$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa File: bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json) Hash identifier: FrDIuN1wQVtWO+8TMdCuxx+UF1db90o4vJ74TxamH/A= Subject key identifier: 35:F8:A7:D8:FF:3E:54:BA:24:F8:56:75:37:C6:67:00:7E:B2:C2:D4 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584F5E62C2CB9349ED06BFBF5480 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 23467 IP address blocks: 152.38.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c2:cb:93:49:ed:06:bf:bf:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=80cf9ab1-f68d-4ce8-bbe3-79bbe4d2a9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:91:3a:90:5a:74:0f:59:e9:6d:d8:bb:06: 3b:d9:54:c3:ca:a2:6e:f1:d3:f5:a1:0f:95:1a:41: 6b:ef:1f:03:b8:63:3d:d5:50:7c:2b:16:4c:4e:69: 8d:44:ee:97:2a:0d:0a:97:87:ba:77:10:61:51:29: 90:2d:d6:cb:4d:48:cd:1f:a3:7c:d2:aa:71:3b:c4: ab:05:8c:ea:8e:c0:d5:e0:ad:26:c4:33:75:c4:80: a9:a9:30:be:51:eb:eb:3c:77:5d:30:a0:1e:c1:2d: f3:b4:77:27:29:fb:ac:c3:8f:f4:d0:fb:ad:bf:d5: 2a:1e:32:f2:51:8f:bb:c4:02:44:d5:9a:8e:fe:d0: 5c:75:02:9f:6a:21:75:82:58:16:bc:4f:32:d9:1f: a6:42:db:80:45:80:10:c2:48:ad:10:62:81:6a:71: ee:e9:eb:c0:9d:22:89:d5:f7:b2:a1:a1:74:14:1b: 0b:44:f6:43:b3:67:02:cb:68:7f:9b:ef:86:8a:34: 79:37:3d:f8:d1:98:39:78:b0:31:4c:2e:5a:1b:0e: c3:47:fe:e1:83:fe:cf:5f:6c:d0:33:85:4b:ac:4a: 7a:ab:2d:53:87:6f:43:dd:62:d6:54:38:41:3d:ec: 6b:42:b1:48:31:30:06:9c:84:47:e9:8a:90:d5:2e: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F8:A7:D8:FF:3E:54:BA:24:F8:56:75:37:C6:67:00:7E:B2:C2:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:4c:19:3f:b1:27:76:90:ed:5e:79:36:88:0e:92:5e:46:47: 73:29:cf:fb:73:3c:d7:11:e7:21:5c:94:4a:9f:e7:7c:92:5d: 8f:df:8a:c7:aa:35:18:98:5a:96:e5:68:a9:e7:40:35:ac:a6: a3:3f:33:cb:b0:74:2f:5b:0b:29:8b:0a:9c:b5:7a:99:3f:74: 54:dd:c8:59:de:a4:a4:27:b2:b1:c6:28:13:41:8b:82:d8:85: 26:24:18:89:5a:9b:f7:ec:26:f8:48:f2:a5:68:3c:a7:b8:8b: c1:5d:93:48:2f:12:e0:df:01:e3:50:ec:b7:2b:79:0f:bf:4e: 43:a5:88:80:72:17:89:ef:17:6f:79:c8:85:be:23:44:13:b7: 66:e4:23:66:8b:1e:f1:53:79:a2:d8:73:cb:03:21:c0:cd:1b: d7:6d:ae:b0:1b:33:c3:00:2f:bc:f6:72:5c:a6:d4:2c:e8:a1: 8e:e3:bd:59:56:44:ab:7d:16:fa:be:44:83:3f:62:3e:9f:36: 82:2e:c0:04:42:44:7c:ee:ec:d5:21:80:12:b9:36:98:be:56: 43:59:f1:4c:04:29:66:da:03:88:c7:b5:f4:60:9e:5f:28:72: 1e:e2:e1:32:c0:df:08:c6:75:d0:cf:28:ce:b9:7a:ba:37:4d: ff:ce:0d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsLLk0ntBr+/VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ODBjZjlhYjEtZjY4ZC00Y2U4LWJiZTMtNzliYmU0ZDJhOWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHuROpBadA9Z6W3YuwY72VTDyqJu8dP1oQ+V GkFr7x8DuGM91VB8KxZMTmmNRO6XKg0Kl4e6dxBhUSmQLdbLTUjNH6N80qpxO8Sr BYzqjsDV4K0mxDN1xICpqTC+UevrPHddMKAewS3ztHcnKfusw4/00Putv9UqHjLy UY+7xAJE1ZqO/tBcdQKfaiF1glgWvE8y2R+mQtuARYAQwkitEGKBanHu6evAnSKJ 1feyoaF0FBsLRPZDs2cCy2h/m++GijR5Nz340Zg5eLAxTC5aGw7DR/7hg/7PX2zQ M4VLrEp6qy1Th29D3WLWVDhBPexrQrFIMTAGnIRH6YqQ1S4yxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX4p9j/PlS6JPhWdTfGZwB+ssLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmQ5Y2RiNWYtZGVhNy0z ODJkLTkxY2UtMTQyMmU4ZmQzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpMGT+xJ3aQ7V55NogOkl5GR3Mpz/tzPNcR5yFclEqf53ySXY/fiseq NRiYWpblaKnnQDWspqM/M8uwdC9bCymLCpy1epk/dFTdyFnepKQnsrHGKBNBi4LY hSYkGIlam/fsJvhI8qVoPKe4i8Fdk0gvEuDfAeNQ7LcreQ+/TkOliIByF4nvF295 yIW+I0QTt2bkI2aLHvFTeaLYc8sDIcDNG9dtrrAbM8MAL7z2clym1CzooY7jvVlW RKt9Fvq+RIM/Yj6fNoIuwARCRHzu7NUhgBK5Npi+VkNZ8UwEKWbaA4jHtfRgnl8o ch7i4TLA3wjGddDPKM65ero3Tf/ODZo= -----END CERTIFICATE-----Generated at Thu Nov 5 07:11:27 2026 by rpki-client