$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa File: bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json) Hash identifier: NPo+WynGubxf/PsOa+oY4i1P405q8sUXW2kd9tSTv5w= Subject key identifier: DA:E6:44:A6:CB:F0:D2:2A:46:45:CE:7F:A1:89:9E:69:B0:BD:A1:C9 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584B79BCB8DEAA476B9CF874CE40 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 23467 IP address blocks: 152.38.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b8:de:aa:47:6b:9c:f8:74:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=74a7bde0-02cc-4ebe-be25-2ca86bf26884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:9a:aa:e3:1e:dd:1a:87:12:51:ab:af:bb: 6e:4f:72:cb:45:09:da:73:e7:0a:7d:8c:05:91:8d: f8:9d:3d:a7:0a:4b:f8:99:2f:ff:86:17:b4:86:ef: d5:9f:02:8a:60:ed:db:9b:86:b1:da:5b:d2:36:3c: 3f:08:c6:22:48:25:f5:13:63:d2:78:55:e8:c0:e8: b2:58:2e:c9:0d:83:54:04:2b:04:7c:e9:b3:84:90: 77:d1:81:6a:c5:fe:67:d4:f6:6b:a3:aa:92:3f:ac: 8f:9e:c9:90:18:57:2a:f1:53:6e:b8:e3:b8:5e:f4: 98:15:72:a0:92:86:03:46:3e:d6:19:67:5e:aa:6e: b6:e4:1c:9c:9e:1c:87:f6:9e:07:26:5b:ed:78:6a: 4a:b5:7b:aa:5d:0f:e9:5e:7f:b6:8a:41:e8:f3:fe: ef:50:0b:71:1c:90:06:30:39:5f:03:ea:2d:aa:92: 14:b7:ae:c4:c4:d1:c5:4f:98:20:aa:14:5b:ec:81: 06:93:9b:6f:a8:6f:f9:fb:a4:d6:bc:f6:f1:e8:48: b9:4b:3d:d9:97:6b:c5:33:e0:97:de:c5:bc:2b:d4: 5c:6d:a1:dc:8e:0b:0a:25:44:7b:14:dc:b5:40:54: c9:9c:0a:b5:e4:82:96:35:c9:06:38:26:e7:ed:d6: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E6:44:A6:CB:F0:D2:2A:46:45:CE:7F:A1:89:9E:69:B0:BD:A1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:15:24:a6:65:70:50:ef:ef:93:e5:a2:7a:de:b1:49:19:fc: 89:ed:7f:e0:92:5f:f9:1a:ca:6a:e3:bc:e3:a9:71:11:b2:0e: 80:ca:1a:0d:1e:f7:29:d0:b3:8d:f5:7c:52:73:b9:50:19:20: 61:e4:18:f1:0f:10:73:62:6c:dc:12:aa:1f:d9:16:96:c3:6b: 06:d4:b0:e7:18:3c:9a:10:27:25:6f:2a:05:db:c4:56:12:ac: ef:a3:44:93:8c:a7:b6:d4:26:e2:e8:4d:bf:fa:12:a9:ec:e4: ff:c1:04:40:80:c6:54:f8:95:5e:f5:17:15:14:6f:f6:33:30: 4a:05:59:ae:2a:7b:82:7d:af:92:39:7c:0d:39:21:19:46:fd: 47:b9:10:94:34:63:67:45:7e:b6:36:c4:ae:19:a3:10:2d:29: 17:69:06:ac:07:26:59:dd:32:db:90:c3:10:1c:5f:d2:09:94: 9d:e2:05:eb:ba:f3:e9:07:78:fd:25:f1:f8:a9:92:d9:3f:7f: 01:f7:da:69:b1:38:41:ff:72:cf:b0:ba:5a:33:28:44:25:da: f7:f6:b6:b9:e8:ca:c0:2c:1e:ef:67:8c:5e:3c:45:d4:de:d1: 62:d5:34:4d:8d:60:bd:a6:fa:7f:db:55:d3:0d:b5:05:c5:3a: 48:f3:a5:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLjeqkdrnPh0zkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NzRhN2JkZTAtMDJjYy00ZWJlLWJlMjUtMmNhODZiZjI2ODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxSaquMe3RqHElGrr7tuT3LLRQnac+cKfYwF kY34nT2nCkv4mS//hhe0hu/VnwKKYO3bm4ax2lvSNjw/CMYiSCX1E2PSeFXowOiy WC7JDYNUBCsEfOmzhJB30YFqxf5n1PZro6qSP6yPnsmQGFcq8VNuuOO4XvSYFXKg koYDRj7WGWdeqm625BycnhyH9p4HJlvteGpKtXuqXQ/pXn+2ikHo8/7vUAtxHJAG MDlfA+otqpIUt67ExNHFT5ggqhRb7IEGk5tvqG/5+6TWvPbx6Ei5Sz3Zl2vFM+CX 3sW8K9RcbaHcjgsKJUR7FNy1QFTJnAq15IKWNckGOCbn7dbFuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrmRKbL8NIqRkXOf6GJnmmwvaHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmQ5Y2RiNWYtZGVhNy0z ODJkLTkxY2UtMTQyMmU4ZmQzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoVJKZlcFDv75PlonresUkZ/Intf+CSX/kaymrjvOOpcRGyDoDKGg0e 9ynQs431fFJzuVAZIGHkGPEPEHNibNwSqh/ZFpbDawbUsOcYPJoQJyVvKgXbxFYS rO+jRJOMp7bUJuLoTb/6Eqns5P/BBECAxlT4lV71FxUUb/YzMEoFWa4qe4J9r5I5 fA05IRlG/Ue5EJQ0Y2dFfrY2xK4ZoxAtKRdpBqwHJlndMtuQwxAcX9IJlJ3iBeu6 8+kHeP0l8fipktk/fwH32mmxOEH/cs+wulozKEQl2vf2trnoysAsHu9njF48RdTe 0WLVNE2NYL2m+n/bVdMNtQXFOkjzpRY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:48:57 2025 by rpki-client