$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/cb94b7a5-85ee-3052-b78e-60662eb34691.roa File: cb94b7a5-85ee-3052-b78e-60662eb34691.roa (raw, json) Hash identifier: ZyNwbDhZ1CX2GDopTYBw6ZXdqdXIeKgA9hGAu8ldaUU= Subject key identifier: AC:4B:4C:EB:F5:19:87:70:80:BE:17:1F:50:39:47:85:94:FD:06:27 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A90A0ACE3829797BEC98EF220 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/cb94b7a5-85ee-3052-b78e-60662eb34691.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396253 IP address blocks: 149.19.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ac:e3:82:97:97:be:c9:8e:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=7c66cf5d-8163-4a8a-bc00-301862b65b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:08:f4:b2:f2:a2:0a:9f:f3:4e:1e:42:ba: 13:39:b8:ea:e6:99:87:75:85:0e:d5:79:64:e7:47: e2:f2:bd:f1:65:e0:b1:8b:46:f9:4f:fa:b7:72:87: f3:0d:8d:29:31:c6:c6:34:a5:54:bc:6d:db:a9:42: fb:57:2f:c0:56:3b:ca:74:84:16:90:28:62:dd:ab: a5:40:59:1c:af:3e:ad:94:62:05:33:36:56:4d:84: 84:37:78:da:48:d1:b1:0c:8d:4a:b6:a9:df:e3:28: 12:08:aa:f8:3b:73:3a:63:e7:45:ec:01:33:1d:16: 63:25:00:05:bc:c6:b3:27:6c:4a:4c:6d:1c:cd:0d: f7:44:d8:bf:55:6d:7d:c6:2a:13:ff:cf:a0:09:13: 2d:be:10:2f:ec:01:73:26:af:29:02:04:30:4d:34: 2f:72:7a:eb:24:9c:73:3c:05:2b:67:fc:9d:0d:b7: a1:87:13:4a:79:36:1c:8e:bc:6c:ce:fe:e3:7a:dc: 57:4a:9b:3a:b3:5b:64:d5:a8:32:96:61:04:90:3e: 7e:e7:f7:8d:76:71:3a:57:dd:46:01:a3:6a:04:28: dd:c2:60:fa:37:43:06:31:d8:80:44:9d:cd:76:0f: 8f:78:2e:2f:35:8d:8a:36:75:3c:fc:2c:72:31:0d: d9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4B:4C:EB:F5:19:87:70:80:BE:17:1F:50:39:47:85:94:FD:06:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/cb94b7a5-85ee-3052-b78e-60662eb34691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:76:d5:9f:43:f6:34:c0:3c:c4:b0:2a:a1:43:ba:7f:a2:b6: 56:4f:d5:df:1e:44:70:71:b1:3f:41:1e:44:bd:33:99:51:93: 4a:8a:68:8d:4e:f4:ea:4d:a6:d1:d5:4b:32:e5:da:68:92:59: 4b:01:f7:81:71:a0:7d:92:19:82:c6:b2:84:42:30:b6:62:10: b5:77:9f:df:8f:54:98:08:93:f3:d7:8f:f5:e6:9f:73:6d:34: 87:14:0e:ac:ea:3b:45:1b:96:c1:da:99:d2:f6:f9:9d:be:35: c5:d4:ab:c6:84:fc:4f:1e:ee:a9:e8:4e:a0:64:c7:12:fe:07: ab:a6:61:62:51:10:0c:39:f8:77:72:27:1d:f4:b9:e2:be:9f: 08:5c:9d:df:2b:b7:d6:93:b0:58:bd:7c:10:0b:1d:dd:a0:74: 94:71:7f:0b:b0:e9:a4:4b:02:73:c4:20:89:b1:fb:d7:ea:9b: 47:c5:53:a5:57:f1:10:c9:84:6e:52:0d:cf:fd:e7:5f:d6:bd: 94:99:9e:5d:10:6e:ea:20:19:cd:4d:6a:f3:a0:75:85:49:a8: 03:eb:a8:09:06:7e:74:8e:52:14:ed:fc:db:79:81:e3:5c:d3: 07:c6:8f:19:38:d0:a5:3e:e5:11:93:78:29:48:2a:d7:68:96: 4e:7a:47:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoKzjgpeXvsmO8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk N2M2NmNmNWQtODE2My00YThhLWJjMDAtMzAxODYyYjY1YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd0I9LLyogqf804eQroTObjq5pmHdYUO1Xlk 50fi8r3xZeCxi0b5T/q3cofzDY0pMcbGNKVUvG3bqUL7Vy/AVjvKdIQWkChi3aul QFkcrz6tlGIFMzZWTYSEN3jaSNGxDI1Ktqnf4ygSCKr4O3M6Y+dF7AEzHRZjJQAF vMazJ2xKTG0czQ33RNi/VW19xioT/8+gCRMtvhAv7AFzJq8pAgQwTTQvcnrrJJxz PAUrZ/ydDbehhxNKeTYcjrxszv7jetxXSps6s1tk1agylmEEkD5+5/eNdnE6V91G AaNqBCjdwmD6N0MGMdiARJ3Ndg+PeC4vNY2KNnU8/CxyMQ3ZDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxLTOv1GYdwgL4XH1A5R4WU/QYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvY2I5NGI3YTUtODVlZS0z MDUyLWI3OGUtNjA2NjJlYjM0NjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRM6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV21Z9D9jTAPMSwKqFDun+itlZP1d8eRHBxsT9BHkS9M5lRk0qKaI1O 9OpNptHVSzLl2miSWUsB94FxoH2SGYLGsoRCMLZiELV3n9+PVJgIk/PXj/Xmn3Nt NIcUDqzqO0UblsHamdL2+Z2+NcXUq8aE/E8e7qnoTqBkxxL+B6umYWJREAw5+Hdy Jx30ueK+nwhcnd8rt9aTsFi9fBALHd2gdJRxfwuw6aRLAnPEIImx+9fqm0fFU6VX 8RDJhG5SDc/951/WvZSZnl0QbuogGc1NavOgdYVJqAPrqAkGfnSOUhTt/Nt5geNc 0wfGjxk40KU+5RGTeClIKtdolk56Rxs= -----END CERTIFICATE-----Generated at Wed Aug 6 11:06:39 2025 by rpki-client