$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/c94728f1-0c6e-3dd8-8fe0-fae7b86f7831.roa File: c94728f1-0c6e-3dd8-8fe0-fae7b86f7831.roa (raw, json) Hash identifier: F3Q8XIQNoQOWfFR9m3o9cUB8kbb6hXYxYtXh4olJCNU= Subject key identifier: E4:3A:E7:B2:58:83:8D:17:36:30:65:A0:AF:5A:FA:CC:DC:AA:F3:25 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584EA78843A607150B8CA8C8C680 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/c94728f1-0c6e-3dd8-8fe0-fae7b86f7831.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 152.38.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:43:a6:07:15:0b:8c:a8:c8:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f1704050-e168-4681-bb81-4e970c94528b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:51:ff:6e:f5:e7:51:c2:2d:04:45:fe:5a: 56:0b:b8:1e:72:d6:b3:47:86:e8:c7:62:52:53:40: b6:9b:37:7c:17:50:79:2c:e0:4f:e7:6e:4b:75:7c: c1:37:41:54:42:41:1a:e9:9e:c2:ad:16:aa:07:51: cd:e2:8a:5a:b8:a7:88:58:7a:bb:10:48:f9:ac:d7: 03:2b:55:c8:d8:74:bf:3b:8e:94:58:1c:97:87:40: 66:52:99:74:b1:a6:87:ab:a2:30:e7:30:4b:f1:1e: 75:3b:51:b3:02:ad:09:5d:2b:6f:0d:00:1a:32:80: e1:6e:6c:db:1b:a9:d7:14:fc:59:7f:58:cb:75:90: 0f:49:a6:24:99:81:f2:6f:06:c1:f8:a4:df:c3:10: b4:73:d6:79:c8:c9:48:7f:85:46:08:99:e5:0a:95: 45:06:ee:ea:f8:13:34:62:33:81:b0:f0:ef:e2:31: 7b:2a:0c:ba:d0:d4:8a:07:ad:d5:af:cb:20:9d:8c: 96:ae:84:83:c7:55:9a:ad:3b:f2:8f:28:d7:ac:d8: 49:c1:a4:d4:bc:06:b5:69:a4:48:2a:de:2e:2f:6c: 53:ae:a9:e3:6c:85:b7:56:25:52:18:33:4c:8b:5d: ac:41:78:17:15:4e:52:57:f8:f6:05:66:ba:03:d2: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3A:E7:B2:58:83:8D:17:36:30:65:A0:AF:5A:FA:CC:DC:AA:F3:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/c94728f1-0c6e-3dd8-8fe0-fae7b86f7831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:bc:8c:fb:a1:03:62:7f:fc:cb:36:42:17:fc:31:91:d0:6d: fc:77:51:5a:9a:11:e6:3f:10:b1:b5:8a:6c:a4:fb:9d:04:64: a0:c5:b0:ac:c2:0a:ea:5e:7f:61:f5:80:bf:40:0b:66:6d:76: f4:cd:72:65:90:5e:4e:3a:d9:11:1f:db:bb:c0:6a:50:c2:78: e4:93:fe:7d:b8:91:20:98:ff:79:5f:5e:e0:26:75:e5:79:9b: c0:d5:eb:d5:54:be:7f:a2:99:5e:ce:9a:5e:d2:21:7a:08:c4: b0:98:f2:6f:3d:61:0e:cf:72:88:94:81:3f:25:f5:3f:b6:dc: 94:18:06:aa:93:06:c1:93:c2:77:41:4f:1e:bf:d8:89:ce:6f: 37:1a:c4:e7:fc:f6:79:43:83:6c:05:79:15:f7:64:a4:42:cc: c4:56:68:fd:bc:cb:89:a6:42:01:09:63:39:9f:16:f3:b4:57: da:8e:c6:56:d9:7f:23:cc:f6:41:14:c6:b1:98:95:0a:ea:09: 3d:47:c8:b2:50:60:b3:20:22:71:f8:02:31:f6:3f:e6:fb:96: fb:13:6f:4a:95:26:42:69:f5:f8:e4:c5:82:e1:3f:b8:c6:8f: 66:10:e9:e7:ec:5b:e6:91:52:80:6b:fa:6f:9a:da:f4:5a:de: c7:9a:80:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niEOmBxULjKjIxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjE3MDQwNTAtZTE2OC00NjgxLWJiODEtNGU5NzBjOTQ1MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNVR/27151HCLQRF/lpWC7gectazR4box2JS U0C2mzd8F1B5LOBP525LdXzBN0FUQkEa6Z7CrRaqB1HN4opauKeIWHq7EEj5rNcD K1XI2HS/O46UWByXh0BmUpl0saaHq6Iw5zBL8R51O1GzAq0JXStvDQAaMoDhbmzb G6nXFPxZf1jLdZAPSaYkmYHybwbB+KTfwxC0c9Z5yMlIf4VGCJnlCpVFBu7q+BM0 YjOBsPDv4jF7Kgy60NSKB63Vr8sgnYyWroSDx1WarTvyjyjXrNhJwaTUvAa1aaRI Kt4uL2xTrqnjbIW3ViVSGDNMi12sQXgXFU5SV/j2BWa6A9LnrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQ657JYg40XNjBloK9a+szcqvMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYzk0NzI4ZjEtMGM2ZS0z ZGQ4LThmZTAtZmFlN2I4NmY3ODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC8jPuhA2J//Ms2Qhf8MZHQbfx3UVqaEeY/ELG1imyk+50EZKDFsKzC Cupef2H1gL9AC2ZtdvTNcmWQXk462REf27vAalDCeOST/n24kSCY/3lfXuAmdeV5 m8DV69VUvn+imV7Oml7SIXoIxLCY8m89YQ7PcoiUgT8l9T+23JQYBqqTBsGTwndB Tx6/2InObzcaxOf89nlDg2wFeRX3ZKRCzMRWaP28y4mmQgEJYzmfFvO0V9qOxlbZ fyPM9kEUxrGYlQrqCT1HyLJQYLMgInH4AjH2P+b7lvsTb0qVJkJp9fjkxYLhP7jG j2YQ6efsW+aRUoBr+m+a2vRa3seagFI= -----END CERTIFICATE-----Generated at Sat Aug 8 06:01:10 2026 by rpki-client