$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5791133b-6a13-3286-80bc-99eabe0312f7.roa File: 5791133b-6a13-3286-80bc-99eabe0312f7.roa (raw, json) Hash identifier: K+lwpDHWwSM5H5MZuEziYpnsIFf6G8FyNtaC2xNuxCg= Subject key identifier: 92:56:40:18:C0:06:C5:E0:7B:1D:57:BC:FB:4C:20:4E:F2:AF:99:0F Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A8B0B4EEFEE9E39EFE7DE7180 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5791133b-6a13-3286-80bc-99eabe0312f7.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 396253 IP address blocks: 149.19.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:4e:ef:ee:9e:39:ef:e7:de:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=7706915e-fcf2-4317-aeed-7586a3325dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:76:61:99:b4:8f:d6:cc:ab:fe:4a:9d:a4:4f: c2:29:27:3d:dd:e4:23:d2:cd:86:29:ed:e7:af:3a: c0:be:fa:cb:51:65:9e:50:e7:fc:5c:2e:98:6b:2d: 34:08:02:19:94:ba:e6:39:18:18:84:c4:b7:7f:b1: ad:7a:a5:99:ef:b8:3e:b4:63:86:f5:3b:61:5b:48: 5f:bc:b1:7a:3f:55:35:dd:71:f3:93:b2:cc:9b:5b: 1a:44:e6:ac:e0:61:65:6b:2d:67:e7:94:de:58:73: 5c:92:b2:de:4b:b8:ed:63:66:7f:0f:62:52:90:13: 05:17:21:12:8e:61:1a:d3:91:d5:83:0f:1d:36:83: 53:98:56:c9:37:53:51:e0:b1:63:33:6f:35:1c:b5: e7:f8:27:b0:93:15:23:3c:55:80:93:67:b3:58:0b: 5f:05:57:18:23:e2:cf:6b:c2:7a:a4:c3:43:5b:e9: 54:d3:46:22:ab:97:f4:6a:cc:95:77:89:6d:82:89: a9:16:bc:c8:b9:7e:8b:2d:c1:41:ec:e8:04:33:69: 52:d1:05:51:f3:d0:5a:2e:18:18:59:f0:7b:f4:17: e8:97:89:7b:1f:53:f9:a2:12:3f:12:e5:e8:f4:cc: 48:61:bd:6a:ff:f9:23:7b:6b:b0:ce:8d:b8:71:03: d0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:56:40:18:C0:06:C5:E0:7B:1D:57:BC:FB:4C:20:4E:F2:AF:99:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5791133b-6a13-3286-80bc-99eabe0312f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:76:7b:54:5b:24:c9:33:ad:6a:e4:6d:8d:6f:4d:c8:0a:44: f1:8e:97:4d:c1:e4:7e:96:66:00:29:02:a8:53:bc:6b:6b:a3: 08:1d:32:46:1e:2e:5d:d4:30:17:66:39:af:f7:6d:af:4d:f0: a5:58:d6:2e:33:8c:40:9c:91:52:a9:20:43:e0:05:21:0e:67: fc:1b:b7:af:b8:b3:e5:ed:90:e1:c5:14:af:da:b9:53:c5:41: 5b:87:26:bf:42:e6:f3:72:90:6a:9f:48:63:91:5b:aa:31:bf: 88:21:9a:e0:ec:c5:24:bd:fa:94:1c:af:5e:f2:80:af:b5:ff: 91:b5:4a:65:7d:15:25:36:a9:ed:f5:a6:65:b3:1b:ad:83:c4: d2:86:5b:79:eb:13:77:00:13:72:b5:07:f5:2c:17:28:3f:40: ed:ae:07:fc:92:37:a0:ac:49:2a:39:87:a0:25:01:83:62:1d: 30:d4:e9:d0:75:09:2b:ac:bc:1d:7c:94:48:57:7c:ed:90:bf: c0:bd:45:18:e1:19:5e:51:d2:56:cc:42:e1:39:c8:bf:d7:61: db:c9:1a:d2:af:02:4c:cd:28:08:9c:6d:63:5b:20:3c:58:25: ca:93:d7:b2:2c:be:e5:68:1c:74:29:8f:71:41:0a:7e:a5:14: d1:ac:6e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC07v7p457+fecYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NzcwNjkxNWUtZmNmMi00MzE3LWFlZWQtNzU4NmEzMzI1ZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHZhmbSP1syr/kqdpE/CKSc93eQj0s2GKe3n rzrAvvrLUWWeUOf8XC6Yay00CAIZlLrmORgYhMS3f7GteqWZ77g+tGOG9TthW0hf vLF6P1U13XHzk7LMm1saROas4GFlay1n55TeWHNckrLeS7jtY2Z/D2JSkBMFFyES jmEa05HVgw8dNoNTmFbJN1NR4LFjM281HLXn+CewkxUjPFWAk2ezWAtfBVcYI+LP a8J6pMNDW+lU00Yiq5f0asyVd4ltgompFrzIuX6LLcFB7OgEM2lS0QVR89BaLhgY WfB79Bfol4l7H1P5ohI/EuXo9MxIYb1q//kje2uwzo24cQPQWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJWQBjABsXgex1XvPtMIE7yr5kPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNTc5MTEzM2ItNmExMy0z Mjg2LTgwYmMtOTllYWJlMDMxMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF52e1RbJMkzrWrkbY1vTcgKRPGOl03B5H6WZgApAqhTvGtrowgdMkYe Ll3UMBdmOa/3ba9N8KVY1i4zjECckVKpIEPgBSEOZ/wbt6+4s+XtkOHFFK/auVPF QVuHJr9C5vNykGqfSGORW6oxv4ghmuDsxSS9+pQcr17ygK+1/5G1SmV9FSU2qe31 pmWzG62DxNKGW3nrE3cAE3K1B/UsFyg/QO2uB/ySN6CsSSo5h6AlAYNiHTDU6dB1 CSusvB18lEhXfO2Qv8C9RRjhGV5R0lbMQuE5yL/XYdvJGtKvAkzNKAicbWNbIDxY JcqT17IsvuVoHHQpj3FBCn6lFNGsbjM= -----END CERTIFICATE-----Generated at Thu Aug 7 02:10:28 2025 by rpki-client