$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa File: a958d35b-5bff-30c1-9a51-b65ae1791370.roa (raw, json) Hash identifier: TJwHyqNxtN8t2IIPmBM7enAz3oYecnLrv5nO52MBAW4= Subject key identifier: C7:B4:60:4C:E2:C5:EE:3C:CC:7F:51:13:9E:F5:A4:6C:38:D6:22:60 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584EB2B1A9B91CB4A1F9EBF49200 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 396253 IP address blocks: 149.19.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:a9:b9:1c:b4:a1:f9:eb:f4:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=178f7e8a-932b-457e-b3a4-c77eba380000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:7e:51:40:2f:a8:de:b2:ab:a7:13:c4:37: f2:c1:8a:e6:c6:36:50:45:df:d0:93:a0:83:22:05: 6f:20:a1:8c:52:61:58:44:85:ee:be:13:c5:29:31: 7d:31:f9:f0:b3:27:15:2e:ea:89:78:29:35:e0:f3: 7a:0c:c1:e2:3b:8e:5e:f5:8f:ea:cd:66:be:e8:06: 43:25:a4:5e:69:c4:e1:0e:e6:46:60:17:e0:85:ee: ea:b1:8a:6d:50:7d:29:b6:f4:56:82:2d:07:9a:0f: 8b:13:53:59:05:94:8e:ad:5c:08:32:63:9d:f0:07: 6a:1c:58:b9:4d:68:b4:c2:74:22:30:05:12:d3:eb: d1:96:f1:8f:95:33:6c:b7:0a:af:7a:08:92:f0:8a: 12:d4:0a:b1:72:e0:a2:9e:a0:e9:1b:84:ee:a6:00: e5:cd:e6:0e:fe:82:1f:38:7c:58:97:2d:f1:c3:57: 44:0a:a3:56:06:b3:2b:52:93:29:e2:ff:a1:d7:79: 9c:a6:b2:fd:68:4b:d1:97:97:0c:7c:15:b1:f3:83: f8:d0:6d:8d:00:f5:7d:09:cb:ff:98:00:6f:82:4c: e9:27:51:25:50:cc:a9:cc:61:f8:79:11:31:9a:f5: d8:89:5f:36:14:39:bd:19:b5:53:68:2f:30:0e:93: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B4:60:4C:E2:C5:EE:3C:CC:7F:51:13:9E:F5:A4:6C:38:D6:22:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a958d35b-5bff-30c1-9a51-b65ae1791370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 149.19.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:0d:6f:09:e2:48:a8:50:6a:19:46:3e:8a:b7:59:75:e4:dd: bf:7b:c0:5a:79:a8:17:1d:9f:0f:90:ed:fd:9b:7d:20:bc:95: 99:16:48:74:2a:32:17:f2:fa:9e:b8:2f:06:1a:a9:dc:b3:bc: d1:a3:75:1a:ac:ff:cc:67:01:15:71:59:9c:24:d9:f2:b4:5b: 52:7c:33:b5:ce:fb:7b:d0:a0:78:ac:d9:b3:16:78:a0:6a:44: 12:41:c8:98:b2:8c:0c:4b:0d:a8:42:79:5e:ae:ed:22:55:75: 1b:77:50:93:2a:a0:fc:62:7f:9e:45:d6:bd:b9:13:d3:de:2b: f8:25:5d:9e:ed:97:0c:49:a8:9c:19:0d:ab:a6:08:ea:b6:77: d8:71:23:55:75:ca:37:fe:9a:88:be:86:94:4b:68:64:d8:70: e4:ed:67:f8:e5:cd:3c:7f:23:24:70:ce:32:ee:8e:18:a3:f2: 97:8c:e9:6d:a2:41:71:c9:27:9b:9d:62:84:30:f7:47:41:56: ed:e1:32:c0:c9:ea:17:80:d5:ef:7a:a5:18:13:dc:00:29:ae: c8:cf:90:58:b6:83:9a:b8:b2:35:07:89:3a:4b:12:d8:c7:d8: 0d:71:d0:58:59:06:d5:b3:76:48:51:c4:5b:7f:0b:75:60:34: de:3d:71:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysam5HLSh+ev0kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MTc4ZjdlOGEtOTMyYi00NTdlLWIzYTQtYzc3ZWJhMzgwMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02p+UUAvqN6yq6cTxDfywYrmxjZQRd/Qk6CD IgVvIKGMUmFYRIXuvhPFKTF9MfnwsycVLuqJeCk14PN6DMHiO45e9Y/qzWa+6AZD JaReacThDuZGYBfghe7qsYptUH0ptvRWgi0Hmg+LE1NZBZSOrVwIMmOd8AdqHFi5 TWi0wnQiMAUS0+vRlvGPlTNstwqvegiS8IoS1AqxcuCinqDpG4TupgDlzeYO/oIf OHxYly3xw1dECqNWBrMrUpMp4v+h13mcprL9aEvRl5cMfBWx84P40G2NAPV9Ccv/ mABvgkzpJ1ElUMypzGH4eRExmvXYiV82FDm9GbVTaC8wDpOzLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe0YEzixe48zH9RE571pGw41iJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYTk1OGQzNWItNWJmZi0z MGMxLTlhNTEtYjY1YWUxNzkxMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAINbwniSKhQahlGPoq3WXXk3b97wFp5qBcdnw+Q7f2bfSC8lZkWSHQq Mhfy+p64LwYaqdyzvNGjdRqs/8xnARVxWZwk2fK0W1J8M7XO+3vQoHis2bMWeKBq RBJByJiyjAxLDahCeV6u7SJVdRt3UJMqoPxif55F1r25E9PeK/glXZ7tlwxJqJwZ DaumCOq2d9hxI1V1yjf+moi+hpRLaGTYcOTtZ/jlzTx/IyRwzjLujhij8peM6W2i QXHJJ5udYoQw90dBVu3hMsDJ6heA1e96pRgT3AAprsjPkFi2g5q4sjUHiTpLEtjH 2A1x0FhZBtWzdkhRxFt/C3VgNN49cQM= -----END CERTIFICATE-----Generated at Sat Aug 15 02:09:55 2026 by rpki-client