$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa File: f580b67a-767d-31bd-8089-26fba68e71a7.roa (raw, json) Hash identifier: 9TfqYK9lKYob9U1dxuNOFYo+f+5hd8+IBIU9uWmJ5vU= Subject key identifier: 3E:6D:7B:E0:9F:5E:0E:B2:8D:72:66:0A:0D:BF:46:5F:DD:63:D1:56 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584AE8913096EAB69EF7DD5EB380 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 396982 IP address blocks: 152.38.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:30:96:ea:b6:9e:f7:dd:5e:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=8be94fd7-eed5-492b-9a55-17c7c27b91d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:50:00:6f:8c:a5:b1:35:47:07:ba:42:81: ff:8f:2e:26:21:34:13:7e:8a:eb:d5:cd:2b:df:06: d2:2a:69:2e:c7:b0:98:86:cb:c6:5a:c4:91:b9:a9: 7d:bf:77:de:3b:38:25:e3:99:be:cf:79:04:87:01: d3:2a:dd:8d:35:08:a0:9f:84:50:37:53:98:10:9a: 25:9f:e0:c4:69:7d:02:00:1f:23:f4:b4:bd:64:2a: 07:03:08:ab:df:14:2d:ae:32:bd:6e:cf:dd:9e:1d: 6c:65:47:80:93:ba:21:a1:2f:60:ac:b8:c7:19:f3: df:ca:2f:92:2b:80:9b:d0:9e:ca:ff:6f:6a:0f:a5: 5c:9f:f6:94:ee:a4:f7:da:ab:6d:b5:49:26:70:c9: 7f:ec:78:6c:b7:16:33:b1:27:21:58:64:0a:b6:49: db:5a:42:ca:63:50:a9:b1:54:8f:be:ad:98:cc:58: ee:c1:99:ca:19:76:fb:75:f5:23:e9:6f:c9:36:8a: 44:30:38:3b:da:90:a5:1b:bb:24:d3:ec:83:0a:dc: d6:4f:d3:cc:62:3c:ff:2f:5f:d8:73:61:4c:99:f3: 53:32:76:91:d4:3e:48:4c:63:36:8f:52:1c:e4:77: c3:29:d7:28:62:1a:4e:52:2f:c2:ca:3b:6d:e7:64: 80:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6D:7B:E0:9F:5E:0E:B2:8D:72:66:0A:0D:BF:46:5F:DD:63:D1:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/f580b67a-767d-31bd-8089-26fba68e71a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:bc:c3:68:40:b0:c1:bd:eb:c8:83:7c:7c:c2:2e:33:61:69: 1f:12:ad:bb:5e:b1:44:09:95:82:dd:f0:46:a7:93:97:0f:93: a9:f4:f2:95:9b:ab:00:c1:c9:26:f8:a9:0e:64:f8:b9:76:84: 38:bc:5d:c1:95:a4:96:2a:06:ba:2a:05:22:fe:1e:7f:03:67: 80:d5:da:09:ce:21:f0:a8:26:3f:0b:02:db:d7:cd:da:62:a4: 89:f1:a2:8b:3d:b9:53:f2:ff:c8:b6:25:65:2a:ce:93:d3:12: 05:b4:2b:98:25:2c:7c:2a:7f:78:70:5c:ea:ee:bc:ce:f6:cd: 95:80:e7:d3:b5:1e:9d:1d:e7:fd:b5:ee:fe:57:19:d0:a8:c2: 8b:b9:8c:bf:46:d3:be:3f:3b:df:42:95:3c:fa:25:72:52:bd: a9:96:3c:3b:90:ea:4b:1d:d3:4b:52:0a:2b:b2:73:ea:e8:10: e4:63:38:6d:0b:72:72:d9:59:0c:55:cd:ba:99:70:23:e4:47: ba:15:66:73:f3:34:2c:f7:54:33:6d:39:5a:ae:2c:b3:44:e9: 57:68:da:12:e0:0c:95:9c:b4:b7:e0:8a:80:e8:77:a1:66:a2: 05:5e:57:4f:9b:ac:70:28:3f:60:5f:4a:8e:c0:7d:1d:78:8d: a4:25:81:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTCW6rae991es4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk OGJlOTRmZDctZWVkNS00OTJiLTlhNTUtMTdjN2MyN2I5MWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKtQAG+MpbE1Rwe6QoH/jy4mITQTforr1c0r 3wbSKmkux7CYhsvGWsSRual9v3feOzgl45m+z3kEhwHTKt2NNQign4RQN1OYEJol n+DEaX0CAB8j9LS9ZCoHAwir3xQtrjK9bs/dnh1sZUeAk7ohoS9grLjHGfPfyi+S K4Cb0J7K/29qD6Vcn/aU7qT32qtttUkmcMl/7HhstxYzsSchWGQKtknbWkLKY1Cp sVSPvq2YzFjuwZnKGXb7dfUj6W/JNopEMDg72pClG7sk0+yDCtzWT9PMYjz/L1/Y c2FMmfNTMnaR1D5ITGM2j1Ic5HfDKdcoYhpOUi/Cyjtt52SAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5te+CfXg6yjXJmCg2/Rl/dY9FWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvZjU4MGI2N2EtNzY3ZC0z MWJkLTgwODktMjZmYmE2OGU3MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmCaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD28w2hAsMG968iDfHzCLjNhaR8SrbtesUQJlYLd8Eank5cPk6n08pWb qwDBySb4qQ5k+Ll2hDi8XcGVpJYqBroqBSL+Hn8DZ4DV2gnOIfCoJj8LAtvXzdpi pInxoos9uVPy/8i2JWUqzpPTEgW0K5glLHwqf3hwXOruvM72zZWA59O1Hp0d5/21 7v5XGdCowou5jL9G074/O99ClTz6JXJSvamWPDuQ6ksd00tSCiuyc+roEORjOG0L cnLZWQxVzbqZcCPkR7oVZnPzNCz3VDNtOVquLLNE6Vdo2hLgDJWctLfgioDod6Fm ogVeV0+brHAoP2BfSo7AfR14jaQlgYw= -----END CERTIFICATE-----Generated at Tue Oct 28 11:52:59 2025 by rpki-client