$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0f5daa42-73de-3d0d-9557-b8b7ae6547c1.roa File: 0f5daa42-73de-3d0d-9557-b8b7ae6547c1.roa (raw, json) Hash identifier: uyTMX3P3nka8URb3hTo/OufeoTt7/Q+RsPKLIMj70m4= Subject key identifier: 1E:13:C3:60:60:D7:88:19:B9:B9:31:DB:81:C5:40:FD:BD:27:B6:01 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D2BDA0DE02F260400A1B1A880 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0f5daa42-73de-3d0d-9557-b8b7ae6547c1.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396253 IP address blocks: 149.19.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:0d:e0:2f:26:04:00:a1:b1:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=f6ec64f2-3645-4215-84af-c31cb644b19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:5c:76:29:83:e5:ec:84:4e:8e:81:9f:ab: ad:c8:f8:eb:47:f1:8d:bb:05:4d:af:99:77:18:25: 4e:71:00:72:78:aa:dc:c0:c6:0c:a2:e6:87:b0:01: 0c:ca:db:15:53:2d:81:7a:82:a7:a0:01:9b:8a:33: d3:87:72:df:e4:ad:4a:a6:59:bc:ac:63:e3:72:a4: e9:f0:5e:c4:a0:bf:a9:97:49:85:ca:4b:bc:1d:47: 7c:9f:fe:7a:9c:00:79:06:67:17:7d:e7:23:51:7a: 80:e2:d1:80:de:4f:78:6e:0a:f0:29:40:94:fd:3f: 3a:90:9a:86:91:93:c2:25:2c:c5:89:ed:f6:61:f3: 0e:d1:8b:7c:3d:7c:de:32:1d:c7:eb:88:87:6d:0d: 53:96:17:4a:b4:ad:94:ab:ab:90:6b:75:50:d3:f7: 21:ba:53:46:c1:1e:2d:23:47:06:7f:a0:1b:c4:85: 23:26:a6:1b:8e:d0:1d:b3:b0:7a:2a:95:a0:af:36: 1c:38:ea:2a:10:7b:bb:76:0b:95:bd:4e:35:d9:c9: cf:e5:89:b5:b7:4f:64:da:b1:99:5d:6b:3f:e1:d7: 5b:67:bf:b0:38:a3:f8:06:4c:5a:af:d7:60:ca:5f: 90:46:79:86:52:86:9f:72:12:11:ae:2a:ba:24:80: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:13:C3:60:60:D7:88:19:B9:B9:31:DB:81:C5:40:FD:BD:27:B6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0f5daa42-73de-3d0d-9557-b8b7ae6547c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7c:c3:b8:41:e7:20:7e:a6:a7:83:f8:56:86:af:29:23:e8: 78:30:4e:33:ef:bb:68:dc:13:64:8c:99:59:fe:68:97:c3:7a: 95:03:dd:23:4a:db:bb:16:58:99:a1:57:2e:1e:ca:c6:c6:6a: 8e:db:40:f0:61:43:af:c8:dd:e6:5c:ef:3a:bf:ea:ea:40:f4: 38:8f:99:34:8c:ba:8a:3b:cc:3f:3e:85:b7:38:c0:20:fb:8c: 8d:7b:e5:e2:27:28:ca:42:51:b7:fd:0c:95:61:2b:6b:26:d7: de:94:8c:11:6e:5b:32:e4:c8:19:f1:26:72:2f:ef:4c:e5:42: d5:34:e7:03:06:b4:0b:9e:b1:59:53:93:73:63:73:6e:03:cc: 47:70:da:3b:f6:61:83:28:d1:f7:ae:c5:06:58:0b:08:40:67: 2a:ce:6a:59:8d:11:dd:12:a6:d9:a8:48:82:60:29:93:9c:b0: d2:8f:28:0c:ac:87:19:e1:3a:df:ba:72:ef:1f:d0:9d:d8:e1: cc:4d:00:b1:19:03:37:83:c8:71:2b:7a:39:e1:fa:ab:97:b3: 23:69:e0:1c:e6:d6:ec:a7:47:9e:8d:56:f8:a1:1f:24:b1:78: 4c:b5:ba:1d:f7:49:0c:2b:58:47:82:0c:a4:9b:69:65:ac:f6: cf:63:47:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2g3gLyYEAKGxqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZjZlYzY0ZjItMzY0NS00MjE1LTg0YWYtYzMxY2I2NDRiMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLBcdimD5eyETo6Bn6utyPjrR/GNuwVNr5l3 GCVOcQByeKrcwMYMouaHsAEMytsVUy2BeoKnoAGbijPTh3Lf5K1Kplm8rGPjcqTp 8F7EoL+pl0mFyku8HUd8n/56nAB5BmcXfecjUXqA4tGA3k94bgrwKUCU/T86kJqG kZPCJSzFie32YfMO0Yt8PXzeMh3H64iHbQ1TlhdKtK2Uq6uQa3VQ0/chulNGwR4t I0cGf6AbxIUjJqYbjtAds7B6KpWgrzYcOOoqEHu7dguVvU412cnP5Ym1t09k2rGZ XWs/4ddbZ7+wOKP4Bkxar9dgyl+QRnmGUoafchIRriq6JID0kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4Tw2Bg14gZubkx24HFQP29J7YBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGY1ZGFhNDItNzNkZS0z ZDBkLTk1NTctYjhiN2FlNjU0N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx8w7hB5yB+pqeD+FaGrykj6HgwTjPvu2jcE2SMmVn+aJfDepUD3SNK 27sWWJmhVy4eysbGao7bQPBhQ6/I3eZc7zq/6upA9DiPmTSMuoo7zD8+hbc4wCD7 jI175eInKMpCUbf9DJVhK2sm196UjBFuWzLkyBnxJnIv70zlQtU05wMGtAuesVlT k3Njc24DzEdw2jv2YYMo0feuxQZYCwhAZyrOalmNEd0SptmoSIJgKZOcsNKPKAys hxnhOt+6cu8f0J3Y4cxNALEZAzeDyHErejnh+quXsyNp4Bzm1uynR56NVvihHySx eEy1uh33SQwrWEeCDKSbaWWs9s9jR2Q= -----END CERTIFICATE-----Generated at Thu Mar 26 21:07:08 2026 by rpki-client