$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7eb880de-5c3b-30dd-bab8-028736b7f9ff.roa File: 7eb880de-5c3b-30dd-bab8-028736b7f9ff.roa (raw, json) Hash identifier: gB1zFGdRE7fnq2nMT6bi17nqyXbL6Y9DHGkXD2jsupA= Subject key identifier: 53:2C:66:43:05:46:05:73:0B:44:AC:43:37:99:5A:02:16:57:87:15 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584DAF101A05991AC803C20D1800 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7eb880de-5c3b-30dd-bab8-028736b7f9ff.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 396253 IP address blocks: 149.19.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:1a:05:99:1a:c8:03:c2:0d:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=1e3f5d3e-1ae1-44cc-8945-a4909f0865dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:ca:91:a1:14:73:d4:c2:93:5a:4f:f4:34: 51:94:0a:2e:7d:7b:2a:7d:b3:ce:73:95:74:b1:5e: ea:8d:81:f1:f3:28:94:20:ca:dd:19:65:b6:67:81: 12:b1:64:bc:ac:8f:f4:ec:49:2d:48:10:5a:b9:be: ab:e9:43:85:f2:60:ca:62:46:2c:0e:52:1c:59:28: 6a:f6:27:8a:33:01:34:63:8c:ea:87:d7:0c:c2:30: 15:74:85:57:bd:87:62:5a:b5:96:19:ce:f5:a1:6d: 27:c6:36:5e:3a:7c:fe:23:d4:fb:8f:9f:84:ce:ab: f4:f2:51:3b:c7:47:92:72:82:7b:39:d4:a7:74:b2: 44:ec:4b:d1:1f:6e:13:9f:a9:78:eb:4d:bd:8c:f5: 2e:29:02:9f:69:61:62:be:e0:50:24:fb:3c:55:dd: 50:5e:3f:04:17:48:97:8d:22:42:4c:5e:76:ee:c8: da:f4:21:2e:41:16:67:ce:fa:1e:d3:77:32:3d:75: 18:c5:68:68:64:e4:52:10:c6:a8:db:7a:9c:dd:8e: 03:57:e8:a2:d1:55:5a:d0:b3:94:7c:85:5c:0f:81: fb:ef:57:8f:3e:81:f7:6e:38:e1:ae:bf:40:82:59: 77:61:ef:d1:8e:c9:24:0b:4c:67:f6:d7:ae:16:45: ad:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2C:66:43:05:46:05:73:0B:44:AC:43:37:99:5A:02:16:57:87:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7eb880de-5c3b-30dd-bab8-028736b7f9ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5b:65:7c:5c:1e:7e:df:34:38:9f:5d:46:8c:03:56:31:04: 83:b8:07:c6:6c:6d:9a:2b:e0:ff:21:98:6e:47:7f:44:85:72: a1:2e:27:f3:f3:fe:76:01:be:5c:3b:2b:e3:42:ec:e5:20:29: 1b:f0:51:62:9f:0f:ce:fe:1b:ef:f3:f3:0f:2c:78:2c:b6:78: 3d:ef:51:ab:03:c4:ab:b0:b9:a8:80:01:ef:e6:54:88:01:60: 07:8c:5b:14:17:fd:da:3f:72:70:85:80:09:69:63:57:92:9f: 1e:df:e8:22:ad:26:54:3c:b9:8f:27:20:54:94:d2:64:4b:c6: ac:73:2c:3c:70:44:00:32:5c:94:5b:86:89:bf:8e:22:c4:89: 5d:06:73:33:2d:8b:d4:aa:09:0b:b4:ed:e9:7d:58:44:0e:8a: 6a:21:a5:3e:dd:fc:38:77:7a:8e:c2:bb:37:8b:eb:a8:63:a3: f1:57:cf:da:ad:4f:bc:8c:0e:b8:63:cb:f6:6e:fb:66:2c:96: fe:74:d2:15:45:d3:8e:d1:18:71:a1:d0:1a:89:7f:9e:29:e9: 14:0a:1e:7f:40:4d:7b:6f:12:f6:c6:1d:80:d0:e8:d3:92:b0: 54:18:f5:ab:2a:68:df:a3:ae:4b:15:93:35:4e:f0:5a:db:c7: b6:21:bc:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEBoFmRrIA8INGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk MWUzZjVkM2UtMWFlMS00NGNjLTg5NDUtYTQ5MDlmMDg2NWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZvKkaEUc9TCk1pP9DRRlAoufXsqfbPOc5V0 sV7qjYHx8yiUIMrdGWW2Z4ESsWS8rI/07EktSBBaub6r6UOF8mDKYkYsDlIcWShq 9ieKMwE0Y4zqh9cMwjAVdIVXvYdiWrWWGc71oW0nxjZeOnz+I9T7j5+Ezqv08lE7 x0eScoJ7OdSndLJE7EvRH24Tn6l46029jPUuKQKfaWFivuBQJPs8Vd1QXj8EF0iX jSJCTF527sja9CEuQRZnzvoe03cyPXUYxWhoZORSEMao23qc3Y4DV+ii0VVa0LOU fIVcD4H771ePPoH3bjjhrr9Agll3Ye/RjskkC0xn9teuFkWtTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMsZkMFRgVzC0SsQzeZWgIWV4cVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvN2ViODgwZGUtNWMzYi0z MGRkLWJhYjgtMDI4NzM2YjdmOWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9bZXxcHn7fNDifXUaMA1YxBIO4B8ZsbZor4P8hmG5Hf0SFcqEuJ/Pz /nYBvlw7K+NC7OUgKRvwUWKfD87+G+/z8w8seCy2eD3vUasDxKuwuaiAAe/mVIgB YAeMWxQX/do/cnCFgAlpY1eSnx7f6CKtJlQ8uY8nIFSU0mRLxqxzLDxwRAAyXJRb hom/jiLEiV0GczMti9SqCQu07el9WEQOimohpT7d/Dh3eo7CuzeL66hjo/FXz9qt T7yMDrhjy/Zu+2Yslv500hVF047RGHGh0BqJf54p6RQKHn9ATXtvEvbGHYDQ6NOS sFQY9asqaN+jrksVkzVO8Frbx7YhvAs= -----END CERTIFICATE-----Generated at Wed May 13 14:41:54 2026 by rpki-client