$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa File: 2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa (raw, json) Hash identifier: 0JBYaWKOZxTL1v0q7MeI/INiT7pzlkSKKUihCJPxQ7o= Subject key identifier: E8:74:B0:C2:42:77:A4:53:31:5C:1F:D2:B0:2A:A5:01:D9:D0:37:82 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584B4FDC78FC594C2841C8C86CC0 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:78:fc:59:4c:28:41:c8:c8:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=23a2b48e-9abe-4e81-9860-f9ca9b0eca3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a5:2f:c1:93:de:42:63:e5:30:30:c1:58:87: 3d:7b:90:e8:eb:4c:96:71:0f:27:31:62:64:46:d5: bd:48:ff:ea:bd:cb:ba:7a:30:06:e4:d1:59:7f:53: 2d:86:21:70:49:b7:83:62:c0:2f:58:37:d7:f2:a3: 33:e4:38:db:2c:29:87:63:c9:ff:43:21:ce:95:16: 62:69:72:b3:69:96:5a:73:fe:92:83:fc:71:a8:04: e4:34:10:e2:cf:3f:ef:a8:ab:13:f2:20:d0:0e:8b: 78:3e:5b:54:92:67:a0:7f:5c:f3:60:d8:d0:01:24: cd:58:a9:a3:3e:db:b2:02:b8:c6:dd:00:eb:c5:15: 05:63:e0:a2:8a:bc:10:e0:41:de:16:26:99:27:65: f4:5b:04:3f:18:ce:fb:f6:ab:83:1b:41:ad:06:49: b4:25:2e:22:b7:ac:40:03:b2:21:41:01:d5:7c:96: 84:e6:ce:fb:9e:13:b6:a7:9b:a4:90:b2:ba:4b:07: 3b:50:95:09:65:39:c6:2e:08:d1:21:a3:dc:54:09: c1:c2:cf:ce:10:c2:9b:c6:ae:3b:c8:d9:04:ec:8f: c1:67:e0:e7:31:d3:3e:c8:14:04:1e:68:3b:fd:9c: 2b:92:9b:c7:0a:c2:62:67:6c:aa:3b:ca:72:7a:54: 58:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:74:B0:C2:42:77:A4:53:31:5C:1F:D2:B0:2A:A5:01:D9:D0:37:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:67:61:00:bd:75:c5:c0:93:f1:c7:76:cb:30:c9:2d:dc:49: c7:80:44:a5:6a:ea:62:48:d8:3b:bc:24:c6:94:c4:c4:f8:2a: 24:9c:79:b5:5c:11:33:36:07:7c:da:ee:46:07:a7:11:d3:66: 1f:01:ce:f3:bd:30:4e:5f:fb:bd:3b:bf:1d:d0:28:d0:97:15: 58:3e:b0:96:76:aa:5f:9f:c7:e1:37:fc:fb:8d:5f:e4:b2:d4: b5:05:b7:3b:0b:5d:d0:9e:90:8d:fe:be:58:b4:cc:e1:69:04: e9:fb:3b:bf:66:e8:47:3b:d7:64:10:4a:ca:58:de:00:ec:c2: bd:e7:11:49:13:75:51:fd:e8:9d:64:3f:5c:34:dc:a5:ae:b6: a0:60:8d:04:98:5f:22:82:17:8c:6c:fb:39:b3:42:21:49:73: 1f:06:c0:d7:b1:d3:c4:cf:4d:50:a5:fe:14:28:2e:87:76:1d: 54:7a:3b:40:a6:a5:be:0e:5f:d1:4d:96:c7:9d:cb:0a:0e:20: 0d:d2:9f:58:67:f7:f5:1c:70:a9:f0:92:04:22:4d:32:aa:b9: 55:64:9c:4d:dc:c7:0d:29:13:ef:18:9c:af:5d:41:06:d2:30: 8f:ae:7e:d8:b7:f4:43:df:4f:78:ea:9e:1d:ac:98:9a:d6:38: 74:1e:ed:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3Hj8WUwoQcjIbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk MjNhMmI0OGUtOWFiZS00ZTgxLTk4NjAtZjljYTliMGVjYTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqUvwZPeQmPlMDDBWIc9e5Do60yWcQ8nMWJk RtW9SP/qvcu6ejAG5NFZf1MthiFwSbeDYsAvWDfX8qMz5DjbLCmHY8n/QyHOlRZi aXKzaZZac/6Sg/xxqATkNBDizz/vqKsT8iDQDot4PltUkmegf1zzYNjQASTNWKmj PtuyArjG3QDrxRUFY+CiirwQ4EHeFiaZJ2X0WwQ/GM779quDG0GtBkm0JS4it6xA A7IhQQHVfJaE5s77nhO2p5ukkLK6Swc7UJUJZTnGLgjRIaPcVAnBws/OEMKbxq47 yNkE7I/BZ+DnMdM+yBQEHmg7/ZwrkpvHCsJiZ2yqO8pyelRYSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOh0sMJCd6RTMVwf0rAqpQHZ0DeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMmI0ZTZiNzAtMzlkZC0z ZmQzLTkxZGEtODdkNGM5NmM5ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVnYQC9dcXAk/HHdsswyS3cSceARKVq6mJI2Du8JMaUxMT4KiScebVc ETM2B3za7kYHpxHTZh8BzvO9ME5f+707vx3QKNCXFVg+sJZ2ql+fx+E3/PuNX+Sy 1LUFtzsLXdCekI3+vli0zOFpBOn7O79m6Ec712QQSspY3gDswr3nEUkTdVH96J1k P1w03KWutqBgjQSYXyKCF4xs+zmzQiFJcx8GwNex08TPTVCl/hQoLod2HVR6O0Cm pb4OX9FNlsedywoOIA3Sn1hn9/UccKnwkgQiTTKquVVknE3cxw0pE+8YnK9dQQbS MI+ufti39EPfT3jqnh2smJrWOHQe7fM= -----END CERTIFICATE-----Generated at Tue Oct 28 11:55:38 2025 by rpki-client