$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa File: bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json) Hash identifier: tSNbGeLTtUJ33vaIBCCJvIMSUeKFu56VPfS4LH/hLdo= Subject key identifier: D9:A7:45:02:B8:73:8D:11:21:14:1B:57:DD:70:78:40:DC:83:7F:21 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584EBB11BB7101FF0B1C04EF2F00 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 23467 IP address blocks: 152.38.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:bb:71:01:ff:0b:1c:04:ef:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=514096f0-ab79-4f84-8c73-71fe2e9b765b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:26:50:51:0d:e6:b3:b4:cb:b6:d5:07:00: 3b:97:8b:73:dc:00:46:28:a0:5a:73:d4:75:96:13: ef:e1:e8:ba:8c:60:0d:9a:ad:22:f0:f6:41:5a:e6: 53:c1:4b:e0:c4:41:f6:16:e3:01:58:c8:da:24:4e: 41:a9:3e:f3:e8:95:66:1f:98:93:8c:4a:da:98:28: 33:9d:39:94:4e:ec:73:8b:21:08:f3:f3:5d:22:a8: d8:75:64:ac:b2:bc:d3:af:ff:e9:7c:02:b2:5d:f9: 48:9a:9f:83:c9:00:80:f5:c0:17:0e:4e:bd:b2:95: f9:e1:ac:b1:1f:d7:a1:70:f7:dc:28:f4:f5:9b:63: 6d:28:be:2c:3f:88:aa:57:bb:51:ca:a5:0f:5e:d2: 26:02:36:6a:35:1a:00:7c:f0:a2:15:e5:30:6d:8b: 38:3a:5f:5c:8f:1d:5b:f7:bd:a2:5f:8b:0a:ae:3e: db:8f:f0:6d:e4:16:a6:61:86:26:4a:31:57:bd:9b: d1:33:f5:ea:fa:35:56:97:68:07:f7:7d:f6:35:61: d1:ca:fa:ed:65:be:8f:48:ae:01:56:d8:74:ad:6b: 78:92:c0:34:a7:48:27:9d:9a:c4:bc:e2:f3:a6:c7: 76:71:93:a5:b1:3e:84:6d:24:a9:b4:38:b9:0a:19: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A7:45:02:B8:73:8D:11:21:14:1B:57:DD:70:78:40:DC:83:7F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1c:32:f6:cc:00:d9:a2:03:83:ba:77:ee:92:06:ba:24:e8: 39:c4:c3:66:f2:c8:a2:7f:62:8f:3e:3a:85:19:32:dd:f8:a3: 02:5b:cd:c9:6d:4e:3d:42:88:6a:a7:90:be:25:be:cb:19:22: 3d:ce:49:53:dd:a1:f4:06:47:53:c4:e5:90:0e:9e:a9:e1:4f: 4b:5c:e6:47:c1:b3:8a:f0:6d:ad:41:8a:01:97:1c:34:0b:c5: d9:59:94:d8:6b:ac:cc:e5:ee:3f:d7:d6:c7:41:7e:f0:bc:c7: d6:51:ba:64:90:3d:3b:d2:a4:95:d2:86:fc:2a:4b:3c:42:10: fd:3f:2f:04:07:37:a0:d2:9a:82:98:82:e6:64:a6:46:e8:55: f6:12:3e:de:b4:b6:be:da:c6:b6:48:69:ad:c5:b7:91:7c:c4: 51:e0:27:43:5c:76:9d:0d:be:e5:6a:2a:c2:f7:52:0e:3f:02: de:a1:6d:df:98:f9:a9:29:44:a9:32:54:ab:11:18:e4:d4:cd: f5:05:e8:26:99:8a:5b:90:e6:c3:09:ec:43:74:9b:60:b3:7c: 8c:c2:ed:63:e5:b2:c4:24:a6:db:4a:11:98:e2:b2:b6:f0:7f: f3:0f:e9:f7:d6:93:1b:08:1b:8d:ae:88:0f:2d:a2:dc:f0:87: d1:aa:81:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EbtxAf8LHATvLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk NTE0MDk2ZjAtYWI3OS00Zjg0LThjNzMtNzFmZTJlOWI3NjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/YmUFEN5rO0y7bVBwA7l4tz3ABGKKBac9R1 lhPv4ei6jGANmq0i8PZBWuZTwUvgxEH2FuMBWMjaJE5BqT7z6JVmH5iTjEramCgz nTmUTuxziyEI8/NdIqjYdWSssrzTr//pfAKyXflImp+DyQCA9cAXDk69spX54ayx H9ehcPfcKPT1m2NtKL4sP4iqV7tRyqUPXtImAjZqNRoAfPCiFeUwbYs4Ol9cjx1b 972iX4sKrj7bj/Bt5BamYYYmSjFXvZvRM/Xq+jVWl2gH9332NWHRyvrtZb6PSK4B Vth0rWt4ksA0p0gnnZrEvOLzpsd2cZOlsT6EbSSptDi5ChknvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmnRQK4c40RIRQbV91weEDcg38hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmQ5Y2RiNWYtZGVhNy0z ODJkLTkxY2UtMTQyMmU4ZmQzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAcMvbMANmiA4O6d+6SBrok6DnEw2byyKJ/Yo8+OoUZMt34owJbzclt Tj1CiGqnkL4lvssZIj3OSVPdofQGR1PE5ZAOnqnhT0tc5kfBs4rwba1BigGXHDQL xdlZlNhrrMzl7j/X1sdBfvC8x9ZRumSQPTvSpJXShvwqSzxCEP0/LwQHN6DSmoKY guZkpkboVfYSPt60tr7axrZIaa3Ft5F8xFHgJ0Ncdp0NvuVqKsL3Ug4/At6hbd+Y +akpRKkyVKsRGOTUzfUF6CaZiluQ5sMJ7EN0m2CzfIzC7WPlssQkpttKEZjisrbw f/MP6ffWkxsIG42uiA8totzwh9Gqgco= -----END CERTIFICATE-----Generated at Sat Aug 8 05:59:49 2026 by rpki-client