$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa File: 2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa (raw, json) Hash identifier: 9/3F9EAg8lMQCXppz7ci7iXySV0jZYa84Iw98ztKlP4= Subject key identifier: 9F:6C:1B:8F:B1:87:52:A6:97:6D:08:B7:8F:72:2A:25:7B:0C:09:70 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584DF0AB41540E9C06B073E54C00 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 16509 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:41:54:0e:9c:06:b0:73:e5:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=3d90fccd-ad8c-4768-a33b-1cb7e384d9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:b5:be:6e:dc:0a:df:48:a0:0e:1f:02:22: 84:90:76:96:b8:83:f9:61:b2:c1:2d:4f:57:78:77: f8:28:47:8c:6f:d8:3f:24:cf:a2:21:fa:c3:83:34: ee:72:39:f4:08:6b:5c:2e:98:25:dd:a6:b0:49:cd: 98:56:2e:61:6d:8a:02:87:ee:35:12:6e:e6:06:b0: 5e:b0:16:63:06:1d:10:0f:7f:ed:eb:6e:f5:4e:b9: 6f:0a:7c:b3:40:ab:ed:e2:4c:8d:c8:10:3a:27:b3: f4:04:cd:40:ab:7e:2e:17:f4:08:4b:96:ac:dc:00: 4a:7d:76:bc:19:90:1d:b1:b5:fe:48:b8:37:4e:9b: 15:3c:3c:4c:e6:cc:4f:fa:62:59:e8:16:6c:e1:de: 94:1e:fb:fc:2a:e4:94:dc:87:49:ba:58:88:fe:3c: 07:54:e5:dd:c7:6a:5f:e7:d9:05:e8:85:54:f0:c7: 93:b9:b1:4e:16:33:c1:ba:42:79:90:42:14:6b:6d: d5:25:a5:f5:88:53:72:e5:c4:77:cf:4a:ec:3d:8d: 40:60:e6:9a:06:ad:d7:7e:a7:59:a9:c5:74:43:ea: 96:83:60:c3:f4:69:84:05:d5:23:c5:33:3e:1f:f6: 52:6e:9c:68:e2:1a:c4:60:6e:48:fb:78:fc:31:10: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6C:1B:8F:B1:87:52:A6:97:6D:08:B7:8F:72:2A:25:7B:0C:09:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:11:fb:9b:8f:39:bd:c4:12:44:af:3d:a6:05:e2:c7:c9:b3: ef:b1:b9:bb:80:de:ca:ba:76:bf:d8:cf:1f:0c:fc:1a:ae:73: 43:74:a5:94:68:55:8d:57:f5:a6:5a:46:ec:90:50:f7:77:e2: 5d:25:b0:72:7f:42:df:bc:dd:15:b9:30:51:78:93:36:c6:8a: ba:cb:96:92:0f:d7:22:82:c9:94:50:e1:05:f2:51:56:6e:76: 1a:41:17:3c:6e:23:a2:d0:94:65:07:fd:cd:76:d0:06:88:79: 9b:83:2a:ef:ce:81:00:b7:81:e4:82:33:6e:67:0b:bf:ef:cc: 10:bd:e4:b2:73:1c:dc:52:7e:e5:c9:b1:3f:bc:f7:c7:43:f9: 6a:75:5b:04:ef:f8:c8:28:4f:fe:33:af:b4:80:a0:4a:63:79: f9:04:5e:51:e0:79:6a:eb:f0:7b:35:b3:57:1f:62:62:9c:e5: 6d:5f:27:ff:68:58:82:f6:73:cc:a6:30:dd:77:25:1c:d4:f2: 1e:d8:a0:06:80:8b:ae:63:85:1c:97:cd:50:7b:ff:6f:32:3c: b6:00:6c:4c:0c:c3:3c:7e:89:50:5b:1e:41:c5:1a:24:39:0b: 9f:20:fe:f1:35:d0:68:6f:da:d5:4d:75:c2:ee:a4:0d:d3:36: 20:0f:5e:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wq0FUDpwGsHPlTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk M2Q5MGZjY2QtYWQ4Yy00NzY4LWEzM2ItMWNiN2UzODRkOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv61vm7cCt9IoA4fAiKEkHaWuIP5YbLBLU9X eHf4KEeMb9g/JM+iIfrDgzTucjn0CGtcLpgl3aawSc2YVi5hbYoCh+41Em7mBrBe sBZjBh0QD3/t6271TrlvCnyzQKvt4kyNyBA6J7P0BM1Aq34uF/QIS5as3ABKfXa8 GZAdsbX+SLg3TpsVPDxM5sxP+mJZ6BZs4d6UHvv8KuSU3IdJuliI/jwHVOXdx2pf 59kF6IVU8MeTubFOFjPBukJ5kEIUa23VJaX1iFNy5cR3z0rsPY1AYOaaBq3XfqdZ qcV0Q+qWg2DD9GmEBdUjxTM+H/ZSbpxo4hrEYG5I+3j8MRB8ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9sG4+xh1Kml20It49yKiV7DAlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMmI0ZTZiNzAtMzlkZC0z ZmQzLTkxZGEtODdkNGM5NmM5ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4R+5uPOb3EEkSvPaYF4sfJs++xubuA3sq6dr/Yzx8M/Bquc0N0pZRo VY1X9aZaRuyQUPd34l0lsHJ/Qt+83RW5MFF4kzbGirrLlpIP1yKCyZRQ4QXyUVZu dhpBFzxuI6LQlGUH/c120AaIeZuDKu/OgQC3geSCM25nC7/vzBC95LJzHNxSfuXJ sT+898dD+Wp1WwTv+MgoT/4zr7SAoEpjefkEXlHgeWrr8Hs1s1cfYmKc5W1fJ/9o WIL2c8ymMN13JRzU8h7YoAaAi65jhRyXzVB7/28yPLYAbEwMwzx+iVBbHkHFGiQ5 C58g/vE10Ghv2tVNdcLupA3TNiAPXkw= -----END CERTIFICATE-----Generated at Sat Jun 13 08:20:10 2026 by rpki-client