$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa File: a958d35b-5bff-30c1-9a51-b65ae1791370.roa (raw, json) Hash identifier: tmm7O1wteGdhVQgA+HyRHnudyCmpLAXcklUlStu2PJ0= Subject key identifier: A2:25:F2:A5:93:E7:5E:54:5B:64:71:28:10:69:19:12:D7:E8:19:11 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B715C9F79140928D7C93EABE0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 396253 IP address blocks: 149.19.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:9f:79:14:09:28:d7:c9:3e:ab:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=6e2dea9f-7ba7-4b6c-80c6-cf765b52b489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:b4:9c:e1:42:3b:9c:6f:a8:21:20:15:0b: 99:4a:0c:cf:b2:ca:a2:5c:24:e0:26:c3:6d:00:61: 26:a9:68:ac:a0:e3:88:e1:27:fc:0b:9a:72:e5:ee: 08:34:e6:45:39:94:e0:4e:10:bd:ab:51:a5:87:fc: 71:04:fd:ff:e8:38:19:50:f6:c6:d9:ad:9c:6d:ae: 38:2e:75:24:25:9e:70:d6:f3:0e:4e:f9:21:c3:85: 94:82:a0:d0:61:df:cd:93:91:d0:99:5e:24:5a:22: 35:f0:1f:76:11:cd:89:b0:5c:b4:7d:7a:c5:81:24: c7:fb:bd:87:51:ab:60:3d:46:96:d4:3d:9a:88:fb: cf:ac:5b:4e:12:1b:68:f8:0e:81:eb:84:b9:66:49: 46:a7:1c:c1:89:bf:d3:d7:be:aa:da:56:88:b2:e0: 44:b4:c2:e7:5e:05:4e:79:c1:65:3a:a5:cf:0e:53: 57:91:45:8c:12:9e:9e:ab:de:29:16:bf:ed:f4:96: 0b:67:9e:90:11:96:ff:98:61:84:8e:d9:6b:05:3a: 00:38:fc:55:98:d5:61:09:ea:12:b3:1c:14:fe:08: de:e2:ac:e2:fb:2a:1b:b7:db:9b:3b:11:a7:18:61: 03:d3:ed:b6:2b:d8:d5:46:a3:e8:9a:65:45:99:18: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:25:F2:A5:93:E7:5E:54:5B:64:71:28:10:69:19:12:D7:E8:19:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b2:b7:c3:cd:5b:6c:38:d1:74:c5:65:c8:34:37:db:08:d4: 0e:4d:86:96:71:1e:56:63:13:b5:61:47:96:13:ee:8b:a2:3f: b8:3a:a8:6a:8c:89:54:25:b0:5d:c0:f3:38:ed:93:74:64:de: dd:4e:d0:7e:6a:f3:ed:2f:32:2a:0f:50:f8:68:b6:1b:64:2d: 32:0c:9a:4b:60:e3:ae:0f:b9:a7:9f:58:ed:94:45:2d:c8:cf: 4c:1f:ea:ce:e0:0b:70:45:cd:96:b4:7e:ef:6d:0b:5a:fa:3f: 1c:4c:5d:39:b5:8e:8c:8d:ef:37:f6:08:af:d6:c3:2e:bb:33: 15:5c:5a:59:ca:d7:37:cb:e7:46:16:73:c3:de:88:0d:6c:d3: 8f:3f:5d:7a:41:46:8b:7c:81:00:0a:d2:25:cc:d3:e5:52:57: ed:f6:18:7d:45:d0:0c:6f:c5:fc:3b:60:6b:e1:75:e4:ba:ed: 7b:20:5b:0f:f9:07:06:7b:c8:70:7d:ae:15:76:24:09:5f:26: 49:4e:4b:71:1e:3d:98:e1:49:8f:59:57:d7:a4:13:46:e5:95: 23:f0:9e:22:4f:10:cc:f1:38:38:04:2d:06:8f:7c:03:08:d8: c0:ea:49:ca:b5:72:bf:e6:5f:4f:a3:cf:91:b2:4b:4d:30:59: 63:c0:6a:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXJ95FAko18k+q+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NmUyZGVhOWYtN2JhNy00YjZjLTgwYzYtY2Y3NjViNTJiNDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswW0nOFCO5xvqCEgFQuZSgzPssqiXCTgJsNt AGEmqWisoOOI4Sf8C5py5e4INOZFOZTgThC9q1Glh/xxBP3/6DgZUPbG2a2cba44 LnUkJZ5w1vMOTvkhw4WUgqDQYd/Nk5HQmV4kWiI18B92Ec2JsFy0fXrFgSTH+72H UatgPUaW1D2aiPvPrFtOEhto+A6B64S5ZklGpxzBib/T176q2laIsuBEtMLnXgVO ecFlOqXPDlNXkUWMEp6eq94pFr/t9JYLZ56QEZb/mGGEjtlrBToAOPxVmNVhCeoS sxwU/gje4qzi+yobt9ubOxGnGGED0+22K9jVRqPommVFmRjr6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIl8qWT515UW2RxKBBpGRLX6BkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYTk1OGQzNWItNWJmZi0z MGMxLTlhNTEtYjY1YWUxNzkxMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFayt8PNW2w40XTFZcg0N9sI1A5NhpZxHlZjE7VhR5YT7ouiP7g6qGqM iVQlsF3A8zjtk3Rk3t1O0H5q8+0vMioPUPhothtkLTIMmktg464PuaefWO2URS3I z0wf6s7gC3BFzZa0fu9tC1r6PxxMXTm1joyN7zf2CK/Wwy67MxVcWlnK1zfL50YW c8PeiA1s048/XXpBRot8gQAK0iXM0+VSV+32GH1F0Axvxfw7YGvhdeS67XsgWw/5 BwZ7yHB9rhV2JAlfJklOS3EePZjhSY9ZV9ekE0bllSPwniJPEMzxODgELQaPfAMI 2MDqScq1cr/mX0+jz5GyS00wWWPAaoA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:12:47 2025 by rpki-client