:38:36:c4: 60:e2:86:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Nm0lfjzQrYA8EbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDcxOTE4MTAyMloXDTI2MTAxNzE4MDE0N1owLzEtMCsGA1UEAxMk NGYzOWViMjAtYWJkMi00NjkzLWEwMzgtMjE0Y2U2MDU3YTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUrzp4LZV0hNLkZ3E5vsseOS8UejWKgGKrAU 5EtD9Vyf3pAzOjPSFV1nZT4ef92OTf6B0Qx5py2NlPfK7JHMK3YRNQXzmY9RE2Y6 hbhtoXDF0hrGX5NGUHprstljLGHlLDCyhnddj9H5N/SMKYAI/RqFDTNWydXczy+O 7pw+81D3ihp+GnAg+mH5QKuzuVbFODHSc8j6DV82MtrdkqL3jSwK+i6ME9NSYtBj lQekINIvk1vIkOgo1b/EznsoNpfrCj8wozEas/7TKdr/40tPHzbkdpWzK+fu/Yp3 RyVwtfMvu904alRBpXksNRvXAg9oOXbJfZEMIrrP/tKMGUYgFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtTeKnZnnc93F5DYMggezeQsg4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvZDQ0ZTRjNDAtYTllNy0z YjY4LWJkOWYtNTNhYjg5NmQ2ZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRdyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHce3G+MHInoCIFxr1ZRf2DSfqx4kEy9IV76TIHZmJXC6trN+cI61BN gAiyBeYifLsjTQOKnxAZddu/vU7mXsgycqY/SgDi2R7l9S547NCTfOEL3KCRbwCn IZ8Rm7jRetiYO6wwlINDOE18u3p0HgEilGuN9cgsBRKr4kcEqjFC/GNN/J0ub7BZ kymSMASX+TiRd+ydnxzY9qCFcK7HIW29jh3hPjE5pK5hC+ftd4v6lJm1OXz4CfBK 3nt4e2rh4t/GkT3ot1VAZmQd04RMu95TQnxP2wimfseFheXNqfYZXb56/GQn6xGo xi+TDLZqfMpJsaXzeo1WbDg2xGDihso= -----END CERTIFICATE-----Generated at Fri Jul 24 04:59:56 2026 by rpki-client