$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/01077a74-6d92-30a1-9ea3-cb72af5bfba2.roa File: 01077a74-6d92-30a1-9ea3-cb72af5bfba2.roa (raw, json) Hash identifier: Ri2i280S9gMSkBZICWXlFfuqDT13D0cwzv2FzjaZilk= Subject key identifier: A1:F0:7F:C9:9F:A6:A3:26:28:36:BD:AF:88:EE:F3:8A:58:53:C8:B2 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D300A4A6C869E801593FEB040 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/01077a74-6d92-30a1-9ea3-cb72af5bfba2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 396253 IP address blocks: 149.19.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:4a:6c:86:9e:80:15:93:fe:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=aa1e3f98-5aa7-42d5-8509-de1afdf562ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:57:f4:f1:ca:32:2c:6a:93:d0:7f:ba:25:48: eb:81:c4:f2:ec:d9:a5:d8:fe:cc:f4:ec:65:56:d6: 6d:08:cd:b0:3c:11:8a:4c:e3:6e:82:90:81:8f:f8: 5c:da:a5:8b:fc:1d:53:0d:ca:de:7f:86:c4:fc:25: b5:b3:06:cb:2e:6f:56:7c:d3:b0:0c:5c:4e:ea:60: 4d:c5:83:41:5e:c2:3e:38:2c:7e:1c:46:16:4d:89: 8c:ca:01:f5:7e:0a:41:c2:a1:a1:22:c8:64:2b:a5: d3:36:21:22:e2:3b:62:bc:93:00:44:88:60:86:48: ff:7a:99:ac:30:8a:9c:a4:6e:fd:01:40:92:c9:f7: 34:75:01:a9:63:e1:96:bf:8e:87:52:d6:2f:93:fc: 39:3c:22:b9:d8:a0:cc:e4:ab:aa:a4:96:46:e2:30: 87:3f:63:b4:e4:f4:b9:02:83:32:3b:36:1e:56:ff: 56:a2:6a:3f:72:2d:a1:04:7d:c1:75:11:9e:9e:6c: 7a:07:74:f7:a6:3d:21:ca:f4:ac:91:15:c9:b6:4d: 94:0c:e8:97:19:d5:f6:38:f3:ef:30:ec:38:40:9f: 2b:c4:f1:b3:74:a6:43:42:8f:c5:df:99:c5:5d:87: ce:b4:3e:ab:7f:e5:13:7f:ee:7f:db:c8:47:d2:14: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F0:7F:C9:9F:A6:A3:26:28:36:BD:AF:88:EE:F3:8A:58:53:C8:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/01077a74-6d92-30a1-9ea3-cb72af5bfba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:4b:48:73:4e:40:9b:6f:42:f3:26:4b:1f:fe:7a:93:d1:60: ed:cb:49:fa:aa:af:3d:7d:93:c5:4c:25:95:65:4c:5b:39:1a: db:24:f7:49:7c:38:55:34:77:e0:22:2f:72:98:13:87:af:12: 4a:64:da:5b:de:1e:9c:fb:4e:0f:55:d2:c8:9d:26:b1:71:71: 9a:32:44:af:75:d5:71:c7:ac:d7:d8:42:64:84:af:b0:59:20: d3:e6:20:6e:e9:ab:4d:4f:51:dc:98:33:51:8f:51:d2:17:92: 66:a5:e3:c7:98:c3:f4:42:73:bf:98:1f:3b:05:6c:fe:7c:b8: 1b:e3:35:c0:7b:f7:ea:6e:fb:a4:da:35:ac:2d:7a:24:de:5e: 93:36:33:b3:a2:e6:f9:f0:90:08:64:8c:71:9a:da:03:36:90: 94:16:96:4a:ab:c4:8c:66:05:c3:e8:9b:80:6d:b0:91:86:4f: 45:3d:f4:ff:bf:8a:75:77:60:a5:64:d8:66:6c:0a:91:ce:0e: 1a:46:e8:b7:47:a5:cf:22:05:84:1e:e3:9f:5a:6c:6b:29:b1: 94:62:09:8c:9d:b1:9d:36:91:84:b6:04:c5:8c:1c:a0:eb:53: 5d:5b:20:cf:84:97:1e:07:f6:29:0c:26:4b:84:d5:53:0a:3c: 38:03:ce:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkpshp6AFZP+sEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YWExZTNmOTgtNWFhNy00MmQ1LTg1MDktZGUxYWZkZjU2MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lf08coyLGqT0H+6JUjrgcTy7Nml2P7M9Oxl VtZtCM2wPBGKTONugpCBj/hc2qWL/B1TDcref4bE/CW1swbLLm9WfNOwDFxO6mBN xYNBXsI+OCx+HEYWTYmMygH1fgpBwqGhIshkK6XTNiEi4jtivJMARIhghkj/epms MIqcpG79AUCSyfc0dQGpY+GWv46HUtYvk/w5PCK52KDM5KuqpJZG4jCHP2O05PS5 AoMyOzYeVv9Womo/ci2hBH3BdRGenmx6B3T3pj0hyvSskRXJtk2UDOiXGdX2OPPv MOw4QJ8rxPGzdKZDQo/F35nFXYfOtD6rf+UTf+5/28hH0hSeHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHwf8mfpqMmKDa9r4ju84pYU8iyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMDEwNzdhNzQtNmQ5Mi0z MGExLTllYTMtY2I3MmFmNWJmYmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtLSHNOQJtvQvMmSx/+epPRYO3LSfqqrz19k8VMJZVlTFs5Gtsk90l8 OFU0d+AiL3KYE4evEkpk2lveHpz7Tg9V0sidJrFxcZoyRK911XHHrNfYQmSEr7BZ INPmIG7pq01PUdyYM1GPUdIXkmal48eYw/RCc7+YHzsFbP58uBvjNcB79+pu+6Ta NawteiTeXpM2M7Oi5vnwkAhkjHGa2gM2kJQWlkqrxIxmBcPom4BtsJGGT0U99P+/ inV3YKVk2GZsCpHODhpG6LdHpc8iBYQe459abGspsZRiCYydsZ02kYS2BMWMHKDr U11bIM+Elx4H9ikMJkuE1VMKPDgDzgA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:46 2026 by rpki-client