$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa File: 24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa (raw, json) Hash identifier: DZ8BsgY1EBxy3bkeyUWQBBiuQya6aQT3ExmiHMv9jmM= Subject key identifier: A3:FC:A0:EC:9F:BE:49:F7:F2:56:CA:13:47:46:73:36:B1:90:37:D9 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D300A4E3F063A967E88BC2840 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 202276 IP address blocks: 149.19.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:4e:3f:06:3a:96:7e:88:bc:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=90a6c8c0-fcaa-424f-9b98-735f627ad668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:03:df:8a:86:67:ed:28:32:8f:cd:f1:70: e8:d0:17:6f:6d:e5:4a:13:66:d0:c5:ac:d3:6c:99: ff:33:61:e3:c2:91:cf:c5:54:a9:f1:98:a5:20:38: 4e:05:2e:4f:d6:16:31:cc:94:18:9d:16:8e:3f:88: f3:70:5d:34:a6:de:03:91:2d:a8:df:9b:cf:ef:58: c0:be:f5:55:1d:72:8d:a5:37:9b:2e:93:8a:8d:2a: f9:5f:a7:46:48:03:7b:9a:08:9b:9d:32:94:6c:f9: 7f:26:92:70:a1:0e:bc:5b:6c:53:4c:9f:ab:fc:77: 9e:c4:06:45:da:d6:11:9a:86:74:8e:9b:ad:58:ed: 07:38:8b:11:ff:d0:ca:a6:29:ef:e8:e7:3c:48:7f: b1:ac:3c:f5:ea:c9:9d:4a:37:c7:ad:33:ee:c3:c9: 29:5e:b7:8b:ca:58:b0:cd:41:a4:62:10:63:a5:78: e9:59:73:5f:41:90:b3:5c:9a:ba:36:05:cd:14:04: 8d:50:78:60:bc:ae:ea:05:eb:ae:4a:78:d3:aa:c1: 83:38:3f:d7:42:6a:91:bf:cf:0b:92:50:42:d3:c5: 1d:45:f8:14:49:dd:cc:62:ac:55:e7:7d:93:5b:91: a3:1c:ee:80:0e:cf:cc:df:ad:ed:ab:8e:e5:7b:04: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FC:A0:EC:9F:BE:49:F7:F2:56:CA:13:47:46:73:36:B1:90:37:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/24a68f32-daa7-3aad-8188-2e9f416cd0b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:30:21:a2:db:00:e2:e2:d0:94:38:bd:9f:d5:c3:45:8c:1e: e8:92:e8:2e:bc:42:12:8b:63:fe:e6:c1:09:79:89:53:50:04: d6:7d:3d:af:90:da:c6:61:b4:2a:08:67:77:5d:f1:45:fa:28: df:59:e2:4e:39:6c:84:22:89:0a:d0:8b:43:a9:63:90:e1:64: 68:7f:48:d2:93:4f:de:a9:16:a8:6a:4b:08:66:e9:3f:f7:e2: 80:22:7c:6a:eb:38:54:36:17:f8:bc:61:c1:39:0f:d2:53:a2: 35:ec:67:d7:14:ca:56:81:df:fa:75:f3:d1:16:15:a1:0f:a4: 90:a9:e1:59:9e:6b:5c:9c:ca:63:40:1a:97:4d:f4:54:ad:b8: 1e:9f:58:ed:69:11:64:f3:98:43:bc:bb:11:70:fc:15:c3:c2: 31:10:01:cb:08:a2:09:70:2a:1e:37:4a:f3:64:ef:6f:f9:9e: 1c:15:e9:b1:97:ed:b4:01:e4:78:5c:0f:1f:93:d5:e9:41:62: 97:c0:0e:6c:f7:74:88:d2:1f:a4:b3:49:5f:91:ca:0e:25:01: e6:06:72:d7:a4:09:3b:04:ea:83:89:ff:e6:4c:e3:bb:13:5e: 5f:2e:1e:74:8e:9e:42:f7:66:31:4c:dc:6d:cc:f6:ba:c8:87: 23:8e:7f:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCk4/BjqWfoi8KEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTBhNmM4YzAtZmNhYS00MjRmLTliOTgtNzM1ZjYyN2FkNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozYD34qGZ+0oMo/N8XDo0BdvbeVKE2bQxazT bJn/M2HjwpHPxVSp8ZilIDhOBS5P1hYxzJQYnRaOP4jzcF00pt4DkS2o35vP71jA vvVVHXKNpTebLpOKjSr5X6dGSAN7mgibnTKUbPl/JpJwoQ68W2xTTJ+r/HeexAZF 2tYRmoZ0jputWO0HOIsR/9DKpinv6Oc8SH+xrDz16smdSjfHrTPuw8kpXreLyliw zUGkYhBjpXjpWXNfQZCzXJq6NgXNFASNUHhgvK7qBeuuSnjTqsGDOD/XQmqRv88L klBC08UdRfgUSd3MYqxV532TW5GjHO6ADs/M363tq47lewTvSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP8oOyfvkn38lbKE0dGczaxkDfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMjRhNjhmMzItZGFhNy0z YWFkLTgxODgtMmU5ZjQxNmNkMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAwIaLbAOLi0JQ4vZ/Vw0WMHuiS6C68QhKLY/7mwQl5iVNQBNZ9Pa+Q 2sZhtCoIZ3dd8UX6KN9Z4k45bIQiiQrQi0OpY5DhZGh/SNKTT96pFqhqSwhm6T/3 4oAifGrrOFQ2F/i8YcE5D9JTojXsZ9cUylaB3/p189EWFaEPpJCp4Vmea1ycymNA GpdN9FStuB6fWO1pEWTzmEO8uxFw/BXDwjEQAcsIoglwKh43SvNk72/5nhwV6bGX 7bQB5HhcDx+T1elBYpfADmz3dIjSH6SzSV+Ryg4lAeYGctekCTsE6oOJ/+ZM47sT Xl8uHnSOnkL3ZjFM3G3M9rrIhyOOf6U= -----END CERTIFICATE-----Generated at Thu Mar 26 21:11:47 2026 by rpki-client