$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa File: 03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa (raw, json) Hash identifier: Lo+a+uYQ9atYFk0W8vcQxngb9v1hUXIrRRz7v2acJzc= Subject key identifier: B8:89:8C:BA:7F:18:B7:22:B1:AA:CD:BA:E0:C1:6E:16:B9:03:21:C1 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584F4975D29200C084E3148BC7C0 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:d2:92:00:c0:84:e3:14:8b:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6dc1c7fc-11a5-4560-9a6f-2cb060fac517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:77:23:73:d2:1e:67:07:b0:c5:5d:66:9d: 11:36:0d:40:2c:af:bd:54:62:cc:c4:1b:13:1f:8e: 30:61:da:35:c7:3a:47:55:ea:0b:bc:54:97:9f:2d: b9:ce:ce:2c:5f:09:b4:7f:73:54:6e:aa:36:40:82: 67:51:70:f1:78:7a:8e:6c:86:15:1e:a2:3d:62:8a: cf:fe:27:3e:6b:7b:01:69:08:1b:1a:62:b6:e8:88: 13:c9:38:94:db:87:cf:b1:11:e5:cf:83:a0:4e:fb: cd:25:0b:a4:96:d2:27:e2:ea:ab:9a:7a:97:ad:96: c3:23:03:9c:85:64:55:99:20:79:45:04:88:20:c6: 3d:c3:5e:d4:76:e4:b9:ff:e3:fc:b0:12:d3:92:0f: 5d:32:cf:13:06:6b:b8:fd:61:c1:26:c2:0a:ed:c3: c6:a2:5e:86:f0:67:58:d1:c6:d4:b9:58:c1:f2:47: e7:8a:4a:28:3b:5d:90:19:87:88:b0:26:9b:81:50: f6:b6:70:75:4b:81:b1:8d:2f:ed:c5:ac:fe:40:35: 96:ce:d7:0f:06:36:f8:a7:db:d1:af:5e:22:28:f4: 18:47:20:0f:7f:ee:ca:e0:7d:e1:2c:8b:22:ef:95: eb:67:15:ff:af:df:76:9c:ce:a0:be:a4:b5:cc:9e: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:89:8C:BA:7F:18:B7:22:B1:AA:CD:BA:E0:C1:6E:16:B9:03:21:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:53:73:ba:02:f8:08:2c:cb:7b:dd:65:76:04:2f:6a:fb:47: f2:db:44:12:ad:30:1f:2e:10:93:69:68:c6:b4:1a:34:56:62: 33:52:e5:4b:bb:08:96:a7:1a:45:a8:a8:0e:b5:67:34:b2:87: 6a:de:9f:66:ee:4d:cb:cb:b4:06:91:7e:ff:eb:62:01:a7:7b: ad:fb:7d:b9:3e:d4:87:f3:12:a7:a3:4d:53:9f:1e:e3:f8:96: c5:b2:9d:34:9f:87:4c:e7:d4:8c:5b:c6:46:8b:b0:a8:27:1a: 91:73:7f:8c:8b:c4:c5:63:98:c8:6f:b0:30:e8:79:42:11:cb: 88:32:fe:1a:ed:5b:d8:1d:64:5c:a2:21:06:b8:ba:91:98:ee: 0f:76:84:13:96:92:5d:c9:15:c9:31:35:93:4b:f9:68:0a:df: 08:e3:9c:96:d7:89:be:8a:c0:20:35:da:9f:9b:cc:1e:da:b4: 66:d4:9a:87:20:02:e3:3b:eb:71:7a:6a:b1:e0:3f:05:19:9f: 9e:61:40:15:9e:a6:d5:52:c3:16:2a:a9:cb:8d:4a:e0:93:17: 65:67:f2:20:08:00:a3:ea:25:9a:98:b3:46:71:92:1f:30:ea: 7f:a3:fc:31:c8:cb:9d:d6:35:94:4f:07:5f:03:52:da:ab:85: 22:ce:dc:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JddKSAMCE4xSLx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmRjMWM3ZmMtMTFhNS00NTYwLTlhNmYtMmNiMDYwZmFjNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfJ3I3PSHmcHsMVdZp0RNg1ALK+9VGLMxBsT H44wYdo1xzpHVeoLvFSXny25zs4sXwm0f3NUbqo2QIJnUXDxeHqObIYVHqI9YorP /ic+a3sBaQgbGmK26IgTyTiU24fPsRHlz4OgTvvNJQukltIn4uqrmnqXrZbDIwOc hWRVmSB5RQSIIMY9w17UduS5/+P8sBLTkg9dMs8TBmu4/WHBJsIK7cPGol6G8GdY 0cbUuVjB8kfnikooO12QGYeIsCabgVD2tnB1S4GxjS/txaz+QDWWztcPBjb4p9vR r14iKPQYRyAPf+7K4H3hLIsi75XrZxX/r992nM6gvqS1zJ4rPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiJjLp/GLcisarNuuDBbha5AyHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDNjYmE0NGYtZTRlOS0z YjVjLWI3ZGQtZDFlMmUyNjdhZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5Tc7oC+Agsy3vdZXYEL2r7R/LbRBKtMB8uEJNpaMa0GjRWYjNS5Uu7 CJanGkWoqA61ZzSyh2ren2buTcvLtAaRfv/rYgGne637fbk+1IfzEqejTVOfHuP4 lsWynTSfh0zn1IxbxkaLsKgnGpFzf4yLxMVjmMhvsDDoeUIRy4gy/hrtW9gdZFyi IQa4upGY7g92hBOWkl3JFckxNZNL+WgK3wjjnJbXib6KwCA12p+bzB7atGbUmocg AuM763F6arHgPwUZn55hQBWeptVSwxYqqcuNSuCTF2Vn8iAIAKPqJZqYs0Zxkh8w 6n+j/DHIy53WNZRPB18DUtqrhSLO3Jk= -----END CERTIFICATE-----Generated at Sat Sep 26 00:07:10 2026 by rpki-client