$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa File: bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa (raw, json) Hash identifier: CvCZzIZTRtp7mAN4/fzbXv2cH2VX3Thkr68XKyXGN/E= Subject key identifier: 40:BF:B6:15:FC:68:E8:73:20:A2:B2:AF:0C:3A:60:3B:95:90:C1:FA Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584F497300AB64B0DF91C3D37400 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 152.38.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:00:ab:64:b0:df:91:c3:d3:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9df1569d-6a63-4258-92cf-50ca1f9957a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cf:b5:c1:3a:f2:b4:24:5f:70:21:9d:cd:76: 55:a8:9a:d3:b8:6c:ba:ba:77:2e:00:5d:9d:2f:0f: ff:d0:aa:c3:b1:9a:6a:22:7a:e3:c0:51:67:11:56: 36:72:a2:39:8c:3e:3e:5e:c1:85:20:44:d6:fb:b4: 85:fe:73:7b:a6:43:87:7a:34:a1:4a:a6:16:52:e3: e7:77:f0:78:73:ab:f2:a6:b5:84:fa:f8:78:72:6f: 2e:5a:a5:40:7c:e4:0e:06:bf:52:42:88:b7:84:f2: 2d:da:e2:c4:1b:45:8e:19:1b:b6:0e:ba:59:2b:08: 3e:dc:6c:7e:05:51:84:4c:08:da:24:0e:b6:6c:23: e6:04:62:ec:2d:a3:0b:37:61:51:68:f7:78:d8:94: a8:4d:fc:c5:11:4c:5d:b9:f3:2f:1d:2d:3e:a6:91: 89:40:4e:b1:56:c9:49:ce:15:ff:bc:ad:66:5d:12: e3:32:0a:9a:81:9a:8f:1e:cb:10:05:14:47:0e:8f: d4:a3:8c:22:7f:0e:1d:12:95:a3:57:7d:39:dd:69: b6:da:b7:9c:42:ea:3d:57:fe:69:ca:38:37:1d:60: 1d:76:1f:d8:97:93:62:f0:05:f1:fa:19:cc:7d:25: e0:59:7c:97:d0:7c:70:a7:65:6e:47:32:0a:7d:7d: b8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BF:B6:15:FC:68:E8:73:20:A2:B2:AF:0C:3A:60:3B:95:90:C1:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4d:3d:cd:a8:c1:c2:1c:73:3b:7b:c5:05:33:28:03:f6:35: c0:a8:f0:06:74:ea:5f:f0:5f:f2:75:3a:d5:6c:8e:42:1d:42: 5e:0e:67:50:de:4b:84:6b:61:95:8f:ed:94:16:cd:f8:df:89: 88:be:ee:0d:14:c6:1d:8c:8d:fb:3b:ed:b1:93:3c:c3:42:f5: 3a:e8:9d:ea:50:6a:7b:08:ab:f4:4a:43:46:aa:23:57:be:06: bd:91:08:ea:6a:8c:ed:4e:4f:eb:14:22:97:ea:a5:c1:da:3b: bc:94:c6:ec:79:5d:61:ca:4f:47:56:aa:70:1a:e4:a4:ff:57: a6:03:e7:9b:2e:85:3a:ee:5a:5a:bf:9e:50:2f:39:bb:21:a1: 04:ba:40:74:2f:dd:5a:93:76:c3:b8:7e:b9:66:ac:de:8c:be: a8:7e:21:80:bc:c0:0b:e3:8f:4a:34:b3:c7:13:f2:38:b2:66: d4:e0:b8:68:79:6b:88:2c:d4:9b:24:36:10:f8:2d:c3:99:f2: 42:47:8a:fe:74:de:f5:ed:38:02:b4:2d:02:9b:8c:67:3b:9c: 52:8e:96:8c:95:90:ff:2d:d1:e4:80:06:c1:27:2f:37:b7:fb: 8a:ac:6c:db:cf:7e:65:b7:72:71:2b:c9:f8:0c:54:87:d1:56: da:2d:c0:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwCrZLDfkcPTdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWRmMTU2OWQtNmE2My00MjU4LTkyY2YtNTBjYTFmOTk1N2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s+1wTrytCRfcCGdzXZVqJrTuGy6uncuAF2d Lw//0KrDsZpqInrjwFFnEVY2cqI5jD4+XsGFIETW+7SF/nN7pkOHejShSqYWUuPn d/B4c6vyprWE+vh4cm8uWqVAfOQOBr9SQoi3hPIt2uLEG0WOGRu2DrpZKwg+3Gx+ BVGETAjaJA62bCPmBGLsLaMLN2FRaPd42JSoTfzFEUxdufMvHS0+ppGJQE6xVslJ zhX/vK1mXRLjMgqagZqPHssQBRRHDo/Uo4wifw4dEpWjV3053Wm22recQuo9V/5p yjg3HWAddh/Yl5Ni8AXx+hnMfSXgWXyX0Hxwp2VuRzIKfX24KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC/thX8aOhzIKKyrww6YDuVkMH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmJiNzU0NmUtZTAwYS0z ZDFmLWE1ZWMtNzY2ZTM2OWUxZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxNPc2owcIcczt7xQUzKAP2NcCo8AZ06l/wX/J1OtVsjkIdQl4OZ1De S4RrYZWP7ZQWzfjfiYi+7g0Uxh2Mjfs77bGTPMNC9TronepQansIq/RKQ0aqI1e+ Br2RCOpqjO1OT+sUIpfqpcHaO7yUxux5XWHKT0dWqnAa5KT/V6YD55suhTruWlq/ nlAvObshoQS6QHQv3VqTdsO4frlmrN6Mvqh+IYC8wAvjj0o0s8cT8jiyZtTguGh5 a4gs1JskNhD4LcOZ8kJHiv503vXtOAK0LQKbjGc7nFKOloyVkP8t0eSABsEnLze3 +4qsbNvPfmW3cnEryfgMVIfRVtotwDM= -----END CERTIFICATE-----Generated at Tue Oct 20 22:10:39 2026 by rpki-client