$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/19522839-af40-3082-b98a-8cabdddbc670.roa File: 19522839-af40-3082-b98a-8cabdddbc670.roa (raw, json) Hash identifier: JGC1DGCW7UWNrayD7bAtXH5x5N39Suqd3ju5mwuRy0o= Subject key identifier: A5:18:14:C5:B5:26:6D:61:E0:44:B7:EC:95:4D:B9:B1:15:C3:24:5B Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584EA788439AA213453220F6BC00 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/19522839-af40-3082-b98a-8cabdddbc670.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 152.38.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:43:9a:a2:13:45:32:20:f6:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=921abb00-fa78-4bea-bfda-11a5dc9d3f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5c:7b:ae:04:de:e0:93:da:64:9b:b6:ee:f7: 6f:68:e6:fc:84:ef:27:de:db:48:f8:e8:de:eb:86: 6a:e7:d8:0b:62:d3:d4:86:f9:3b:3a:13:02:5b:51: c6:2f:a8:bc:f4:9f:a5:52:ec:29:dd:1e:eb:91:19: e4:85:f5:7c:9a:eb:df:6a:1f:99:d6:1d:75:9b:8c: 28:c1:b5:90:9e:be:d2:50:49:c0:c4:27:0c:f9:54: 69:5e:4d:e3:7d:86:c2:ba:c2:c2:9c:f4:b3:76:be: 65:a5:ab:46:0f:5d:da:50:83:44:c5:92:d6:08:38: 87:ec:08:ad:53:7a:4f:d0:c1:c3:b5:13:4c:5d:6b: 1a:cf:df:f2:5c:68:3e:0a:97:6f:3b:3a:2f:75:1b: fd:5b:18:b2:93:f2:16:f6:e8:87:fd:ff:e7:7c:f2: be:32:74:63:ce:7f:aa:4b:63:fd:d9:2c:3e:31:d4: 67:fd:d4:10:77:21:00:30:29:d9:c8:74:64:06:e3: e7:a0:ff:51:27:78:76:14:e3:46:c6:65:e0:63:dd: bc:ef:10:88:21:22:4f:6d:fe:fd:d4:16:15:9c:f8: e6:e5:64:04:ae:57:1f:4b:ed:a8:07:33:90:9b:db: f7:60:d7:01:fd:05:1d:dd:d8:d4:9b:55:7b:67:6d: 77:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:18:14:C5:B5:26:6D:61:E0:44:B7:EC:95:4D:B9:B1:15:C3:24:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/19522839-af40-3082-b98a-8cabdddbc670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ea:d0:dd:d7:d3:dc:ec:bf:65:5c:bf:c3:01:51:b1:84:b8: cd:c3:72:01:98:44:5d:07:5e:88:23:3a:bf:6b:59:12:42:c9: 89:55:39:11:e8:93:1f:8e:2b:88:2a:6c:95:32:d1:86:62:b1: 9a:2e:f1:bd:02:2a:5e:d8:01:2f:84:14:07:be:83:e1:84:4a: 65:d3:3c:91:e9:ce:1c:6b:51:aa:e1:9b:ba:f9:6f:6d:59:cb: f2:b8:5c:91:b0:68:2b:a5:34:62:54:7d:5f:57:67:13:56:8d: 63:b9:95:f2:36:6b:c3:56:d6:ca:a6:ac:8c:06:31:e8:2d:26: 6f:81:c8:76:7f:be:12:50:c5:c5:ce:7f:f5:fb:2d:0b:cb:e1: 3f:ec:58:76:3f:6f:35:79:5d:73:ed:8f:f7:41:89:89:df:e9: 37:d7:e6:25:1f:18:7e:05:03:08:91:c7:80:fe:47:9f:29:a4: e3:09:d2:8b:da:cb:bd:7a:58:16:e5:3d:f1:93:02:09:18:c3: 6a:19:5f:98:a6:ab:c0:a3:a3:e7:18:b6:91:06:80:c5:00:be: 29:74:6d:5d:a4:f6:99:25:82:9a:d5:c9:1a:0d:a4:ae:5a:0d: b8:8d:b0:91:94:83:91:db:af:ea:bc:29:74:12:61:20:cf:6e: 32:50:b7:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niEOaohNFMiD2vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTIxYWJiMDAtZmE3OC00YmVhLWJmZGEtMTFhNWRjOWQzZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVx7rgTe4JPaZJu27vdvaOb8hO8n3ttI+Oje 64Zq59gLYtPUhvk7OhMCW1HGL6i89J+lUuwp3R7rkRnkhfV8muvfah+Z1h11m4wo wbWQnr7SUEnAxCcM+VRpXk3jfYbCusLCnPSzdr5lpatGD13aUINExZLWCDiH7Ait U3pP0MHDtRNMXWsaz9/yXGg+CpdvOzovdRv9Wxiyk/IW9uiH/f/nfPK+MnRjzn+q S2P92Sw+MdRn/dQQdyEAMCnZyHRkBuPnoP9RJ3h2FONGxmXgY9287xCIISJPbf79 1BYVnPjm5WQErlcfS+2oBzOQm9v3YNcB/QUd3djUm1V7Z213LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUYFMW1Jm1h4ES37JVNubEVwyRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMTk1MjI4MzktYWY0MC0z MDgyLWI5OGEtOGNhYmRkZGJjNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrq0N3X09zsv2Vcv8MBUbGEuM3DcgGYRF0HXogjOr9rWRJCyYlVORHo kx+OK4gqbJUy0YZisZou8b0CKl7YAS+EFAe+g+GESmXTPJHpzhxrUarhm7r5b21Z y/K4XJGwaCulNGJUfV9XZxNWjWO5lfI2a8NW1sqmrIwGMegtJm+ByHZ/vhJQxcXO f/X7LQvL4T/sWHY/bzV5XXPtj/dBiYnf6TfX5iUfGH4FAwiRx4D+R58ppOMJ0ova y716WBblPfGTAgkYw2oZX5imq8Cjo+cYtpEGgMUAvil0bV2k9pklgprVyRoNpK5a DbiNsJGUg5Hbr+q8KXQSYSDPbjJQtyg= -----END CERTIFICATE-----Generated at Thu Aug 20 21:56:37 2026 by rpki-client