$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa File: 03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa (raw, json) Hash identifier: di/dqThmNHSFTPgZIX9ILZ+qa3hO3g16lcANkNZXtjE= Subject key identifier: E6:D5:69:56:D1:17:57:96:C0:A3:35:B9:3B:3C:A3:0C:D8:DB:F8:8F Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584DF0AB3E6312D3B5D595E91B80 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 14618 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:3e:63:12:d3:b5:d5:95:e9:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=f61a7375-f8e9-4015-867e-78967155af97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:70:44:8e:1d:63:20:8a:d1:00:95:b8:df: de:f0:be:9c:c4:32:e5:d1:eb:16:de:3b:46:01:af: 8f:b8:31:1f:63:e9:7e:c2:bf:fe:31:41:cc:b2:19: 39:71:ab:e4:ee:5d:c3:3e:ad:a2:5e:47:99:eb:b2: 5c:76:37:79:25:55:5e:27:58:85:ec:73:18:c5:c0: d5:78:e2:dd:b7:74:96:31:6b:04:ba:a6:ac:af:a3: 0c:ea:8e:2a:dd:c2:c3:75:f8:35:a5:47:90:57:8a: c2:89:ae:11:da:55:65:ba:db:4a:d2:f5:c0:f0:d6: 59:a1:9a:53:98:08:02:0e:66:c7:a6:f7:6f:90:eb: 48:1b:e4:8b:7a:6e:d1:2e:c7:9b:0b:17:a3:d9:c0: f7:10:86:95:1e:6f:a6:30:10:18:3d:61:8e:54:e4: 26:dd:ce:19:dd:ec:8d:a4:36:4e:a5:e9:49:da:d1: f0:61:f6:fd:9d:5f:42:ae:91:51:77:7a:6b:88:4a: 87:ba:cd:5a:2a:7c:b5:94:a1:db:4e:86:4f:47:48: ee:40:bd:5c:a0:a4:78:a8:33:d0:db:ad:e1:6b:58: 5d:e8:bc:27:a1:8d:22:2f:f7:36:1d:17:f3:5f:06: ae:1a:e0:37:29:a8:eb:c5:17:1d:03:b5:dd:e8:96: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D5:69:56:D1:17:57:96:C0:A3:35:B9:3B:3C:A3:0C:D8:DB:F8:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:04:c1:cc:79:6a:37:9c:fc:f2:e6:6d:7b:bb:5c:77:18:6e: 20:d1:b7:aa:5a:12:f2:ec:d5:28:b5:c7:fd:f7:4e:40:63:0f: a8:5d:c9:17:21:95:4b:93:14:67:1b:d9:57:bd:ef:3b:62:da: 1b:9d:ec:78:d6:16:7a:47:d2:4c:49:c0:68:ac:c5:97:37:32: 55:f1:be:b7:33:a1:5c:09:a0:38:2b:2d:62:56:98:bc:a9:f2: c8:35:94:0d:5a:f8:3d:b7:1f:6b:12:ca:10:b3:e5:5d:34:72: 35:91:9c:10:7d:4a:b8:22:c3:f1:60:ff:e1:58:bd:89:61:3e: af:1a:1a:e8:c3:77:49:32:a9:d3:f3:57:fe:32:91:18:83:90: 88:e6:6c:01:ed:03:29:54:23:df:de:39:69:0c:4a:ff:ed:bb: dc:04:62:e3:e8:86:12:57:73:c7:bb:a1:81:c1:d7:ca:f2:18: 49:75:37:d8:55:dc:5f:ac:b2:c8:58:b7:dc:cf:5a:82:5d:78: d2:a6:34:e7:50:03:48:16:ec:29:d7:1f:68:59:5d:d5:b6:a4: e3:8e:ab:db:9e:8a:2b:35:cb:9d:dc:06:c8:17:3d:0f:63:b1: ac:e9:d9:7f:7a:ba:38:20:68:15:5f:3d:26:d5:1b:7e:14:4f: 2d:b3:0f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wqz5jEtO11ZXpG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk ZjYxYTczNzUtZjhlOS00MDE1LTg2N2UtNzg5NjcxNTVhZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwtwRI4dYyCK0QCVuN/e8L6cxDLl0esW3jtG Aa+PuDEfY+l+wr/+MUHMshk5cavk7l3DPq2iXkeZ67Jcdjd5JVVeJ1iF7HMYxcDV eOLdt3SWMWsEuqasr6MM6o4q3cLDdfg1pUeQV4rCia4R2lVluttK0vXA8NZZoZpT mAgCDmbHpvdvkOtIG+SLem7RLsebCxej2cD3EIaVHm+mMBAYPWGOVOQm3c4Z3eyN pDZOpelJ2tHwYfb9nV9CrpFRd3priEqHus1aKny1lKHbToZPR0juQL1coKR4qDPQ 263ha1hd6LwnoY0iL/c2HRfzXwauGuA3KajrxRcdA7Xd6JYXewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObVaVbRF1eWwKM1uTs8owzY2/iPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDNjYmE0NGYtZTRlOS0z YjVjLWI3ZGQtZDFlMmUyNjdhZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUEwcx5ajec/PLmbXu7XHcYbiDRt6paEvLs1Si1x/33TkBjD6hdyRch lUuTFGcb2Ve97zti2hud7HjWFnpH0kxJwGisxZc3MlXxvrczoVwJoDgrLWJWmLyp 8sg1lA1a+D23H2sSyhCz5V00cjWRnBB9Srgiw/Fg/+FYvYlhPq8aGujDd0kyqdPz V/4ykRiDkIjmbAHtAylUI9/eOWkMSv/tu9wEYuPohhJXc8e7oYHB18ryGEl1N9hV 3F+ssshYt9zPWoJdeNKmNOdQA0gW7CnXH2hZXdW2pOOOq9ueiis1y53cBsgXPQ9j sazp2X96ujggaBVfPSbVG34UTy2zD7w= -----END CERTIFICATE-----Generated at Sat Jun 13 05:45:50 2026 by rpki-client