$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa File: bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json) Hash identifier: KQUoTGVpKb8pvYrWNkNZcqnyLaoHr4wQnJadfimvoaI= Subject key identifier: 90:4B:2D:46:71:E7:55:34:E6:8C:E1:4A:EB:57:D0:76:01:B6:78:30 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584A9900C31C8134ED51997BD400 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 23467 IP address blocks: 152.38.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c3:1c:81:34:ed:51:99:7b:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=a49ca853-af66-4038-934d-fb2fe09b29ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:01:89:92:bf:20:d1:78:65:9f:26:05:66:54: 87:e4:b6:ca:74:72:d8:09:bc:04:45:23:5d:25:94: 3a:a8:94:2c:af:ff:cd:8a:a7:83:4f:6f:fa:0d:b3: c5:1f:b5:4d:1f:dc:c3:01:cd:8f:a7:16:fd:06:b3: e7:1d:47:1c:bd:f0:47:5d:50:c1:3b:52:2b:38:31: ed:f7:ec:d3:52:62:eb:8b:34:26:f7:bb:ce:e7:6d: 66:74:29:9d:01:c3:1b:e1:e5:ef:de:3a:c6:36:94: db:e5:2b:8c:b5:a7:86:ac:ca:79:e7:07:7f:e3:74: 54:6c:e8:94:fb:02:2c:04:40:cb:6d:5e:d5:4b:98: 5f:bf:7c:e9:dc:fe:2a:3d:bf:97:32:29:56:2c:48: ad:92:dc:a0:8d:bd:97:d0:89:29:18:5c:4b:2d:4b: 52:aa:c6:53:e1:00:87:2b:60:d6:4b:30:57:ba:f3: 29:95:0d:ff:2d:73:26:f2:b0:34:5d:f4:ab:a6:0c: 11:43:15:0f:29:b6:00:e5:85:35:12:29:d7:45:8a: e5:de:cb:a3:bb:6c:c2:fb:51:34:a6:f6:ce:12:11: c8:56:29:06:53:5e:39:d0:70:06:d4:c6:dd:db:81: db:97:99:0e:ca:13:ce:2f:9c:4e:f3:6f:c9:65:f0: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4B:2D:46:71:E7:55:34:E6:8C:E1:4A:EB:57:D0:76:01:B6:78:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:93:e6:4e:be:49:c2:c7:28:5f:6d:98:9b:da:15:9c:69:89: cf:25:f9:76:f2:c2:1a:54:b6:b2:02:5f:77:bd:39:40:85:43: c8:00:e0:81:0c:dd:f3:79:98:9a:94:0c:12:a1:36:2a:7c:ec: d6:27:3d:0a:86:14:c3:3f:92:1a:37:7e:20:34:b9:97:32:cf: 2a:79:9f:2a:c5:b1:84:f2:1e:d7:b8:f9:bc:3a:43:2d:62:f9: 68:51:58:96:a4:2b:f5:d8:99:4e:d4:f7:34:e6:25:4d:c9:32: c3:57:6e:b7:9c:9f:64:52:ea:8e:f9:28:50:dc:44:ec:c2:60: 55:23:22:e6:f7:f4:18:3f:b6:18:9c:95:6d:25:00:65:28:01: 3e:81:f8:78:b7:1e:2a:fe:27:9f:bc:75:91:40:e1:1f:8a:e0: ff:b3:40:06:29:18:e0:98:5f:54:c1:82:85:ff:a1:4a:7b:78: f3:a6:6f:21:89:7f:45:02:b9:6d:62:8b:5e:75:ee:cc:34:4a: b4:18:5c:49:ee:be:74:1f:5c:9b:66:df:ff:48:0b:19:ff:f7: 27:0c:27:44:57:79:72:dd:4a:f6:0b:45:1f:2c:d4:52:5e:9b: 3d:65:7f:04:61:0f:b7:f7:98:48:5c:a4:40:0a:1f:33:44:e7: f0:e0:be:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMMcgTTtUZl71AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YTQ5Y2E4NTMtYWY2Ni00MDM4LTkzNGQtZmIyZmUwOWIyOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAGJkr8g0XhlnyYFZlSH5LbKdHLYCbwERSNd JZQ6qJQsr//NiqeDT2/6DbPFH7VNH9zDAc2Ppxb9BrPnHUccvfBHXVDBO1IrODHt 9+zTUmLrizQm97vO521mdCmdAcMb4eXv3jrGNpTb5SuMtaeGrMp55wd/43RUbOiU +wIsBEDLbV7VS5hfv3zp3P4qPb+XMilWLEitktygjb2X0IkpGFxLLUtSqsZT4QCH K2DWSzBXuvMplQ3/LXMm8rA0XfSrpgwRQxUPKbYA5YU1EinXRYrl3suju2zC+1E0 pvbOEhHIVikGU1450HAG1Mbd24Hbl5kOyhPOL5xO82/JZfB+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBLLUZx51U05ozhSutX0HYBtngwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmQ5Y2RiNWYtZGVhNy0z ODJkLTkxY2UtMTQyMmU4ZmQzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiT5k6+ScLHKF9tmJvaFZxpic8l+XbywhpUtrICX3e9OUCFQ8gA4IEM 3fN5mJqUDBKhNip87NYnPQqGFMM/kho3fiA0uZcyzyp5nyrFsYTyHte4+bw6Qy1i +WhRWJakK/XYmU7U9zTmJU3JMsNXbrecn2RS6o75KFDcROzCYFUjIub39Bg/thic lW0lAGUoAT6B+Hi3Hir+J5+8dZFA4R+K4P+zQAYpGOCYX1TBgoX/oUp7ePOmbyGJ f0UCuW1ii1517sw0SrQYXEnuvnQfXJtm3/9ICxn/9ycMJ0RXeXLdSvYLRR8s1FJe mz1lfwRhD7f3mEhcpEAKHzNE5/Dgvt8= -----END CERTIFICATE-----Generated at Tue Jul 22 11:51:24 2025 by rpki-client