$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa File: 03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa (raw, json) Hash identifier: hAAkgyBf89oBt9/+VPa6i8zKEHHjY/j3nw2/S+q9AhE= Subject key identifier: 3D:A2:64:86:52:10:BF:61:97:81:6F:70:47:59:2D:2D:7B:4B:5A:F3 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584D100CF99CAC0BCFF5B396E340 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:f9:9c:ac:0b:cf:f5:b3:96:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=35a4464a-4e95-482a-9986-5bda14d2efaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:d2:cd:b1:17:3c:d5:1c:10:bb:48:58:bd: 86:46:0d:a9:01:71:fa:59:9b:d7:e0:e3:9c:1e:f0: bb:1b:66:8b:6d:2e:7a:ba:69:33:55:a3:25:ec:17: d5:1f:55:51:cd:4f:43:d9:fa:1c:7f:18:c2:8d:6d: 4b:13:b9:e3:c9:db:1d:44:ce:1c:a3:bc:41:32:d8: 1d:a7:2b:14:34:c8:bc:26:f4:02:e1:3c:c5:fa:29: a1:bf:33:79:d9:8b:5d:b1:0e:d1:d6:4e:1b:95:d5: 91:d9:ef:9b:db:02:34:25:1e:20:ce:28:19:27:4c: 5f:07:0f:ce:bc:0e:03:40:76:4f:f3:04:59:88:67: 9b:20:2b:ce:da:da:ff:f9:72:f3:c5:3f:a6:91:25: dd:dc:95:63:b1:d8:ad:1d:43:70:62:d6:c5:c9:3e: e1:d3:48:9c:d8:1b:f9:12:cf:77:47:6f:b2:4a:5d: 89:9b:65:ed:04:b6:07:db:51:2c:05:6b:01:60:20: 1d:9f:e0:34:75:ea:b7:f3:f7:ea:71:b2:ec:ad:ce: 32:50:ae:a0:68:b5:1c:e1:17:6b:65:e8:fc:b2:11: d0:9a:64:f6:a5:c2:4a:97:a3:67:67:8e:24:49:45: 06:5a:1e:07:58:d1:3a:b3:83:6b:e9:20:c1:05:32: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A2:64:86:52:10:BF:61:97:81:6F:70:47:59:2D:2D:7B:4B:5A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:8e:d8:17:9d:fb:26:dc:31:74:bb:33:89:0b:ca:a4:f0:2d: 4e:c8:ee:5d:1d:96:08:82:ae:5e:25:d1:4b:18:b5:82:6b:d0: 16:d4:32:67:63:3e:d2:59:f8:58:2b:90:c6:95:95:96:75:1d: db:eb:50:78:35:5b:b6:a3:9a:73:f8:5f:82:5a:df:7a:e7:77: c1:7d:d8:3b:74:f4:04:6d:87:75:bf:a1:de:fd:1e:66:39:7c: 65:fd:72:1e:0c:34:60:04:3d:eb:de:e3:b2:ec:01:a2:8f:b3: 85:ac:ee:70:fd:02:11:04:c9:71:24:c1:3a:87:77:27:ec:8f: 01:27:8c:63:93:c9:8d:95:5a:fd:57:6b:a0:89:e8:20:e6:34: 8a:3a:1d:95:b9:09:d3:ea:47:3a:7d:42:35:b3:f5:26:ec:34: 14:13:09:6b:7a:af:18:a2:1d:fc:5b:df:e3:f2:65:38:fe:99: e5:c2:f1:4c:f2:cc:4c:1c:7a:60:67:ab:8b:87:44:b2:a9:d4: 57:81:a7:8a:eb:f4:63:6f:84:c3:7e:8d:44:a8:65:ac:ab:5e: e8:e0:5b:bd:b6:99:40:0c:c2:bb:1a:48:c2:14:e0:5b:cd:29: a9:8e:a4:7e:7e:db:18:d8:73:22:8e:73:84:df:5a:72:e6:37: 7e:ed:9e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDPmcrAvP9bOW40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk MzVhNDQ2NGEtNGU5NS00ODJhLTk5ODYtNWJkYTE0ZDJlZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP3SzbEXPNUcELtIWL2GRg2pAXH6WZvX4OOc HvC7G2aLbS56umkzVaMl7BfVH1VRzU9D2focfxjCjW1LE7njydsdRM4co7xBMtgd pysUNMi8JvQC4TzF+imhvzN52YtdsQ7R1k4bldWR2e+b2wI0JR4gzigZJ0xfBw/O vA4DQHZP8wRZiGebICvO2tr/+XLzxT+mkSXd3JVjsditHUNwYtbFyT7h00ic2Bv5 Es93R2+ySl2Jm2XtBLYH21EsBWsBYCAdn+A0deq38/fqcbLsrc4yUK6gaLUc4Rdr Zej8shHQmmT2pcJKl6NnZ44kSUUGWh4HWNE6s4Nr6SDBBTKvbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2iZIZSEL9hl4FvcEdZLS17S1rzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDNjYmE0NGYtZTRlOS0z YjVjLWI3ZGQtZDFlMmUyNjdhZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGO2Bed+ybcMXS7M4kLyqTwLU7I7l0dlgiCrl4l0UsYtYJr0BbUMmdj PtJZ+FgrkMaVlZZ1HdvrUHg1W7ajmnP4X4Ja33rnd8F92Dt09ARth3W/od79HmY5 fGX9ch4MNGAEPeve47LsAaKPs4Ws7nD9AhEEyXEkwTqHdyfsjwEnjGOTyY2VWv1X a6CJ6CDmNIo6HZW5CdPqRzp9QjWz9SbsNBQTCWt6rxiiHfxb3+PyZTj+meXC8Uzy zEwcemBnq4uHRLKp1FeBp4rr9GNvhMN+jUSoZayrXujgW722mUAMwrsaSMIU4FvN KamOpH5+2xjYcyKOc4TfWnLmN37tnmA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:23:59 2026 by rpki-client