$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5791133b-6a13-3286-80bc-99eabe0312f7.roa File: 5791133b-6a13-3286-80bc-99eabe0312f7.roa (raw, json) Hash identifier: zgJn8dEOVkhUaMGy1KRl02gh7zlzp/eebGzPOoR6bTs= Subject key identifier: 3E:42:3C:36:68:41:87:A2:82:F5:64:7F:7D:5C:DD:E8:F5:A9:06:4C Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D2BDA0ACF2F79198F19BDEBC0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5791133b-6a13-3286-80bc-99eabe0312f7.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 396253 IP address blocks: 149.19.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:0a:cf:2f:79:19:8f:19:bd:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=48f4b74e-2f97-4da5-9f13-68f0fe92280d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:bb:2f:b7:49:6e:03:b1:ef:8c:3f:11:7d: c0:79:b3:fa:51:f4:66:8e:1a:40:ba:ef:61:20:60: 3d:e6:f1:eb:43:4e:21:32:b7:dc:3e:01:a7:40:4f: d5:04:1b:5e:71:80:ef:52:c5:04:83:8f:e0:a0:31: 56:f6:f1:d4:8a:1b:e9:53:a9:09:74:7e:58:ce:60: 68:97:5f:1e:5a:0a:5c:2b:2f:19:42:d1:bb:90:6d: 1d:b5:b0:c3:1d:eb:6e:ee:92:ae:1a:74:d6:0b:cf: 53:a6:1d:c2:f1:b0:db:15:a0:7a:92:5a:dc:c0:25: 1b:06:ae:db:40:0b:20:6a:9b:a3:cc:80:20:41:0e: fd:ab:23:61:22:04:76:be:c4:b6:19:56:bd:85:85: 20:73:60:bb:d5:99:19:4d:82:11:02:18:1d:57:bf: 65:8a:3a:45:e8:53:88:b8:2d:8b:eb:b5:ee:83:29: 28:92:a8:54:f4:c0:0c:d9:66:ac:d1:2c:b6:7f:33: d9:1b:b1:8c:17:02:b8:a6:85:81:b4:3c:10:be:26: 66:10:9d:72:5d:b4:a4:93:81:01:73:49:04:8e:d2: de:88:e8:5d:60:02:10:bd:6f:c3:74:6e:91:d3:b9: 26:92:50:ea:00:4c:80:bd:98:82:ce:61:97:66:9c: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:3C:36:68:41:87:A2:82:F5:64:7F:7D:5C:DD:E8:F5:A9:06:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5791133b-6a13-3286-80bc-99eabe0312f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c6:f1:1f:79:9f:9f:e5:59:87:47:19:0b:e0:5d:a8:26:2d: e4:d2:32:77:f2:ec:59:70:fb:81:2c:4f:3a:bb:75:dd:1c:fb: 57:3b:c5:54:a2:98:0d:85:a1:49:d9:ed:d6:90:cd:18:f9:9b: ae:23:1a:56:40:79:d2:cd:21:83:57:a2:ef:c8:91:c8:0c:6f: f8:09:5e:be:77:43:7b:39:97:dd:4c:c7:5c:33:ea:f4:db:22: e2:a8:8f:82:85:c2:70:71:23:6b:25:f4:0c:9b:b5:85:4c:32: 6c:d6:c0:22:c2:51:ac:b9:d9:f3:15:e9:fb:31:72:57:ec:85: 91:db:18:20:56:3b:7e:d1:45:69:8d:92:e8:b7:ee:45:86:20: c8:ba:06:77:76:a2:d1:04:11:76:6d:cc:43:98:6e:65:be:ba: 28:c3:f8:2c:6d:a1:0b:a2:79:ec:10:2f:d9:b7:cd:44:d3:ae: 3f:44:95:e9:94:62:f0:b2:d5:a6:1e:a9:56:e0:65:1a:34:75: c2:55:50:98:2a:49:7b:e6:34:a5:84:7f:41:20:d5:46:9a:33: e6:f0:4a:c2:15:aa:fb:18:2b:24:58:3a:5f:00:9c:fe:ab:32: 0d:da:28:b0:68:4b:89:04:cf:6f:75:c4:1f:ac:2a:89:28:63: 6c:65:90:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2grPL3kZjxm968AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NDhmNGI3NGUtMmY5Ny00ZGE1LTlmMTMtNjhmMGZlOTIyODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUS7L7dJbgOx74w/EX3AebP6UfRmjhpAuu9h IGA95vHrQ04hMrfcPgGnQE/VBBtecYDvUsUEg4/goDFW9vHUihvpU6kJdH5YzmBo l18eWgpcKy8ZQtG7kG0dtbDDHetu7pKuGnTWC89Tph3C8bDbFaB6klrcwCUbBq7b QAsgapujzIAgQQ79qyNhIgR2vsS2GVa9hYUgc2C71ZkZTYIRAhgdV79lijpF6FOI uC2L67XugykokqhU9MAM2Was0Sy2fzPZG7GMFwK4poWBtDwQviZmEJ1yXbSkk4EB c0kEjtLeiOhdYAIQvW/DdG6R07kmklDqAEyAvZiCzmGXZpyBEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5CPDZoQYeigvVkf31c3ej1qQZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNTc5MTEzM2ItNmExMy0z Mjg2LTgwYmMtOTllYWJlMDMxMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvG8R95n5/lWYdHGQvgXagmLeTSMnfy7Flw+4EsTzq7dd0c+1c7xVSi mA2FoUnZ7daQzRj5m64jGlZAedLNIYNXou/IkcgMb/gJXr53Q3s5l91Mx1wz6vTb IuKoj4KFwnBxI2sl9AybtYVMMmzWwCLCUay52fMV6fsxclfshZHbGCBWO37RRWmN kui37kWGIMi6Bnd2otEEEXZtzEOYbmW+uijD+CxtoQuieewQL9m3zUTTrj9ElemU YvCy1aYeqVbgZRo0dcJVUJgqSXvmNKWEf0Eg1UaaM+bwSsIVqvsYKyRYOl8AnP6r Mg3aKLBoS4kEz291xB+sKokoY2xlkLA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:28 2026 by rpki-client