$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa File: bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json) Hash identifier: eXBvDJdMDoh5itMdodUntqjMc9D+dRbIXTmTkHBOudA= Subject key identifier: B3:17:76:CD:5C:62:70:77:CC:82:2C:DD:FA:F0:1E:8F:68:B6:27:63 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584D386A4B9DE22237E4C1245140 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 23467 IP address blocks: 152.38.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4b:9d:e2:22:37:e4:c1:24:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=55c48c59-2985-4307-b7cc-13de1f6666e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a7:10:09:aa:66:24:ac:66:8c:77:dc:3c:7b: 97:34:dd:8a:2e:fd:53:57:75:28:f2:cc:36:e8:c4: 02:5f:c3:83:a5:8b:2a:9a:9f:70:37:83:9a:ed:16: a0:ea:d3:22:82:66:97:cd:2f:1f:dd:81:00:36:67: e2:7d:0d:3b:77:83:25:54:de:65:21:2d:94:5c:64: 5d:e9:79:ff:7c:79:2a:ea:e0:8a:65:b9:8b:f4:a8: f8:ac:da:47:a7:85:54:0d:a3:9c:77:35:7d:6a:0e: a0:00:60:6a:96:48:c7:5d:61:28:49:80:ee:c9:62: 18:cf:de:27:12:0e:bc:7c:b3:4d:b3:02:83:87:b6: ee:ae:28:42:7a:a0:de:44:b4:f5:f5:2d:07:e0:cc: a8:78:fd:73:2e:20:db:74:ba:0a:a0:67:60:d1:b9: a5:5e:fe:eb:b9:87:5f:7e:52:9e:b8:12:b6:e7:12: 05:01:85:13:3b:c4:13:bd:48:f9:7a:4a:66:57:d4: 16:ca:53:a1:04:27:ff:2f:66:d1:0e:59:00:60:44: 82:00:d3:01:2f:b3:a1:cb:00:d2:45:84:b8:f8:82: 70:3b:70:7c:5a:f3:7f:48:95:03:09:1f:b1:29:06: 52:72:84:de:19:a4:08:59:74:8f:85:b0:1c:b7:19: 0e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:17:76:CD:5C:62:70:77:CC:82:2C:DD:FA:F0:1E:8F:68:B6:27:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:bd:f7:7b:63:b4:61:d8:10:f7:22:49:a7:85:06:8d:2f:56: aa:47:27:5b:9b:84:22:cb:12:b9:9e:74:18:8b:5d:50:8f:74: 0d:01:28:48:9e:c5:c5:f0:8d:7f:67:a6:77:71:96:6d:5f:f2: 54:6c:66:46:a4:68:fb:db:dd:16:2f:c6:32:08:63:d5:d2:e2: aa:4d:e8:05:ff:34:a6:0c:ad:b6:7f:9a:ee:66:8e:f4:3a:e7: 19:2f:f3:df:cc:66:80:4c:dd:ae:5a:d1:a0:46:43:84:c1:64: 41:1b:25:04:db:fc:67:13:6a:0c:7c:87:c8:11:1e:9f:2b:63: 60:cb:02:70:5a:79:cd:22:12:47:9d:59:0e:2b:69:9e:69:76: 31:8e:a5:27:19:12:fe:9a:27:60:7d:4b:60:eb:d9:39:9f:d5: fa:94:b9:bf:78:12:4f:94:77:ca:55:7d:78:1c:91:c2:dc:32: 7d:ef:0f:d8:97:83:35:f2:c9:57:4e:d3:57:5a:98:8c:b8:ac: fe:fe:39:68:ab:cb:eb:7b:fe:52:03:4e:b4:cb:14:e2:74:dc: 6e:91:63:20:06:81:0b:e9:fe:fe:60:b6:1c:33:25:8a:01:31: c9:0d:df:31:0b:f8:a4:9e:91:f4:3f:72:cc:a0:96:0b:02:58: 39:c8:f1:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akud4iI35MEkUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NTVjNDhjNTktMjk4NS00MzA3LWI3Y2MtMTNkZTFmNjY2NmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKcQCapmJKxmjHfcPHuXNN2KLv1TV3Uo8sw2 6MQCX8ODpYsqmp9wN4Oa7Rag6tMigmaXzS8f3YEANmfifQ07d4MlVN5lIS2UXGRd 6Xn/fHkq6uCKZbmL9Kj4rNpHp4VUDaOcdzV9ag6gAGBqlkjHXWEoSYDuyWIYz94n Eg68fLNNswKDh7burihCeqDeRLT19S0H4MyoeP1zLiDbdLoKoGdg0bmlXv7ruYdf flKeuBK25xIFAYUTO8QTvUj5ekpmV9QWylOhBCf/L2bRDlkAYESCANMBL7OhywDS RYS4+IJwO3B8WvN/SJUDCR+xKQZScoTeGaQIWXSPhbActxkO4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMXds1cYnB3zIIs3frwHo9otidjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmQ5Y2RiNWYtZGVhNy0z ODJkLTkxY2UtMTQyMmU4ZmQzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm993tjtGHYEPciSaeFBo0vVqpHJ1ubhCLLErmedBiLXVCPdA0BKEie xcXwjX9npndxlm1f8lRsZkakaPvb3RYvxjIIY9XS4qpN6AX/NKYMrbZ/mu5mjvQ6 5xkv89/MZoBM3a5a0aBGQ4TBZEEbJQTb/GcTagx8h8gRHp8rY2DLAnBaec0iEked WQ4raZ5pdjGOpScZEv6aJ2B9S2Dr2Tmf1fqUub94Ek+Ud8pVfXgckcLcMn3vD9iX gzXyyVdO01damIy4rP7+OWiry+t7/lIDTrTLFOJ03G6RYyAGgQvp/v5gthwzJYoB MckN3zEL+KSekfQ/csyglgsCWDnI8XY= -----END CERTIFICATE-----Generated at Thu Mar 26 05:09:58 2026 by rpki-client