$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa File: d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa (raw, json) Hash identifier: 6qjNgZ7EkKo5L8IekSJUC/YzfxIBm06tCSKxRi2Ocos= Subject key identifier: 9F:0D:EC:48:C8:23:A4:05:C1:DE:53:35:53:5E:82:B5:AB:3E:A9:C9 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584F35E7C101FC73B24B9447DF80 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 395722 IP address blocks: 152.38.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c1:01:fc:73:b2:4b:94:47:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=6df54d12-3db1-43ba-9bea-0cf4b220f770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b0:8b:39:43:9b:4f:e9:f8:89:85:9a:6a:d2: 80:d5:5f:84:74:14:34:e8:67:9c:e5:9f:12:c4:cb: f6:2c:c4:1e:87:73:da:1d:df:ac:f9:d1:ea:e2:18: bb:86:5c:14:38:35:2c:35:05:57:a4:d9:16:41:80: d6:45:a3:b5:aa:22:55:8b:ef:67:3e:dc:e5:ec:b6: b4:73:5d:82:26:5d:ac:c9:bd:26:dd:3f:24:59:e8: da:49:ab:8a:55:4b:4f:19:94:6c:4a:c7:45:ac:8d: 0e:9f:c5:6c:ae:53:cb:27:1f:56:b4:39:b5:f0:ed: ce:d5:45:a8:fe:70:9d:90:24:2b:ff:d1:aa:07:96: f4:c0:17:62:6f:0c:b9:f6:aa:36:27:d2:b1:9f:ce: c8:d7:4e:b4:5e:7d:1d:20:23:f9:7e:ad:06:4b:81: da:54:49:42:3b:33:3a:75:d2:f9:d1:33:5c:9c:a0: fd:fe:7c:06:f8:e0:ac:16:6a:32:4c:01:fe:ed:44: da:0d:84:37:dd:43:94:16:07:76:9d:ab:2e:1b:9f: ce:b9:fc:a5:b0:66:e0:64:15:d9:f0:c1:5b:44:16: 8a:0b:a5:1d:bb:7d:2f:3d:59:a9:38:96:dd:13:37: a3:c8:a3:e7:e3:8c:ad:64:9e:1b:6e:70:1a:0e:1d: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0D:EC:48:C8:23:A4:05:C1:DE:53:35:53:5E:82:B5:AB:3E:A9:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:52:ce:99:f7:ab:e3:06:38:ed:6b:e8:33:8f:92:da:48:9d: ae:97:04:1f:55:ba:30:a7:53:6e:7a:2d:77:7a:4f:c4:6a:a6: d3:7a:69:45:02:b6:1f:1a:bc:87:86:a9:47:ab:6b:26:bc:c4: 26:c1:37:c1:a7:dd:8a:f3:ac:d1:d7:29:17:60:fe:fd:ed:1b: 25:0a:bf:84:60:96:69:ea:64:ef:88:e0:d6:ed:e9:2a:2b:ab: c5:16:d8:5e:54:c9:f4:ae:fb:e1:07:14:4e:73:df:e8:57:2d: 61:ac:76:9d:e5:39:3e:3a:9c:85:9b:3e:76:bf:ed:e3:8b:9b: 1d:c3:14:7e:a6:de:8b:83:74:a3:ae:99:9d:0c:3c:b0:80:35: b7:27:c7:60:ab:35:b6:76:44:89:db:b6:15:00:3a:a9:f3:a8: a3:3a:92:d9:fb:bb:b6:a9:ad:80:23:f9:3b:27:e0:d7:97:26: 17:fb:5a:31:55:5e:9b:f7:d6:5b:aa:af:04:83:c3:8b:aa:d9: 9a:14:bc:8f:45:e8:b6:ec:74:0a:d7:e4:03:63:b4:30:34:ee: 6d:5f:3f:be:09:4d:bb:c1:df:6f:89:9b:1f:73:4e:c8:4d:fd: 43:dd:df:4f:af:38:61:13:63:15:9f:5d:5d:20:7f:63:8d:72: 94:18:28:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158EB/HOyS5RH34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk NmRmNTRkMTItM2RiMS00M2JhLTliZWEtMGNmNGIyMjBmNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7CLOUObT+n4iYWaatKA1V+EdBQ06Gec5Z8S xMv2LMQeh3PaHd+s+dHq4hi7hlwUODUsNQVXpNkWQYDWRaO1qiJVi+9nPtzl7La0 c12CJl2syb0m3T8kWejaSauKVUtPGZRsSsdFrI0On8VsrlPLJx9WtDm18O3O1UWo /nCdkCQr/9GqB5b0wBdibwy59qo2J9Kxn87I1060Xn0dICP5fq0GS4HaVElCOzM6 ddL50TNcnKD9/nwG+OCsFmoyTAH+7UTaDYQ33UOUFgd2nasuG5/OufylsGbgZBXZ 8MFbRBaKC6Udu30vPVmpOJbdEzejyKPn44ytZJ4bbnAaDh1iqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8N7EjII6QFwd5TNVNegrWrPqnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvZDczNDkwZTktOGQ5MC0z MWQwLWFkNDEtYmY5YWZjMjZjZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpSzpn3q+MGOO1r6DOPktpIna6XBB9VujCnU256LXd6T8RqptN6aUUC th8avIeGqUeraya8xCbBN8Gn3YrzrNHXKRdg/v3tGyUKv4RglmnqZO+I4Nbt6Sor q8UW2F5UyfSu++EHFE5z3+hXLWGsdp3lOT46nIWbPna/7eOLmx3DFH6m3ouDdKOu mZ0MPLCANbcnx2CrNbZ2RInbthUAOqnzqKM6ktn7u7aprYAj+Tsn4NeXJhf7WjFV Xpv31luqrwSDw4uq2ZoUvI9F6LbsdArX5ANjtDA07m1fP74JTbvB32+Jmx9zTshN /UPd30+vOGETYxWfXV0gf2ONcpQYKBU= -----END CERTIFICATE-----Generated at Tue Sep 22 08:37:57 2026 by rpki-client