$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/3f89f26f-02d7-35d3-bb17-889b0cb87147.roa File: 3f89f26f-02d7-35d3-bb17-889b0cb87147.roa (raw, json) Hash identifier: v5rS7zHglR9ZBc1TlfV2dkUjUusaANkLRs5EM+whz94= Subject key identifier: 76:24:5E:7E:BB:5B:F7:ED:19:5D:26:02:EB:09:2B:46:0F:7A:E1:BC Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584DD0904DE8371E77C5B016B780 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/3f89f26f-02d7-35d3-bb17-889b0cb87147.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 49915 IP address blocks: 152.38.152.0/24 maxlen: 24 152.38.153.0/24 maxlen: 24 152.38.154.0/24 maxlen: 24 152.38.155.0/24 maxlen: 24 162.247.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:4d:e8:37:1e:77:c5:b0:16:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=ce80a917-d027-46a2-b265-9aa6414d8127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5e:a5:2a:f0:29:33:5f:51:92:10:e0:a7:2e: 85:ee:73:ce:b6:02:aa:3b:96:1b:97:c3:7c:cd:48: 98:75:71:da:7e:b3:d9:e8:05:41:e5:11:6f:22:5f: 4d:9a:b9:e2:72:7f:e4:2c:d6:27:74:07:53:31:8c: 0e:c5:d9:2d:69:47:ec:4c:08:5b:0a:70:1f:78:00: 72:9f:31:e8:a1:23:69:b9:d7:ae:e5:8e:ec:60:fa: bd:ae:53:e2:60:b5:d1:a1:05:ca:45:e4:ee:23:d9: bb:ec:83:00:3c:5a:56:ca:f7:f0:25:1c:85:21:ec: a2:a4:d2:40:58:0d:d0:29:19:2a:9b:da:89:49:fc: 3a:4e:f9:c1:75:2c:36:01:c3:b7:ba:5e:60:08:10: 1f:15:8b:a9:15:91:fc:8c:94:29:cc:76:9f:19:3f: 11:e9:10:69:50:39:f9:8c:da:31:f0:70:f2:5d:5b: bd:e9:05:d2:4e:b7:62:0e:41:78:16:1f:fa:bd:48: dc:8e:78:b6:43:ae:ee:3b:8c:5b:e5:94:35:c7:15: 7a:fd:be:44:77:d2:00:d4:f6:0f:d7:1c:fc:e6:86: 5c:dc:dc:ac:9a:f7:57:69:62:ba:0f:7b:8e:a8:60: 36:7b:e6:ae:7b:5e:de:5b:c8:e8:67:fb:e1:92:fb: 32:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:24:5E:7E:BB:5B:F7:ED:19:5D:26:02:EB:09:2B:46:0F:7A:E1:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/3f89f26f-02d7-35d3-bb17-889b0cb87147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.152.0/22 162.247.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:06:45:d1:bb:1b:ea:ac:df:20:d4:0d:30:d0:20:b3:ed:42: fd:01:43:c0:7f:3c:bd:e8:a4:ff:d3:27:73:c2:1a:6d:f3:cb: 23:4f:02:7b:e6:af:94:9b:aa:95:7e:b6:62:41:0d:04:11:2f: eb:c1:53:0b:b9:27:81:37:79:9b:06:f4:98:85:83:6f:d1:38: 39:61:93:ef:84:db:e9:ce:72:32:b4:77:9f:fc:9a:14:30:a9: 73:08:8a:7c:07:34:b6:17:11:cc:a3:f6:ba:78:e0:89:0e:4e: 8d:77:b6:19:99:22:05:f6:a7:9f:96:95:b8:c6:9b:07:d9:93: 4b:4e:62:16:23:35:15:75:ee:a8:bb:39:42:9b:a1:b7:7e:3c: 95:21:11:f8:62:f3:3b:ce:6c:72:25:a7:cb:35:10:28:df:77: a0:a6:23:31:88:b5:05:77:81:bc:70:2f:6a:00:5c:48:42:95: 96:3a:fd:f0:a6:48:6f:79:00:b2:7f:c9:bb:4f:fd:8e:dd:0a: 98:b5:ac:c9:46:41:16:d7:e7:c4:67:56:54:d3:b8:46:30:cb: d1:87:cc:ff:04:68:af:a7:8b:51:b9:43:e8:4a:5c:c6:fb:d1: 72:f0:45:f4:d8:b6:f7:84:31:f5:13:9c:48:42:f1:06:5f:0e: 2c:15:8f:79 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3QkE3oNx53xbAWt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk Y2U4MGE5MTctZDAyNy00NmEyLWIyNjUtOWFhNjQxNGQ4MTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7F6lKvApM19RkhDgpy6F7nPOtgKqO5Ybl8N8 zUiYdXHafrPZ6AVB5RFvIl9Nmrnicn/kLNYndAdTMYwOxdktaUfsTAhbCnAfeABy nzHooSNpudeu5Y7sYPq9rlPiYLXRoQXKReTuI9m77IMAPFpWyvfwJRyFIeyipNJA WA3QKRkqm9qJSfw6TvnBdSw2AcO3ul5gCBAfFYupFZH8jJQpzHafGT8R6RBpUDn5 jNox8HDyXVu96QXSTrdiDkF4Fh/6vUjcjni2Q67uO4xb5ZQ1xxV6/b5Ed9IA1PYP 1xz85oZc3NysmvdXaWK6D3uOqGA2e+aue17eW8joZ/vhkvsyWwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHYkXn67W/ftGV0mAusJK0YPeuG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvM2Y4OWYyNmYtMDJkNy0z NWQzLWJiMTctODg5YjBjYjg3MTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmCaYAwQA ovfwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKUGRdG7G+qs3yDUDTDQILPtQv0BQ8B/PL3opP/TJ3PCGm3z yyNPAnvmr5SbqpV+tmJBDQQRL+vBUwu5J4E3eZsG9JiFg2/RODlhk++E2+nOcjK0 d5/8mhQwqXMIinwHNLYXEcyj9rp44IkOTo13thmZIgX2p5+WlbjGmwfZk0tOYhYj NRV17qi7OUKbobd+PJUhEfhi8zvObHIlp8s1ECjfd6CmIzGItQV3gbxwL2oAXEhC lZY6/fCmSG95ALJ/ybtP/Y7dCpi1rMlGQRbX58RnVlTTuEYwy9GHzP8EaK+ni1G5 Q+hKXMb70XLwRfTYtveEMfUTnEhC8QZfDiwVj3k= -----END CERTIFICATE-----Generated at Wed May 13 04:05:01 2026 by rpki-client