$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/0c3c86c0-8fa4-3574-af2e-fdc31ca470f2.roa File: 0c3c86c0-8fa4-3574-af2e-fdc31ca470f2.roa (raw, json) Hash identifier: tXwiL62quLjsVHSqOU83T407WShj3SUs+Ygxauvzl80= Subject key identifier: 74:2F:B4:CC:01:06:73:C5:E7:A9:07:63:4D:FD:89:1C:FD:BA:25:71 Certificate issuer: /CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744 Certificate serial: 010D0C9F4328584F68281004233E53E420253580 Authority key identifier: EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/0c3c86c0-8fa4-3574-af2e-fdc31ca470f2.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 54624 IP address blocks: 149.24.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:10:04:23:3e:53:e4:20:25:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=fd4acefa-5a80-4e9d-be3f-87b6a90af8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:5e:15:31:f3:19:d1:6d:51:17:e4:8b:1d: a9:64:7e:f4:cd:d7:45:c8:8e:2a:43:c0:21:65:bf: 39:39:23:07:2a:95:62:4d:7c:05:01:50:0c:6b:b0: ae:dc:cf:a3:38:47:a3:59:11:d4:7a:4b:c9:91:9b: ef:94:5d:57:04:31:74:f7:a3:50:ba:83:e7:db:2d: 62:19:b7:03:54:62:57:a9:3c:e7:22:5a:00:32:c3: 58:51:35:3e:ca:c3:3e:c6:97:fa:94:57:8f:44:f5: 6c:1e:31:0e:4f:b1:38:cd:1b:2c:ee:f3:67:ff:c7: 7a:e0:d1:db:ed:be:80:69:01:cb:f5:e9:6a:7a:c6: 10:64:9f:7d:aa:b8:05:3f:5f:8a:eb:e3:6b:b7:da: db:97:d2:a3:d0:c5:03:85:0f:96:e3:80:40:99:e3: c2:5c:a4:48:5a:8d:ee:38:dc:62:9d:54:9d:e7:03: 34:14:90:be:7b:78:ce:96:02:17:62:4e:69:6b:7b: 9e:82:52:c4:00:c2:5e:51:b1:cd:e9:1b:0c:f7:15: 50:b4:3f:d5:38:26:12:e4:82:78:0e:1e:8d:29:df: 8b:42:ec:e6:51:77:a5:fd:63:e3:21:56:ed:17:6a: 27:54:ea:bb:7d:70:82:8b:aa:1c:db:de:c7:a7:24: 2b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2F:B4:CC:01:06:73:C5:E7:A9:07:63:4D:FD:89:1C:FD:BA:25:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/0c3c86c0-8fa4-3574-af2e-fdc31ca470f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl X509v3 Authority Key Identifier: keyid:EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer sbgp-ipAddrBlock: critical IPv4: 149.24.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:40:a9:5e:33:6a:0a:42:be:b7:91:a9:f8:70:2e:92:59:92: 9d:34:76:ac:03:3f:02:ac:2c:54:18:d5:9d:44:10:14:75:f6: 2f:ed:7f:4f:4e:c4:a3:d7:d2:4b:7a:e1:be:61:07:65:72:2d: 46:b8:f7:03:61:51:fc:37:05:35:ca:69:d7:15:ca:7c:0b:16: b2:34:9b:65:df:c2:c7:d0:70:ab:00:b7:67:b4:db:83:66:69: fb:13:30:c0:b5:a8:18:34:12:ea:37:11:c9:1a:c4:d6:d0:f1: 28:0b:13:20:df:be:12:7d:10:13:e8:d0:f8:be:d9:51:f9:67: 15:ea:50:06:55:27:c6:a6:02:8b:9a:ec:e1:ff:83:95:33:22: 62:b4:23:ff:0b:f9:c1:b1:e7:65:f0:1d:7e:26:c4:c7:c6:4c: 53:7b:2e:7a:e4:7e:71:ec:55:cf:a4:9f:04:09:d4:3d:ba:09: aa:0b:b5:d1:9a:70:24:0c:a8:40:2c:e1:aa:f5:93:69:82:44: 52:fa:07:c1:0d:2d:b7:e1:2c:10:fe:24:27:ea:af:b5:71:19: c8:cf:ea:41:87:95:1e:d7:d4:e1:f9:72:09:73:42:1a:70:bb: d6:15:28:82:c5:5d:18:86:28:55:8d:a7:71:5e:29:8b:0a:86: 96:77:f2:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKBAEIz5T5CAlNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc2OGYyYzEtZjU1Yi00YWU4LWE0NGMtYjliNjA2MmQz NzQ0MB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk ZmQ0YWNlZmEtNWE4MC00ZTlkLWJlM2YtODdiNmE5MGFmOGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpNeFTHzGdFtURfkix2pZH70zddFyI4qQ8Ah Zb85OSMHKpViTXwFAVAMa7Cu3M+jOEejWRHUekvJkZvvlF1XBDF096NQuoPn2y1i GbcDVGJXqTznIloAMsNYUTU+ysM+xpf6lFePRPVsHjEOT7E4zRss7vNn/8d64NHb 7b6AaQHL9elqesYQZJ99qrgFP1+K6+Nrt9rbl9Kj0MUDhQ+W44BAmePCXKRIWo3u ONxinVSd5wM0FJC+e3jOlgIXYk5pa3ueglLEAMJeUbHN6RsM9xVQtD/VOCYS5IJ4 Dh6NKd+LQuzmUXel/WPjIVbtF2onVOq7fXCCi6oc297HpyQrsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQvtMwBBnPF56kHY039iRz9uiVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4 ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2MDYyZDM3NDQvMGMzYzg2YzAtOGZhNC0z NTc0LWFmMmUtZmRjMzFjYTQ3MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzc2OGYyYzEtZjU1Yi00YWU4LWE0 NGMtYjliNjA2MmQzNzQ0L2M3NjhmMmMxLWY1NWItNGFlOC1hNDRjLWI5YjYwNjJk Mzc0NC5jcmwwHwYDVR0jBBgwFoAU7k9Fo7URssO3gzYRQV66lfbLbZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2 MDYyZDM3NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5AqV4zagpCvreRqfhwLpJZkp00dqwDPwKsLFQY1Z1EEBR19i/tf09O xKPX0kt64b5hB2VyLUa49wNhUfw3BTXKadcVynwLFrI0m2XfwsfQcKsAt2e024Nm afsTMMC1qBg0Euo3EckaxNbQ8SgLEyDfvhJ9EBPo0Pi+2VH5ZxXqUAZVJ8amAoua 7OH/g5UzImK0I/8L+cGx52XwHX4mxMfGTFN7LnrkfnHsVc+knwQJ1D26CaoLtdGa cCQMqEAs4ar1k2mCRFL6B8ENLbfhLBD+JCfqr7VxGcjP6kGHlR7X1OH5cglzQhpw u9YVKILFXRiGKFWNp3FeKYsKhpZ38sE= -----END CERTIFICATE-----Generated at Mon Oct 12 19:09:34 2026 by rpki-client