$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa File: 03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa (raw, json) Hash identifier: fDeYHFz8A3BLmdltxJRj+GY+DTK3j8OeqMplnEg9Lbg= Subject key identifier: B4:E5:6C:2F:73:43:B0:3D:3C:11:05:17:CB:BB:A6:BC:65:42:B5:6F Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584EA794F9BA083723461B2A57C0 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:f9:ba:08:37:23:46:1b:2a:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cab38b81-d4e1-4614-afa0-d9a8f49dc578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:d8:f7:7e:91:c8:54:33:0d:7a:76:c2:42: 92:7e:3e:2b:fd:09:00:08:66:5e:88:56:73:9b:c0: cb:7f:43:5b:02:01:32:73:8a:f9:41:92:d3:7b:8c: b7:fd:c8:a1:f8:65:dd:d4:ab:01:ea:fb:7e:f7:ef: 91:6f:de:1f:23:9e:c3:0e:23:c9:35:b4:55:25:ea: 13:3b:b3:4f:94:43:ca:5f:e5:9a:05:a3:46:90:b6: ef:8d:8f:41:9c:60:54:b9:7e:9c:05:26:77:aa:87: 78:10:52:0e:89:58:da:57:dd:61:04:4b:10:4d:80: 5a:73:55:3c:64:a3:d1:56:c9:e6:6f:3a:72:3b:e0: 81:8a:d7:26:25:52:d5:8e:40:14:84:f3:8f:a0:a4: f5:c7:45:7b:a8:ad:15:7d:c0:db:0b:c7:ae:f3:ee: bd:81:c8:cd:28:89:f7:85:0f:41:c3:aa:6a:19:d8: 56:39:ea:25:9b:df:bd:39:74:9f:75:00:ff:c7:ba: 78:da:28:e4:c7:bc:a6:31:1a:3f:70:fa:9c:99:ad: 7b:0c:cb:3b:da:bb:df:56:7b:3b:c8:d7:e3:0b:b9: 91:56:9b:75:4f:a3:1a:99:f6:9d:92:53:71:eb:42: 91:43:cd:7f:e2:f6:f1:bf:a6:57:62:63:9d:2a:4d: fa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E5:6C:2F:73:43:B0:3D:3C:11:05:17:CB:BB:A6:BC:65:42:B5:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e0:27:b8:84:8f:f0:44:df:05:3f:c4:c4:6f:5f:bf:26:e6: 7c:2e:70:87:e8:55:c3:50:02:30:58:5e:6c:de:2a:6e:e2:d4: 05:45:2d:10:35:25:30:be:33:fb:57:42:4f:49:4e:99:0a:b1: 33:eb:98:90:3a:4e:5f:2b:83:a8:38:cc:b8:88:2b:a4:39:82: 3a:0a:62:a8:a6:3b:a1:1d:c1:df:d8:fe:f8:95:f3:6d:ec:cc: c6:b7:6b:ff:1e:4e:6b:0b:16:38:64:07:f3:f5:ee:04:e3:37: 53:8e:04:0c:ff:74:bf:4a:b2:b9:6a:96:80:11:55:26:2a:60: 09:ad:db:43:76:58:1c:3c:9a:78:77:ad:26:bf:bf:33:12:5e: be:8a:33:15:2e:6d:f2:b3:26:f1:e4:ac:26:f6:80:94:e5:ec: 8d:c1:dc:e4:e9:94:a9:e8:c3:99:07:55:12:fc:7e:55:6a:a6: 36:3d:9c:af:e4:1d:cc:5c:36:72:e2:3c:8f:6e:46:a0:03:ef: 71:bd:31:78:94:85:fd:57:67:35:57:42:30:a2:a3:8a:bb:df: 55:29:b4:0d:de:99:ff:1a:b5:01:09:80:49:a6:f5:ed:2c:b7: 41:46:f5:ba:89:5a:55:27:c8:ca:a5:d2:76:45:a2:72:b6:a5: 6d:a6:34:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlPm6CDcjRhsqV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2FiMzhiODEtZDRlMS00NjE0LWFmYTAtZDlhOGY0OWRjNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrXY936RyFQzDXp2wkKSfj4r/QkACGZeiFZz m8DLf0NbAgEyc4r5QZLTe4y3/cih+GXd1KsB6vt+9++Rb94fI57DDiPJNbRVJeoT O7NPlEPKX+WaBaNGkLbvjY9BnGBUuX6cBSZ3qod4EFIOiVjaV91hBEsQTYBac1U8 ZKPRVsnmbzpyO+CBitcmJVLVjkAUhPOPoKT1x0V7qK0VfcDbC8eu8+69gcjNKIn3 hQ9Bw6pqGdhWOeolm9+9OXSfdQD/x7p42ijkx7ymMRo/cPqcma17DMs72rvfVns7 yNfjC7mRVpt1T6MamfadklNx60KRQ81/4vbxv6ZXYmOdKk36NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTlbC9zQ7A9PBEFF8u7prxlQrVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDNjYmE0NGYtZTRlOS0z YjVjLWI3ZGQtZDFlMmUyNjdhZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDgJ7iEj/BE3wU/xMRvX78m5nwucIfoVcNQAjBYXmzeKm7i1AVFLRA1 JTC+M/tXQk9JTpkKsTPrmJA6Tl8rg6g4zLiIK6Q5gjoKYqimO6Edwd/Y/viV823s zMa3a/8eTmsLFjhkB/P17gTjN1OOBAz/dL9KsrlqloARVSYqYAmt20N2WBw8mnh3 rSa/vzMSXr6KMxUubfKzJvHkrCb2gJTl7I3B3OTplKnow5kHVRL8flVqpjY9nK/k HcxcNnLiPI9uRqAD73G9MXiUhf1XZzVXQjCio4q731UptA3emf8atQEJgEmm9e0s t0FG9bqJWlUnyMql0nZFonK2pW2mNC0= -----END CERTIFICATE-----Generated at Sat Aug 8 05:58:36 2026 by rpki-client