$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa File: 2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa (raw, json) Hash identifier: R7g7iZNu8PlNJb4pBH2/CnZ2Day1i+RsY1a3MhH00TQ= Subject key identifier: 96:67:E2:6A:5E:EE:23:EA:1E:62:03:66:D0:16:74:FE:E9:82:EE:B0 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584D100CFC6E389D95377FE18FC0 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:fc:6e:38:9d:95:37:7f:e1:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=96f4a3df-62f3-4bc5-bfb7-a5edd0b5f8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:97:18:b3:86:b1:0f:60:0f:4a:b2:78:20: 43:1e:2f:87:66:a3:b8:f8:0e:e0:9c:82:87:d4:8c: 3e:63:b8:ba:28:d6:45:5a:a1:72:0b:d3:46:bf:cd: 07:5a:fd:39:e9:54:4f:3f:05:24:e8:f3:59:4f:2a: c0:88:aa:d4:54:d6:58:15:0b:cc:63:1c:92:46:9d: dc:0e:ee:be:db:a3:10:14:42:75:1e:e6:9c:a4:7a: 1d:d4:55:31:c0:35:bc:65:e3:c4:58:2c:4e:6c:aa: ec:e9:45:f2:85:f3:5f:f0:e5:4f:4e:89:a2:40:0e: b9:5d:95:be:00:9f:84:86:20:85:66:d4:7a:0a:f7: 0b:47:d9:46:c0:54:5f:23:5d:3b:fd:ca:b0:dd:fd: 46:0b:26:11:f7:ef:3c:ae:83:a8:08:ee:ed:1f:5d: 19:1d:e4:79:af:aa:6c:73:e9:26:a2:56:bf:96:5c: 92:c6:0b:ef:66:44:60:9d:45:9a:cd:b2:f7:4a:bf: dc:c3:ff:36:27:67:a3:00:fd:6c:9d:be:7c:67:f6: f7:39:24:36:79:d5:91:28:5f:8f:28:72:d0:bf:73: a0:a2:03:cb:d9:d5:c6:77:e6:b4:2a:91:96:50:30: 00:01:70:34:4c:23:33:e4:d2:c7:f1:82:a1:21:17: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:67:E2:6A:5E:EE:23:EA:1E:62:03:66:D0:16:74:FE:E9:82:EE:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6e:da:76:8b:7d:83:6c:62:c5:9d:60:50:b7:d7:c2:ac:53: ca:a9:44:b4:bc:42:59:de:4f:97:72:c5:42:4a:29:86:02:85: 67:2c:87:0f:1f:52:a2:52:36:f8:11:4d:ff:f9:49:72:02:0b: 75:ba:01:37:ca:b4:8a:4a:a9:36:8d:a9:0f:6b:f3:5f:8d:66: 07:60:2d:d3:8c:d8:ea:59:52:5b:2d:b2:99:4c:9e:2a:c7:4e: e9:3b:91:8f:97:74:2f:06:94:82:fd:f1:13:7e:c9:2f:d5:aa: 1a:a6:d8:4f:90:2d:81:09:75:04:94:d2:9b:a7:d5:da:bd:23: 5b:91:de:e6:a0:14:70:e3:27:29:c3:1e:ff:bb:e1:64:ae:18: b0:b2:ea:0c:21:fd:7b:65:93:30:b3:04:d4:57:a9:ea:13:af: e6:8b:6a:32:01:55:39:77:ac:5a:1c:73:46:aa:da:2f:a7:ba: bb:68:24:8b:c9:b1:85:c4:b8:1a:76:d5:cc:10:75:35:ff:c3: 95:08:01:a5:95:b7:80:4b:6a:d1:f8:51:92:f7:5c:f6:55:c1: 0b:4a:c6:24:ec:e3:d7:83:62:fb:b2:17:34:ae:34:4a:79:81: 5d:3c:8b:a7:9f:81:82:d3:94:01:8e:3d:7f:fe:66:55:ff:e6: a0:bb:fd:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDPxuOJ2VN3/hj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk OTZmNGEzZGYtNjJmMy00YmM1LWJmYjctYTVlZGQwYjVmOGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+eXGLOGsQ9gD0qyeCBDHi+HZqO4+A7gnIKH 1Iw+Y7i6KNZFWqFyC9NGv80HWv056VRPPwUk6PNZTyrAiKrUVNZYFQvMYxySRp3c Du6+26MQFEJ1HuacpHod1FUxwDW8ZePEWCxObKrs6UXyhfNf8OVPTomiQA65XZW+ AJ+EhiCFZtR6CvcLR9lGwFRfI107/cqw3f1GCyYR9+88roOoCO7tH10ZHeR5r6ps c+kmola/llySxgvvZkRgnUWazbL3Sr/cw/82J2ejAP1snb58Z/b3OSQ2edWRKF+P KHLQv3OgogPL2dXGd+a0KpGWUDAAAXA0TCMz5NLH8YKhIRf9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZn4mpe7iPqHmIDZtAWdP7pgu6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMmI0ZTZiNzAtMzlkZC0z ZmQzLTkxZGEtODdkNGM5NmM5ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVu2naLfYNsYsWdYFC318KsU8qpRLS8QlneT5dyxUJKKYYChWcshw8f UqJSNvgRTf/5SXICC3W6ATfKtIpKqTaNqQ9r81+NZgdgLdOM2OpZUlstsplMnirH Tuk7kY+XdC8GlIL98RN+yS/Vqhqm2E+QLYEJdQSU0pun1dq9I1uR3uagFHDjJynD Hv+74WSuGLCy6gwh/XtlkzCzBNRXqeoTr+aLajIBVTl3rFocc0aq2i+nurtoJIvJ sYXEuBp21cwQdTX/w5UIAaWVt4BLatH4UZL3XPZVwQtKxiTs49eDYvuyFzSuNEp5 gV08i6efgYLTlAGOPX/+ZlX/5qC7/R4= -----END CERTIFICATE-----Generated at Wed Mar 18 20:24:40 2026 by rpki-client