$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a7dcc6ed-b1cc-3649-b00d-88c4a4d21f48.roa File: a7dcc6ed-b1cc-3649-b00d-88c4a4d21f48.roa (raw, json) Hash identifier: cQTRhbECE1PrwPfL7JZCQSSNe+NRlLZAMsZiKgIzrYk= Subject key identifier: 88:74:D4:70:4C:F7:3B:C0:A5:4A:88:47:30:F3:06:93:C8:F9:58:F9 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A8B0B4EDE92FF2B6839671840 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a7dcc6ed-b1cc-3649-b00d-88c4a4d21f48.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 202276 IP address blocks: 149.19.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:4e:de:92:ff:2b:68:39:67:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=15258b66-6740-49ae-8457-cf412b351e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:aa:8f:cb:c8:dc:77:5b:38:b2:16:2e:ae:4d: 62:db:e3:7b:92:96:ad:00:65:81:bc:c2:02:44:06: 83:b5:4d:c5:73:7f:8d:45:c4:e8:af:58:92:49:92: ab:21:00:55:08:73:7b:93:e6:b5:5a:6b:72:7c:f2: ed:98:ae:46:3d:3f:41:bc:05:73:9a:32:99:7f:bb: dc:5a:0a:44:0a:35:77:6a:be:b5:2d:d1:6f:ab:83: 15:3d:f4:4c:7c:ba:1d:81:fd:46:e7:e5:75:66:b0: 23:bd:67:ae:13:12:cf:7b:bc:b8:32:ee:9f:7e:d8: f8:75:60:ff:bd:8b:dd:08:d4:bb:d7:fa:5e:33:00: cb:a5:bc:fb:8a:04:28:6d:ef:3c:b0:f8:6a:b4:3e: fc:9d:c9:c1:6e:7a:7a:dd:1d:1c:88:e8:82:58:27: cf:4b:28:8b:1d:68:6b:f4:02:d3:a6:6d:2e:cf:5d: 8c:bd:73:c8:63:c4:db:ad:ad:88:f9:aa:d1:44:c9: 50:42:86:65:84:e0:f2:be:b9:79:f8:0c:db:4c:85: b3:c3:c8:84:db:41:12:26:93:98:09:83:b6:52:6f: 48:c3:23:f8:94:d3:a0:c8:84:52:f4:d4:43:79:33: ec:69:60:cc:1f:16:53:54:ff:b0:2a:ae:e8:53:b9: 02:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:74:D4:70:4C:F7:3B:C0:A5:4A:88:47:30:F3:06:93:C8:F9:58:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a7dcc6ed-b1cc-3649-b00d-88c4a4d21f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:bf:b1:cb:12:ca:d8:d1:61:e5:e7:37:e7:86:1f:ad:9d:04: 54:3a:47:6d:fc:2f:29:e4:1a:b9:28:7a:0c:78:be:49:24:88: cc:8f:a8:f7:38:58:26:15:a1:31:8d:f2:fd:92:e2:b4:f6:c6: 1a:86:67:1c:23:22:a8:37:84:b9:0c:20:9d:c3:d1:56:91:b6: 2b:fb:37:3e:bb:a0:d3:1e:12:6c:7a:a1:46:78:93:2d:ce:b4: 37:b2:0b:6f:1c:1a:9e:08:82:29:9b:f0:9c:84:08:c2:0d:a6: 1b:95:13:64:35:e7:da:85:0c:e9:65:9b:71:1a:a8:e1:b2:eb: a6:b1:06:07:23:8c:81:b6:cb:94:eb:3c:d8:80:96:a7:6b:28: bf:39:2e:68:29:b2:d8:49:30:f0:fc:5c:ad:91:e5:4a:86:db: 01:d2:11:33:f1:c5:03:7c:3e:dc:86:35:c1:94:e4:91:c1:0f: e8:2f:ac:65:0e:26:21:2a:aa:52:9b:63:30:be:3c:65:c5:cd: 7a:f8:49:d4:f3:5a:64:1d:92:a3:16:40:5c:8c:8e:c0:93:98: f3:e1:11:cd:92:62:4d:69:e4:77:f2:fe:e3:5e:cc:84:20:e3: b7:0b:c2:58:f0:2b:0a:d1:9c:cd:07:a2:49:a9:73:17:65:c2: 1f:b5:cc:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC07ekv8raDlnGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MTUyNThiNjYtNjc0MC00OWFlLTg0NTctY2Y0MTJiMzUxZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KqPy8jcd1s4shYurk1i2+N7kpatAGWBvMIC RAaDtU3Fc3+NRcTor1iSSZKrIQBVCHN7k+a1WmtyfPLtmK5GPT9BvAVzmjKZf7vc WgpECjV3ar61LdFvq4MVPfRMfLodgf1G5+V1ZrAjvWeuExLPe7y4Mu6fftj4dWD/ vYvdCNS71/peMwDLpbz7igQobe88sPhqtD78ncnBbnp63R0ciOiCWCfPSyiLHWhr 9ALTpm0uz12MvXPIY8Tbra2I+arRRMlQQoZlhODyvrl5+AzbTIWzw8iE20ESJpOY CYO2Um9IwyP4lNOgyIRS9NRDeTPsaWDMHxZTVP+wKq7oU7kC6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh01HBM9zvApUqIRzDzBpPI+Vj5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYTdkY2M2ZWQtYjFjYy0z NjQ5LWIwMGQtODhjNGE0ZDIxZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC/scsSytjRYeXnN+eGH62dBFQ6R238LynkGrkoegx4vkkkiMyPqPc4 WCYVoTGN8v2S4rT2xhqGZxwjIqg3hLkMIJ3D0VaRtiv7Nz67oNMeEmx6oUZ4ky3O tDeyC28cGp4Igimb8JyECMINphuVE2Q159qFDOllm3EaqOGy66axBgcjjIG2y5Tr PNiAlqdrKL85LmgpsthJMPD8XK2R5UqG2wHSETPxxQN8PtyGNcGU5JHBD+gvrGUO JiEqqlKbYzC+PGXFzXr4SdTzWmQdkqMWQFyMjsCTmPPhEc2SYk1p5Hfy/uNezIQg 47cLwljwKwrRnM0Hokmpcxdlwh+1zKo= -----END CERTIFICATE-----Generated at Wed Aug 6 00:35:55 2025 by rpki-client