$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/c94728f1-0c6e-3dd8-8fe0-fae7b86f7831.roa File: c94728f1-0c6e-3dd8-8fe0-fae7b86f7831.roa (raw, json) Hash identifier: po+0hi9M2IKvRj4ABtDRtwpjtKn9qbPluEL5XdpXkyA= Subject key identifier: 9A:EA:D3:F6:B9:5E:64:33:C9:08:95:C3:4A:1F:C3:FB:41:63:47:EE Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584DD5A634241585D6467FAEBA40 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/c94728f1-0c6e-3dd8-8fe0-fae7b86f7831.roa Signing time: Thu 14 May 2026 20:43:38 +0000 ROA not before: Thu 14 May 2026 20:43:38 +0000 ROA not after: Wed 12 Aug 2026 20:43:38 +0000 asID: 16509 IP address blocks: 152.38.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d5:a6:34:24:15:85:d6:46:7f:ae:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: May 14 20:43:38 2026 GMT Not After : Aug 12 20:43:38 2026 GMT Subject: CN=6a3f7dba-c106-4b08-b5c8-9956afb1dfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:cc:ec:7b:3b:6d:0e:ac:33:65:04:8e:17: 8e:7a:86:ae:c5:f8:c8:ec:66:4a:d1:c6:1d:25:5b: 43:0a:7a:65:9b:73:47:0a:ac:9d:89:51:d1:20:ba: bc:9f:d9:52:c7:a0:ff:d3:a1:28:7d:d1:be:ff:67: d5:a5:16:75:1c:3e:82:e9:7a:cc:94:7e:91:8d:d5: 4d:55:94:cc:6c:7e:f8:15:ce:ee:70:d7:9a:86:a5: f9:c0:98:57:90:3f:61:69:a4:8b:7e:b5:96:70:89: 45:cb:21:cc:90:24:19:60:0a:bf:9c:0a:98:70:52: 30:b7:a1:09:a5:8c:7f:4d:80:91:16:72:aa:1b:46: cd:b6:a4:29:d2:53:aa:03:f1:5d:e6:0b:11:98:8a: 90:2a:e8:74:9f:f1:0a:ed:43:84:74:76:73:25:d3: 7f:13:d8:81:e1:a3:6b:15:43:b3:1b:78:23:2a:ea: a6:11:50:0d:dc:cd:53:26:4f:2a:35:7d:81:7d:83: cd:56:51:07:08:b8:36:ae:d6:1f:34:22:ee:00:23: b5:ed:78:ee:bc:50:93:f8:e7:8e:2b:a3:b8:4c:fa: 63:f6:09:27:94:b8:d7:b8:e8:d5:d4:cf:96:0f:1f: 73:a0:4f:10:b9:7a:cd:5e:93:7d:cf:93:09:1a:2f: 01:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EA:D3:F6:B9:5E:64:33:C9:08:95:C3:4A:1F:C3:FB:41:63:47:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/c94728f1-0c6e-3dd8-8fe0-fae7b86f7831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e7:65:32:a6:e2:2b:99:a1:be:7c:f6:d4:9f:69:5f:06:c8: f7:dc:49:1b:d2:68:1c:65:27:08:e4:57:32:29:ee:dc:8f:3b: 3f:24:66:26:50:d7:ef:dd:7c:9c:c3:d6:ed:f5:89:95:89:eb: e4:ff:da:4e:4f:d4:95:a5:fa:72:5b:ec:8b:c8:8a:82:a1:b0: 8c:4a:79:2d:8c:27:eb:b2:2d:cb:29:a3:eb:e8:ff:9b:a1:0e: 95:7a:b5:99:d2:28:c8:a7:da:fa:3b:a8:d9:bb:fb:ce:d8:79: dd:31:db:6d:fa:a3:15:d6:d8:46:0f:f5:fc:c2:08:02:b9:e8: b9:1b:e1:cf:1e:74:69:31:ca:05:66:97:53:a7:91:0b:19:3d: 2f:46:9a:25:bc:a7:18:36:c7:73:96:88:1b:59:eb:bd:f9:ab: 20:95:1d:96:6f:d6:2c:2f:c3:3f:b4:76:00:5f:69:ee:4a:ea: eb:28:7f:80:48:cb:a9:b0:40:a0:af:7b:19:21:19:63:ba:af: af:4a:71:7f:ab:69:b0:14:e9:29:f2:27:8b:ce:83:85:b8:4e: 34:82:a5:7d:47:fc:e5:2a:50:4f:4d:8d:95:47:94:b6:51:09: 77:0a:42:47:06:bf:1f:a4:80:be:55:b2:61:88:c6:08:31:54: 68:b1:15:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3VpjQkFYXWRn+uukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDUxNDIwNDMzOFoXDTI2MDgxMjIwNDMzOFowLzEtMCsGA1UEAxMk NmEzZjdkYmEtYzEwNi00YjA4LWI1YzgtOTk1NmFmYjFkZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpDM7Hs7bQ6sM2UEjheOeoauxfjI7GZK0cYd JVtDCnplm3NHCqydiVHRILq8n9lSx6D/06EofdG+/2fVpRZ1HD6C6XrMlH6RjdVN VZTMbH74Fc7ucNeahqX5wJhXkD9haaSLfrWWcIlFyyHMkCQZYAq/nAqYcFIwt6EJ pYx/TYCRFnKqG0bNtqQp0lOqA/Fd5gsRmIqQKuh0n/EK7UOEdHZzJdN/E9iB4aNr FUOzG3gjKuqmEVAN3M1TJk8qNX2BfYPNVlEHCLg2rtYfNCLuACO17XjuvFCT+OeO K6O4TPpj9gknlLjXuOjV1M+WDx9zoE8QuXrNXpN9z5MJGi8BJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrq0/a5XmQzyQiVw0ofw/tBY0fuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYzk0NzI4ZjEtMGM2ZS0z ZGQ4LThmZTAtZmFlN2I4NmY3ODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDnZTKm4iuZob589tSfaV8GyPfcSRvSaBxlJwjkVzIp7tyPOz8kZiZQ 1+/dfJzD1u31iZWJ6+T/2k5P1JWl+nJb7IvIioKhsIxKeS2MJ+uyLcspo+vo/5uh DpV6tZnSKMin2vo7qNm7+87Yed0x2236oxXW2EYP9fzCCAK56Lkb4c8edGkxygVm l1OnkQsZPS9GmiW8pxg2x3OWiBtZ6735qyCVHZZv1iwvwz+0dgBfae5K6usof4BI y6mwQKCvexkhGWO6r69KcX+rabAU6SnyJ4vOg4W4TjSCpX1H/OUqUE9NjZVHlLZR CXcKQkcGvx+kgL5VsmGIxggxVGixFaA= -----END CERTIFICATE-----Generated at Sat Jun 13 09:43:43 2026 by rpki-client