$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa File: 03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa (raw, json) Hash identifier: lnj1d53ZngucTB2n9BhmK0N5H+4odN6Ze9M7Oc2avlA= Subject key identifier: AA:D1:20:68:63:B5:57:ED:68:27:5C:21:0E:50:56:5E:CF:8F:1D:80 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584B4FDC7556DE1C53E3E14BD280 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:75:56:de:1c:53:e3:e1:4b:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=fb954fda-532e-470c-bb70-4095ed90fdb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:56:b4:6b:e5:20:d8:0a:44:dd:89:34:03: 9b:8f:74:0b:99:d2:99:2f:df:e9:80:bc:31:fb:da: 7b:66:b1:47:86:02:0c:5a:8b:94:f8:be:48:27:b4: 3a:4b:77:2a:40:62:b5:e4:d1:61:a0:bf:b3:5d:d5: dc:61:67:ab:7d:04:03:4b:27:bc:25:c0:23:e4:87: 6c:99:5f:9f:f7:00:de:3b:c8:60:7f:fe:f8:74:56: 63:86:fd:11:a3:80:a8:bb:3b:e2:60:85:cb:72:1f: 69:64:48:df:cb:e2:bc:53:6e:a2:4e:68:90:98:b0: 0b:a9:4a:70:e4:8c:5e:84:e1:ec:86:20:66:92:22: 8b:3a:dd:6f:b6:5f:d5:98:a0:a7:30:65:f2:fe:ac: 40:e1:c8:18:6b:7a:66:b9:9f:4b:4f:15:bf:3f:8c: 2c:2e:8d:97:08:ea:1c:c3:c1:8b:b3:03:32:5f:1d: a2:5b:77:d4:92:9a:77:95:7d:01:18:8e:1d:c8:85: b2:31:9a:3e:70:22:c6:8a:81:a0:60:00:5b:ac:7b: bf:a4:69:0d:f1:df:a5:39:45:a1:06:89:16:78:6f: fc:fc:d9:12:51:9b:e7:35:98:f8:33:ed:45:81:20: bb:46:e6:c9:0d:a3:3e:01:ed:54:dc:66:0b:02:9c: 24:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D1:20:68:63:B5:57:ED:68:27:5C:21:0E:50:56:5E:CF:8F:1D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/03cba44f-e4e9-3b5c-b7dd-d1e2e267ae69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:77:7b:10:d8:49:54:fb:ac:85:2b:ba:4c:45:f2:b6:4d:3a: a0:3a:b2:ec:90:69:1b:48:2c:64:7c:c4:88:96:ea:50:55:48: fd:e6:f5:c8:31:d6:e9:4a:bb:8e:23:e6:6f:1c:cb:bf:14:df: f9:a2:8e:f7:f0:67:cf:fc:6a:54:1f:9d:64:1e:f0:ef:d4:12: 2d:6d:cb:fc:4d:df:71:bd:5b:87:3a:cd:d0:a6:1b:47:83:f6: 2a:9e:f7:20:a0:fd:79:9c:da:c4:ac:47:d3:64:ce:e2:93:92: 56:c9:d7:d4:ed:13:88:10:bb:c6:2a:31:e7:c7:0b:e4:44:bc: aa:d5:e6:32:eb:c0:07:a7:52:d5:46:eb:1c:18:dc:cf:80:17: 67:22:37:ac:b5:f1:a1:38:81:5d:83:7e:54:4e:43:96:da:6f: 4f:c7:f5:c1:e6:a4:1d:23:97:5f:44:45:16:bf:54:6a:03:c5: 2e:12:54:be:31:f4:25:fb:09:9c:7e:ec:90:3b:ed:33:9f:7d: 00:be:ca:59:db:e4:34:5d:bd:22:36:46:53:d3:bd:e3:d4:ca: a6:2c:d5:91:bb:2d:ff:5e:00:7e:a8:d9:63:c1:d9:67:9e:e2: e6:ee:2c:1e:b1:b7:7a:e9:4a:49:4d:25:06:e9:c3:93:12:0b: 35:76:4a:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HVW3hxT4+FL0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmI5NTRmZGEtNTMyZS00NzBjLWJiNzAtNDA5NWVkOTBmZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslJWtGvlINgKRN2JNAObj3QLmdKZL9/pgLwx +9p7ZrFHhgIMWouU+L5IJ7Q6S3cqQGK15NFhoL+zXdXcYWerfQQDSye8JcAj5Ids mV+f9wDeO8hgf/74dFZjhv0Ro4CouzviYIXLch9pZEjfy+K8U26iTmiQmLALqUpw 5IxehOHshiBmkiKLOt1vtl/VmKCnMGXy/qxA4cgYa3pmuZ9LTxW/P4wsLo2XCOoc w8GLswMyXx2iW3fUkpp3lX0BGI4dyIWyMZo+cCLGioGgYABbrHu/pGkN8d+lOUWh BokWeG/8/NkSUZvnNZj4M+1FgSC7RubJDaM+Ae1U3GYLApwkpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrRIGhjtVftaCdcIQ5QVl7Pjx2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMDNjYmE0NGYtZTRlOS0z YjVjLWI3ZGQtZDFlMmUyNjdhZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA13exDYSVT7rIUrukxF8rZNOqA6suyQaRtILGR8xIiW6lBVSP3m9cgx 1ulKu44j5m8cy78U3/mijvfwZ8/8alQfnWQe8O/UEi1ty/xN33G9W4c6zdCmG0eD 9iqe9yCg/Xmc2sSsR9NkzuKTklbJ19TtE4gQu8YqMefHC+REvKrV5jLrwAenUtVG 6xwY3M+AF2ciN6y18aE4gV2DflROQ5bab0/H9cHmpB0jl19ERRa/VGoDxS4SVL4x 9CX7CZx+7JA77TOffQC+ylnb5DRdvSI2RlPTvePUyqYs1ZG7Lf9eAH6o2WPB2Wee 4ubuLB6xt3rpSklNJQbpw5MSCzV2Siw= -----END CERTIFICATE-----Generated at Sun Oct 19 23:06:57 2025 by rpki-client