$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa File: bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa (raw, json) Hash identifier: yynz6D+GpxLt8btMMizupdLMef+uCp686+qg84ui09o= Subject key identifier: 92:8B:F7:0D:EB:62:35:02:77:95:0E:9D:FA:35:12:89:65:7F:2B:35 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584EA787121ACD2A0D69114A3C80 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8075 IP address blocks: 152.38.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:12:1a:cd:2a:0d:69:11:4a:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0015577c-843d-4c73-bf53-9226f4f31f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:56:0f:0b:0a:48:ff:b0:47:cb:7c:a3:8d:38: 24:17:2f:77:67:d3:67:b4:3e:7e:81:a8:37:f2:2a: ac:21:91:0e:cd:b9:0a:a1:f1:a0:a1:75:23:50:6f: bc:e1:88:6e:ac:be:24:e3:7a:94:75:f0:12:90:d5: d1:84:87:95:c6:9f:7b:d8:d8:cd:43:3f:56:53:56: 26:54:e9:05:01:91:6f:8e:0e:c4:73:af:d0:2a:52: 57:15:c1:6e:7b:2d:25:ac:e1:13:07:a4:64:92:48: 6f:89:c1:e8:9e:97:8e:b5:0c:94:7d:ac:41:bc:5b: ed:95:ab:e0:d3:cf:d3:4e:60:58:60:04:3c:9e:3f: b4:79:73:dc:20:d9:7b:ed:35:ce:48:17:de:70:1c: d7:e2:4e:6a:10:db:6f:7f:57:ce:38:33:9d:e9:a3: fd:40:59:c3:5e:08:b0:6f:dd:d4:ec:50:5e:be:14: 25:6c:b5:fd:ee:84:45:2f:5e:7f:1a:e4:3a:47:80: 2e:32:2d:45:d5:89:c8:4f:f9:a9:c1:5b:d0:cd:80: 13:21:af:28:6f:74:bd:ca:c7:99:4a:7e:e0:65:6b: 6c:6d:2c:63:a2:04:b2:76:c8:43:d6:76:2a:0d:22: 9e:57:07:bb:09:7a:68:f1:7e:39:f9:f1:10:bb:2b: 84:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8B:F7:0D:EB:62:35:02:77:95:0E:9D:FA:35:12:89:65:7F:2B:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bbb7546e-e00a-3d1f-a5ec-766e369e1eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8d:ca:2a:f9:37:b1:3a:9d:66:96:d2:93:c7:5d:a1:f5:d3: 72:53:ac:97:c4:af:b4:87:be:44:09:a1:01:df:41:de:65:63: b8:d1:c3:da:71:3b:88:9f:95:2c:e4:f3:f6:60:ed:e7:4c:2c: 0f:a1:d3:bc:7e:d5:43:d6:23:0a:82:bc:b5:06:8c:7c:cd:4b: 28:96:99:fc:97:af:a1:61:a0:cf:16:0a:fe:62:00:23:7a:db: e5:df:96:31:88:df:96:31:c5:d9:5c:b0:0f:08:43:54:08:36: 2f:2f:6c:a1:18:aa:0a:d7:bd:4e:20:f7:b3:38:45:78:76:e1: 6e:d2:93:d2:c4:29:75:32:d7:ad:3d:e6:6f:6e:ff:00:ec:a6: c8:8b:dd:7b:bd:51:85:3e:f9:56:18:5c:47:cf:ff:7d:d2:32: ea:a6:c5:bb:b8:3f:72:c1:b6:d9:b4:c2:9d:46:86:d2:17:45: 2e:96:c3:b8:fa:9e:91:29:9a:74:6d:51:6f:8f:be:c4:cd:8e: 82:ec:bf:a4:1d:fb:70:35:89:2e:3c:45:41:07:d4:1a:ce:b9: 63:11:77:e1:f9:4e:a5:59:b6:85:63:26:72:ff:d9:71:58:ba: 51:13:ab:ca:80:12:9b:6f:cc:87:ba:c5:8b:fa:21:93:81:73: 9a:c3:b4:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhxIazSoNaRFKPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDAxNTU3N2MtODQzZC00YzczLWJmNTMtOTIyNmY0ZjMxZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21YPCwpI/7BHy3yjjTgkFy93Z9NntD5+gag3 8iqsIZEOzbkKofGgoXUjUG+84YhurL4k43qUdfASkNXRhIeVxp972NjNQz9WU1Ym VOkFAZFvjg7Ec6/QKlJXFcFuey0lrOETB6RkkkhvicHonpeOtQyUfaxBvFvtlavg 08/TTmBYYAQ8nj+0eXPcINl77TXOSBfecBzX4k5qENtvf1fOODOd6aP9QFnDXgiw b93U7FBevhQlbLX97oRFL15/GuQ6R4AuMi1F1YnIT/mpwVvQzYATIa8ob3S9yseZ Sn7gZWtsbSxjogSydshD1nYqDSKeVwe7CXpo8X45+fEQuyuEJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKL9w3rYjUCd5UOnfo1Eollfys1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmJiNzU0NmUtZTAwYS0z ZDFmLWE1ZWMtNzY2ZTM2OWUxZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6Nyir5N7E6nWaW0pPHXaH103JTrJfEr7SHvkQJoQHfQd5lY7jRw9px O4iflSzk8/Zg7edMLA+h07x+1UPWIwqCvLUGjHzNSyiWmfyXr6FhoM8WCv5iACN6 2+XfljGI35YxxdlcsA8IQ1QINi8vbKEYqgrXvU4g97M4RXh24W7Sk9LEKXUy1609 5m9u/wDspsiL3Xu9UYU++VYYXEfP/33SMuqmxbu4P3LBttm0wp1GhtIXRS6Ww7j6 npEpmnRtUW+PvsTNjoLsv6Qd+3A1iS48RUEH1BrOuWMRd+H5TqVZtoVjJnL/2XFY ulETq8qAEptvzIe6xYv6IZOBc5rDtMI= -----END CERTIFICATE-----Generated at Sat Sep 5 00:26:00 2026 by rpki-client