$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/19522839-af40-3082-b98a-8cabdddbc670.roa File: 19522839-af40-3082-b98a-8cabdddbc670.roa (raw, json) Hash identifier: 3xtzskovnZsZEzfo7D1u+tYEJa4WV5U34pzMDqDQsDE= Subject key identifier: 48:14:55:92:B8:A9:C2:E5:C0:C5:C4:D2:CF:89:0D:53:49:2A:76:89 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584DD5A5D9127F90E4C042410880 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/19522839-af40-3082-b98a-8cabdddbc670.roa Signing time: Thu 14 May 2026 20:42:55 +0000 ROA not before: Thu 14 May 2026 20:42:55 +0000 ROA not after: Wed 12 Aug 2026 20:42:55 +0000 asID: 14618 IP address blocks: 152.38.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d5:a5:d9:12:7f:90:e4:c0:42:41:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: May 14 20:42:55 2026 GMT Not After : Aug 12 20:42:55 2026 GMT Subject: CN=6fde8343-6709-44b8-acb9-209a3fd61f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:aa:27:c4:3e:77:b0:81:8e:4b:23:b5:f2:40: 3b:09:ab:09:cf:a1:d4:28:9b:cb:30:cd:24:92:c8: 2e:e8:ac:b6:f1:89:ba:15:8d:81:3c:78:43:49:90: 81:3e:28:3a:81:d2:ab:f2:ab:70:70:68:d6:66:84: 6e:67:11:30:31:3e:2f:23:0a:a9:59:87:12:95:38: 5c:41:c4:51:23:cb:33:34:65:6b:99:d5:fe:e9:e1: 07:e5:b5:24:ae:3b:20:03:4f:3a:8f:eb:3b:01:f1: bc:40:de:14:a6:91:cb:5b:a9:59:2b:d5:de:cd:41: e9:ed:8a:1a:03:f0:24:d5:e2:cf:35:e9:f7:3b:17: 87:fb:5c:ee:9a:11:f6:21:ad:71:ac:d3:ba:5e:0d: 26:0a:05:9f:bc:9b:28:3b:35:89:21:5c:7f:7b:9c: 09:d5:49:47:6f:a5:87:b1:f4:2e:ec:dd:f0:a7:7b: 53:b3:6f:78:3e:81:96:2c:57:bd:a0:6b:8b:e7:cf: 57:79:0f:d1:24:50:73:f4:d0:bb:39:47:29:af:e7: af:32:5a:08:b6:69:7b:97:54:c2:fd:06:4d:c1:48: 0a:7e:4a:f7:73:4e:5d:98:88:6b:84:83:1c:79:7e: 06:13:22:96:8e:98:c1:69:13:04:61:23:6b:d7:68: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:14:55:92:B8:A9:C2:E5:C0:C5:C4:D2:CF:89:0D:53:49:2A:76:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/19522839-af40-3082-b98a-8cabdddbc670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:30:fe:1d:21:a8:cd:7d:2e:a8:dc:b2:eb:9a:17:d7:f1:52: 1f:53:d3:31:63:2c:39:9a:8a:2b:b3:c5:e8:ef:3f:a9:4b:e1: 01:7c:f6:eb:96:89:18:52:3b:35:6c:6c:af:64:91:b2:16:e8: 65:4b:e3:9c:77:64:13:69:ff:6f:aa:a5:65:22:ff:c5:2a:38: 10:88:49:8d:7f:6a:36:ee:a5:8a:0d:7e:81:eb:a2:8f:04:5e: 4f:9e:78:35:78:ce:dd:e5:39:18:84:08:9c:46:0a:0f:47:ea: bf:6f:dc:b4:f9:6b:3f:f6:9e:07:5f:74:1b:82:61:e8:3a:b5: 1d:dc:21:77:92:94:1d:be:94:41:6f:6a:9f:60:80:11:71:56: 27:e0:81:fa:dd:12:37:75:5d:bb:53:89:f9:33:e3:1a:49:e5: 15:ff:fb:8a:e8:70:94:b7:80:7b:c0:77:52:1c:ff:9f:f0:dd: 46:f8:6e:fb:ea:59:72:40:ef:eb:96:45:93:98:33:d4:58:cf: 8c:91:ae:c2:96:30:b8:6b:2b:50:b4:73:dd:24:bc:0e:ad:de: 32:44:86:5d:04:fc:87:65:be:87:00:3b:d3:4d:c1:6c:46:64: bc:d8:68:31:a3:fb:96:1b:bf:49:59:e7:e2:be:b8:05:35:5a: b7:98:49:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3VpdkSf5DkwEJBCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDUxNDIwNDI1NVoXDTI2MDgxMjIwNDI1NVowLzEtMCsGA1UEAxMk NmZkZTgzNDMtNjcwOS00NGI4LWFjYjktMjA5YTNmZDYxZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qonxD53sIGOSyO18kA7CasJz6HUKJvLMM0k ksgu6Ky28Ym6FY2BPHhDSZCBPig6gdKr8qtwcGjWZoRuZxEwMT4vIwqpWYcSlThc QcRRI8szNGVrmdX+6eEH5bUkrjsgA086j+s7AfG8QN4UppHLW6lZK9XezUHp7Yoa A/Ak1eLPNen3OxeH+1zumhH2Ia1xrNO6Xg0mCgWfvJsoOzWJIVx/e5wJ1UlHb6WH sfQu7N3wp3tTs294PoGWLFe9oGuL589XeQ/RJFBz9NC7OUcpr+evMloItml7l1TC /QZNwUgKfkr3c05dmIhrhIMceX4GEyKWjpjBaRMEYSNr12hgXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgUVZK4qcLlwMXE0s+JDVNJKnaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMTk1MjI4MzktYWY0MC0z MDgyLWI5OGEtOGNhYmRkZGJjNjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0w/h0hqM19LqjcsuuaF9fxUh9T0zFjLDmaiiuzxejvP6lL4QF89uuW iRhSOzVsbK9kkbIW6GVL45x3ZBNp/2+qpWUi/8UqOBCISY1/ajbupYoNfoHroo8E Xk+eeDV4zt3lORiECJxGCg9H6r9v3LT5az/2ngdfdBuCYeg6tR3cIXeSlB2+lEFv ap9ggBFxVifggfrdEjd1XbtTifkz4xpJ5RX/+4rocJS3gHvAd1Ic/5/w3Ub4bvvq WXJA7+uWRZOYM9RYz4yRrsKWMLhrK1C0c90kvA6t3jJEhl0E/IdlvocAO9NNwWxG ZLzYaDGj+5Ybv0lZ5+K+uAU1WreYSUc= -----END CERTIFICATE-----Generated at Fri May 22 14:18:33 2026 by rpki-client