$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa File: 2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa (raw, json) Hash identifier: oIqf/+hzuTancHCh5bZHqQ4kpPZmYeFRHimPVjZsaQY= Subject key identifier: A0:4F:3E:E0:30:74:B7:42:9D:22:87:74:84:66:89:E9:58:09:84:3F Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584EA794FE7CB4A665C8725C6B00 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:fe:7c:b4:a6:65:c8:72:5c:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=712b9a2a-328c-4e67-955e-09a1f5fe8c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bd:e7:1e:5a:17:1b:46:10:a2:bb:83:12:af: ed:63:74:e0:08:5c:83:af:56:f0:0c:2c:a4:d3:00: 36:0e:d9:69:57:bf:7e:16:7b:1b:83:09:f8:95:d2: 95:38:d6:79:c2:88:9c:11:84:b2:f8:d8:32:01:f1: bf:ff:81:ba:1f:fc:26:75:df:20:fb:36:3a:42:0f: b2:79:56:70:98:05:29:a3:78:d4:32:5f:a9:c9:00: df:f5:bc:b3:da:56:3f:f0:73:c2:82:60:47:66:83: e0:74:50:04:2a:7f:60:e2:92:7d:91:56:2a:d7:bb: f8:3e:31:a9:7b:99:b3:63:9e:f6:16:f7:c5:45:cb: 40:f8:af:94:94:5e:35:7f:9b:66:a9:c3:f4:53:d3: 83:cc:ba:54:1c:62:83:3d:c3:4b:4a:1b:91:cb:29: 75:35:70:c9:a1:8b:ba:0f:95:58:df:bf:d7:ce:64: 6c:2d:2b:c3:4c:28:48:cf:2c:92:a7:a4:44:8b:bf: 52:50:df:7b:b0:e4:a2:40:50:77:d0:ab:da:82:9d: bd:8e:4f:d8:6e:55:5b:91:5c:51:ec:30:65:cf:da: 9b:b8:5d:f5:4d:7c:a5:d9:48:22:c7:29:86:f8:48: 93:56:2e:1a:a8:1f:0e:07:b3:73:40:46:d3:fa:96: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4F:3E:E0:30:74:B7:42:9D:22:87:74:84:66:89:E9:58:09:84:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:71:d3:29:66:93:09:5d:4e:86:9e:c9:c0:39:37:87:21:a6: 68:9d:2e:e8:b8:0d:f7:36:6c:1f:c3:0c:9e:6d:04:28:0f:0b: 90:9e:41:33:c7:28:24:0d:0d:65:56:ed:ec:58:46:9e:82:74: eb:1b:7e:6f:09:69:79:44:98:d6:d4:dc:43:71:4a:40:63:91: c7:14:ab:96:ed:24:92:6e:5b:70:f5:05:ca:1c:87:e1:c0:2a: 97:f7:2f:59:d4:1c:3c:8d:1c:e4:25:63:d6:db:34:77:cd:db: 53:bf:7d:23:63:46:3a:f4:ba:7f:13:0b:e9:01:5d:ff:fe:f4: db:7a:c3:0a:33:28:0e:7f:2d:c5:aa:24:ab:ac:72:86:4b:33: 9d:68:5e:7c:d5:56:8c:66:a9:d4:35:62:c4:13:97:5d:88:d1: 1c:b9:60:ee:9f:70:f6:90:35:d4:cc:24:95:34:07:0e:da:35: dc:6d:6c:70:42:a4:34:22:8a:f1:53:1f:0f:ef:49:68:66:8f: 87:15:0f:0c:ec:0d:04:ee:d9:00:0f:75:35:ae:34:63:57:c4: 78:1f:a5:a5:c3:08:40:22:d4:d6:3d:18:da:7f:75:92:cd:f6: d6:93:35:9b:5b:49:99:77:4a:4b:f2:0d:19:08:6e:4b:b8:bd: fb:81:0a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlP58tKZlyHJcawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzEyYjlhMmEtMzI4Yy00ZTY3LTk1NWUtMDlhMWY1ZmU4YzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb3nHloXG0YQoruDEq/tY3TgCFyDr1bwDCyk 0wA2DtlpV79+Fnsbgwn4ldKVONZ5woicEYSy+NgyAfG//4G6H/wmdd8g+zY6Qg+y eVZwmAUpo3jUMl+pyQDf9byz2lY/8HPCgmBHZoPgdFAEKn9g4pJ9kVYq17v4PjGp e5mzY572FvfFRctA+K+UlF41f5tmqcP0U9ODzLpUHGKDPcNLShuRyyl1NXDJoYu6 D5VY37/XzmRsLSvDTChIzyySp6REi79SUN97sOSiQFB30Kvagp29jk/YblVbkVxR 7DBlz9qbuF31TXyl2UgixymG+EiTVi4aqB8OB7NzQEbT+pZpBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBPPuAwdLdCnSKHdIRmielYCYQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMmI0ZTZiNzAtMzlkZC0z ZmQzLTkxZGEtODdkNGM5NmM5ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJx0ylmkwldToaeycA5N4chpmidLui4Dfc2bB/DDJ5tBCgPC5CeQTPH KCQNDWVW7exYRp6CdOsbfm8JaXlEmNbU3ENxSkBjkccUq5btJJJuW3D1Bcoch+HA Kpf3L1nUHDyNHOQlY9bbNHfN21O/fSNjRjr0un8TC+kBXf/+9Nt6wwozKA5/LcWq JKuscoZLM51oXnzVVoxmqdQ1YsQTl12I0Ry5YO6fcPaQNdTMJJU0Bw7aNdxtbHBC pDQiivFTHw/vSWhmj4cVDwzsDQTu2QAPdTWuNGNXxHgfpaXDCEAi1NY9GNp/dZLN 9taTNZtbSZl3SkvyDRkIbku4vfuBClk= -----END CERTIFICATE-----Generated at Sat Aug 8 05:59:02 2026 by rpki-client