$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa File: 03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa (raw, json) Hash identifier: pKeQoXI9zwTF45+nHbpmu5l3r7jidPVH5zoQSWtombw= Subject key identifier: 32:94:02:B7:B5:9E:B4:73:64:33:E4:26:45:F1:33:03:2D:AA:34:67 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584A6F20795690D260B9436E5EC0 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 14618 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:79:56:90:d2:60:b9:43:6e:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=dbb985ef-6fcd-4661-9dd0-a378fff2caf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:19:63:d6:36:09:49:20:6d:06:83:75:77: fc:ff:6f:6b:0a:44:92:c5:9c:08:9e:39:05:51:e1: 93:fb:e3:d7:0d:d7:fc:85:b2:e1:26:d6:6c:22:fa: 78:00:b5:67:fb:ed:a5:d5:2e:e7:60:32:54:35:5c: 27:b8:36:50:c8:94:65:74:38:94:d7:c2:51:1e:48: 7a:ab:8e:39:91:ff:64:fd:bd:4d:d3:f2:d4:fe:80: 38:62:7e:1c:44:be:ed:02:bf:aa:2a:66:85:f0:1a: 9b:cd:24:56:01:98:9e:90:97:e8:e9:93:21:c6:20: 87:f0:4c:3a:d6:00:18:b7:14:a6:2c:c8:6b:ff:c7: 04:5f:b3:3d:d8:7c:68:f3:8d:ee:26:48:b8:bb:ad: 9b:00:75:4a:97:fb:3a:bd:51:ea:07:e8:32:9c:92: cb:6e:9b:b0:1d:5e:12:f6:2e:a6:8b:9f:e6:1c:ea: 93:8b:bf:56:e1:66:3c:50:3b:8b:03:5d:af:b5:8e: 8e:79:26:58:ac:e8:be:dc:30:27:58:37:bc:6e:1b: 90:9c:50:17:a6:5e:f7:40:b7:f6:c4:d7:29:e5:71: 49:5e:2f:b2:b6:13:1c:d1:2f:a6:31:1b:7a:8a:00: be:5f:9a:fd:fb:f2:12:88:b9:e4:8a:4b:44:99:d8: 72:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:94:02:B7:B5:9E:B4:73:64:33:E4:26:45:F1:33:03:2D:AA:34:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:78:f6:37:db:66:ef:ee:2c:9a:bc:91:66:bd:84:a5:c4:e0: bd:a3:18:2b:c5:dc:93:bc:f6:69:05:5c:70:ab:83:7f:a0:8c: 2e:0a:e8:ca:30:51:ff:db:c8:1c:1f:ea:10:69:f3:d0:d7:6a: 19:2c:d6:09:f7:02:f7:31:99:3e:9c:80:66:c9:f5:3c:68:db: 63:80:c9:9b:eb:21:97:2d:b2:c3:ba:02:14:62:fb:2a:6d:25: 33:20:ec:51:cf:37:f4:47:2b:a8:95:f9:5b:63:99:e0:e6:26: d2:9e:5f:e9:f0:30:b4:b7:5f:9d:14:b3:f6:d3:e7:1b:a5:03: 08:e9:2e:99:53:36:12:cd:15:83:23:7c:6e:48:af:80:03:83: 4d:c7:3d:8f:10:76:1c:4a:be:83:50:80:b3:c2:22:ca:3a:35: 92:48:99:78:e0:78:90:36:80:4a:9d:52:6a:b3:b5:cc:c4:78: 74:b8:4c:98:dd:4c:e9:ae:4f:64:58:00:5f:33:09:0e:37:6f: 23:f9:84:c6:bb:2b:92:aa:ad:44:77:e1:0c:fa:0d:fd:2d:d0: ed:da:33:59:92:61:c5:30:60:fc:97:bf:2e:66:02:e3:df:4f: f1:e0:30:2a:4b:0c:48:8d:c6:04:22:1f:72:03:36:59:14:23: 77:0d:c6:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIHlWkNJguUNuXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk ZGJiOTg1ZWYtNmZjZC00NjYxLTlkZDAtYTM3OGZmZjJjYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/oZY9Y2CUkgbQaDdXf8/29rCkSSxZwInjkF UeGT++PXDdf8hbLhJtZsIvp4ALVn++2l1S7nYDJUNVwnuDZQyJRldDiU18JRHkh6 q445kf9k/b1N0/LU/oA4Yn4cRL7tAr+qKmaF8BqbzSRWAZiekJfo6ZMhxiCH8Ew6 1gAYtxSmLMhr/8cEX7M92Hxo843uJki4u62bAHVKl/s6vVHqB+gynJLLbpuwHV4S 9i6mi5/mHOqTi79W4WY8UDuLA12vtY6OeSZYrOi+3DAnWDe8bhuQnFAXpl73QLf2 xNcp5XFJXi+ythMc0S+mMRt6igC+X5r9+/ISiLnkiktEmdhyGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKUAre1nrRzZDPkJkXxMwMtqjRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDNjYmE0NGYtZTRlOS0z YjVjLWI3ZGQtZDFlMmUyNjdhZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV49jfbZu/uLJq8kWa9hKXE4L2jGCvF3JO89mkFXHCrg3+gjC4K6Mow Uf/byBwf6hBp89DXahks1gn3AvcxmT6cgGbJ9Txo22OAyZvrIZctssO6AhRi+ypt JTMg7FHPN/RHK6iV+VtjmeDmJtKeX+nwMLS3X50Us/bT5xulAwjpLplTNhLNFYMj fG5Ir4ADg03HPY8QdhxKvoNQgLPCIso6NZJImXjgeJA2gEqdUmqztczEeHS4TJjd TOmuT2RYAF8zCQ43byP5hMa7K5KqrUR34Qz6Df0t0O3aM1mSYcUwYPyXvy5mAuPf T/HgMCpLDEiNxgQiH3IDNlkUI3cNxmE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:35:53 2025 by rpki-client