$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/836a4a01-8197-3e4b-8aae-57d631ee820a.roa File: 836a4a01-8197-3e4b-8aae-57d631ee820a.roa (raw, json) Hash identifier: G4toItRTlO6pEFI6FgCR3EmVzsRX7xB/uIdwn9OiRQU= Subject key identifier: 16:79:AF:B8:E0:05:00:7A:81:2D:17:1F:59:61:5C:9A:EE:36:34:11 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B715CA4C2B86A0097FCE1ED40 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/836a4a01-8197-3e4b-8aae-57d631ee820a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396253 IP address blocks: 149.19.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a4:c2:b8:6a:00:97:fc:e1:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=2d5a42f1-8c04-4e6b-bd35-2d378bbc3056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:6b:38:90:a3:23:8d:73:08:30:fa:84:3a: d6:8e:a8:11:2d:81:4f:ca:2d:d4:7f:09:76:72:68: 18:b0:81:c0:24:81:cb:95:5b:15:7c:57:c5:b3:a0: ef:67:eb:72:e7:93:82:c4:60:48:11:42:b9:5f:d7: c0:8f:f9:6f:3e:8f:d0:d8:db:0b:9d:bd:7e:19:29: 2e:f2:57:56:79:c3:27:d8:d4:ca:34:02:ab:d3:a2: dd:f7:90:65:4b:28:da:71:df:e1:21:40:7b:25:bb: e1:77:87:bd:01:42:9f:1f:6f:6a:24:fc:b5:33:18: f3:0a:17:96:4c:3e:d3:cb:01:aa:1d:bd:ba:31:7f: 82:b5:93:b8:c0:83:c6:17:fd:7b:89:f0:6c:09:3b: b6:3e:79:c3:ae:54:3f:ac:2d:3f:b6:28:52:2f:00: e6:88:72:0f:4d:4b:6b:08:2c:0c:ba:c7:22:4a:73: d5:5f:75:0a:9d:57:d7:cd:12:69:b0:78:5f:41:35: d6:84:24:10:29:36:b4:6a:da:67:65:00:70:82:95: 6b:84:e7:2e:ff:b8:14:e6:8f:22:8c:9e:a3:04:6e: 53:67:d8:36:4b:cb:db:2d:e1:63:bf:7c:18:c4:e0: 95:e5:42:40:87:42:42:65:a9:82:ca:07:8f:6c:8b: 16:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:79:AF:B8:E0:05:00:7A:81:2D:17:1F:59:61:5C:9A:EE:36:34:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/836a4a01-8197-3e4b-8aae-57d631ee820a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:78:68:0b:89:b3:da:95:b7:5e:0b:43:79:59:ec:dd:e7:4e: 6e:de:cc:70:2a:f5:83:62:c6:a4:ca:67:30:40:3c:08:7a:bb: f0:c2:69:7e:76:9b:25:51:4c:26:5b:8d:50:16:95:c9:f9:c2: a6:15:a5:7c:35:f1:7a:51:61:b9:06:73:5d:53:26:de:80:92: a1:44:6d:02:19:1c:73:a5:e6:d5:18:74:c3:ba:c0:5a:4a:87: 7f:c4:4f:e0:2e:90:65:73:0a:c6:a2:08:f8:de:7e:50:90:db: 37:68:7c:b6:3e:2c:58:91:bf:8e:a0:4c:8d:77:ac:23:80:49: 51:e4:33:b8:15:e5:d9:4c:de:ae:ba:86:03:52:a6:58:f6:ba: a3:32:2c:18:91:6c:e3:a5:ce:07:49:f2:08:fd:b0:ff:c8:fe: 9b:2c:64:72:8e:50:e8:df:5b:4f:4e:22:03:22:4c:7d:11:81: 89:50:c2:32:19:ca:01:09:e6:8b:06:b6:86:ac:f5:d0:f6:82: c1:db:db:17:b8:9d:35:8c:8f:25:ac:31:ac:96:b9:8d:8c:a2: f7:55:26:f2:55:0a:19:9b:10:80:70:d9:94:6d:73:c9:0e:da: e3:6a:af:ed:a9:f1:95:13:ce:74:48:98:9d:91:98:9d:4c:bb: c9:04:8e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKTCuGoAl/zh7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MmQ1YTQyZjEtOGMwNC00ZTZiLWJkMzUtMmQzNzhiYmMzMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQlrOJCjI41zCDD6hDrWjqgRLYFPyi3Ufwl2 cmgYsIHAJIHLlVsVfFfFs6DvZ+ty55OCxGBIEUK5X9fAj/lvPo/Q2NsLnb1+GSku 8ldWecMn2NTKNAKr06Ld95BlSyjacd/hIUB7Jbvhd4e9AUKfH29qJPy1MxjzCheW TD7TywGqHb26MX+CtZO4wIPGF/17ifBsCTu2PnnDrlQ/rC0/tihSLwDmiHIPTUtr CCwMusciSnPVX3UKnVfXzRJpsHhfQTXWhCQQKTa0atpnZQBwgpVrhOcu/7gU5o8i jJ6jBG5TZ9g2S8vbLeFjv3wYxOCV5UJAh0JCZamCygePbIsW2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ5r7jgBQB6gS0XH1lhXJruNjQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODM2YTRhMDEtODE5Ny0z ZTRiLThhYWUtNTdkNjMxZWU4MjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR4aAuJs9qVt14LQ3lZ7N3nTm7ezHAq9YNixqTKZzBAPAh6u/DCaX52 myVRTCZbjVAWlcn5wqYVpXw18XpRYbkGc11TJt6AkqFEbQIZHHOl5tUYdMO6wFpK h3/ET+AukGVzCsaiCPjeflCQ2zdofLY+LFiRv46gTI13rCOASVHkM7gV5dlM3q66 hgNSplj2uqMyLBiRbOOlzgdJ8gj9sP/I/pssZHKOUOjfW09OIgMiTH0RgYlQwjIZ ygEJ5osGtoas9dD2gsHb2xe4nTWMjyWsMayWuY2MovdVJvJVChmbEIBw2ZRtc8kO 2uNqr+2p8ZUTznRImJ2RmJ1Mu8kEjjE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:09 2025 by rpki-client