$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa File: 38470f8d-5686-30f7-9170-22f3bc850829.roa (raw, json) Hash identifier: jPQeCNZeCPL6bGerFGSgR62WN+OiznPFTCdbtWizjBM= Subject key identifier: 32:E7:10:01:6F:21:6D:04:F4:1D:5A:96:FC:7A:A6:03:A9:84:49:4D Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F4328584D3F64ED7FA738A1D63D80B970 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 33139 IP address blocks: 66.49.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:ed:7f:a7:38:a1:d6:3d:80:b9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=a0797f6a-4fdc-4cee-aaac-d4471c76a5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ec:15:3c:d2:01:18:25:56:4f:70:28:74:e2: 23:1c:8a:86:02:db:58:e7:1d:bd:dd:da:7d:41:79: fe:49:7a:95:02:08:30:39:f6:d8:14:e1:63:08:b5: f7:ee:65:2f:4a:16:60:3e:bd:64:a0:59:48:ca:9e: 79:06:0a:cd:f6:78:39:93:60:c0:4a:eb:a2:c6:5e: d7:1a:c2:3f:1f:30:3e:e2:39:6b:ee:a9:bb:68:6d: ee:7d:f6:7e:87:99:75:4d:f7:60:b0:6f:d6:a8:b7: 42:32:d3:30:ee:1e:85:1b:ba:1e:07:a1:68:65:d6: f6:70:77:2f:a4:49:23:35:5e:47:f6:3f:23:50:ab: b1:ee:5b:9a:1f:af:0d:fa:21:4d:79:7e:9f:6a:1c: 0f:fc:0e:11:fd:6d:ff:2b:37:d4:32:5f:03:fc:8a: d5:1c:36:07:16:f4:9c:61:e8:ba:88:5c:d9:49:aa: 86:e3:61:27:24:0d:d0:bf:63:f5:01:26:a0:4f:f7: e1:1d:91:61:18:30:19:d9:85:a1:75:8d:d0:38:6e: 2c:ea:ca:fa:71:d2:c4:5e:2c:36:de:69:46:c2:28: 80:08:19:f4:3f:54:a6:af:a6:60:4b:b0:07:d4:f6: 66:9d:0d:c2:40:39:09:30:61:4c:d5:de:7a:de:ed: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:10:01:6F:21:6D:04:F4:1D:5A:96:FC:7A:A6:03:A9:84:49:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f0:01:b8:48:d1:0d:22:fb:7c:6c:44:b7:db:ab:27:d2:1d: 16:82:06:b5:df:88:e4:17:e0:6a:25:a1:eb:cf:76:0d:bc:60: 8f:03:c3:8a:a4:6e:57:2d:ee:09:3e:95:84:c6:51:8d:ab:ca: 97:d5:e1:be:b3:0c:10:9b:77:a5:4f:bb:7c:c3:f5:16:03:61: c8:7d:c6:94:7c:5a:13:9e:99:c8:97:e5:ee:66:9f:d9:6d:9a: 58:03:63:da:fc:90:a6:10:73:e6:73:f2:7a:c4:09:77:04:89: 58:83:08:2d:4c:db:11:4b:86:63:fd:09:f9:26:e2:7a:62:95: fc:2d:d1:62:67:0d:ba:f0:da:5d:07:16:dd:05:57:46:d6:ef: 87:6c:c1:5f:ec:e2:2a:8a:df:0b:a3:db:00:b4:a9:23:a1:00: 5d:8b:66:ab:f1:3b:0a:4e:62:78:18:1f:b6:23:00:04:f3:9e: be:00:e0:32:f4:b4:d7:9c:d0:56:24:76:91:fc:3a:68:69:a8: 3c:7e:fa:08:23:e6:8d:ba:85:d4:b4:79:7a:52:6b:00:bc:4b: 33:ad:9e:d3:e5:82:2b:03:21:35:85:ff:b1:3a:8f:2c:df:aa: 57:68:7c:00:0e:e4:c9:ef:7f:04:54:29:d9:06:70:ca:c2:35: b0:53:db:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZO1/pzih1j2AuXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YTA3OTdmNmEtNGZkYy00Y2VlLWFhYWMtZDQ0NzFjNzZhNWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOwVPNIBGCVWT3AodOIjHIqGAttY5x293dp9 QXn+SXqVAggwOfbYFOFjCLX37mUvShZgPr1koFlIyp55BgrN9ng5k2DASuuixl7X GsI/HzA+4jlr7qm7aG3uffZ+h5l1TfdgsG/WqLdCMtMw7h6FG7oeB6FoZdb2cHcv pEkjNV5H9j8jUKux7luaH68N+iFNeX6fahwP/A4R/W3/KzfUMl8D/IrVHDYHFvSc Yei6iFzZSaqG42EnJA3Qv2P1ASagT/fhHZFhGDAZ2YWhdY3QOG4s6sr6cdLEXiw2 3mlGwiiACBn0P1Smr6ZgS7AH1PZmnQ3CQDkJMGFM1d563u3UDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLnEAFvIW0E9B1alvx6pgOphElNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvMzg0NzBmOGQtNTY4Ni0z MGY3LTkxNzAtMjJmM2JjODUwODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjHBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7wAbhI0Q0i+3xsRLfbqyfSHRaCBrXfiOQX4GoloevPdg28YI8Dw4qk blct7gk+lYTGUY2rypfV4b6zDBCbd6VPu3zD9RYDYch9xpR8WhOemciX5e5mn9lt mlgDY9r8kKYQc+Zz8nrECXcEiViDCC1M2xFLhmP9Cfkm4npilfwt0WJnDbrw2l0H Ft0FV0bW74dswV/s4iqK3wuj2wC0qSOhAF2LZqvxOwpOYngYH7YjAATznr4A4DL0 tNec0FYkdpH8OmhpqDx++ggj5o26hdS0eXpSawC8SzOtntPlgisDITWF/7E6jyzf qldofAAO5MnvfwRUKdkGcMrCNbBT20Y= -----END CERTIFICATE-----Generated at Sun Mar 22 12:37:38 2026 by rpki-client