$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa File: d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa (raw, json) Hash identifier: pPvORj20aV1LYVw9SWzPVbjbyTlGch+f1uoLHxDmGB0= Subject key identifier: 08:2F:D0:80:E0:8C:41:43:96:EF:C8:05:EC:57:5D:4F:A1:C2:7A:28 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584E930DD58DF91D89A84BBF3640 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa Signing time: Tue 21 Jul 2026 17:00:13 +0000 ROA not before: Tue 21 Jul 2026 17:00:13 +0000 ROA not after: Mon 19 Oct 2026 17:00:13 +0000 asID: 395722 IP address blocks: 152.38.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:0d:d5:8d:f9:1d:89:a8:4b:bf:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Jul 21 17:00:13 2026 GMT Not After : Oct 19 17:00:13 2026 GMT Subject: CN=a547d1f3-c5b4-4ebf-8fd8-d4f31162ebb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:46:39:e8:95:31:3a:6a:d6:b7:87:7c:f7: 98:16:0e:45:b0:9b:fe:06:d6:84:0b:9c:fd:99:54: f7:18:3f:64:4c:17:d3:87:07:c4:59:fa:24:66:10: 5d:9b:e0:0e:ff:bc:b2:52:f0:cd:86:65:72:68:76: f9:4e:92:b6:a4:63:b9:16:68:ad:33:2a:a5:b4:1e: d4:d5:6f:2c:9e:89:6b:64:73:42:49:b4:9b:c6:79: 3a:96:d0:9a:82:2e:fe:c4:62:7a:a5:4f:00:31:ee: ed:44:37:23:b3:69:fb:64:a4:be:8f:2b:47:a8:5c: 58:85:9d:e6:24:01:a7:19:2f:7e:de:88:ff:df:b2: 96:5d:b7:73:eb:73:71:48:ef:94:6e:a8:4e:25:93: 7d:0b:16:0a:fe:ab:fa:d3:bb:bb:02:5f:ff:d4:37: dc:fc:a3:a5:a2:64:cf:22:13:69:45:3a:d0:52:63: cd:60:f7:57:53:0a:89:d3:b3:49:e5:ef:03:68:1e: 07:09:1c:53:68:31:62:c2:b2:98:1e:f9:c0:79:90: 6c:a5:63:c2:d3:ce:a1:7c:e5:48:06:44:90:b7:90: 17:5d:e6:7d:ae:6f:48:46:dc:27:64:fc:ca:ab:e4: 28:0c:f4:92:9a:90:b7:ac:9c:5f:a9:a4:ee:b3:f8: 4b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2F:D0:80:E0:8C:41:43:96:EF:C8:05:EC:57:5D:4F:A1:C2:7A:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7f:7a:4d:34:ea:a6:29:03:a2:13:0d:22:98:8b:b6:84:66: 20:cc:b5:80:28:1b:74:04:f3:25:6f:ec:95:07:06:31:0e:38: 23:25:bb:e9:fc:f2:76:d7:bc:30:24:19:1f:c2:37:09:59:e1: 8e:39:c3:fd:a5:8b:5c:5e:9b:96:5c:d7:b2:ba:c7:21:9d:9a: 58:80:05:98:4c:ad:ed:bd:22:4d:27:46:ea:74:a8:28:50:49: d4:fa:ea:d0:28:2e:fd:3d:c1:70:2a:f8:d9:cc:aa:9c:95:70: eb:27:76:55:4f:2d:d2:16:2e:35:f5:14:e5:d7:00:d9:d5:0a: e2:a0:8b:0f:e7:00:ad:d6:84:0d:08:2f:c6:71:33:11:4c:bf: 47:3a:8d:a7:1d:0d:5b:9d:0c:e6:21:9d:f0:61:f7:3a:ba:5f: 1a:1e:0f:76:4a:8b:67:67:a4:2e:a4:10:99:dc:1a:75:e7:fb: da:15:13:f0:b4:72:8e:a2:92:cf:6f:a4:4d:80:30:41:4b:8d: 12:c5:dd:d4:b4:01:78:2d:1c:f6:11:e7:92:9a:48:2c:bc:1c: 00:ac:86:ff:0c:3d:c9:fa:2c:1d:5c:29:10:7e:11:9f:03:c5: 87:10:fa:90:6d:1c:8b:8d:86:6a:be:18:8b:6b:3e:1d:ee:5f: f9:c1:2a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6TDdWN+R2JqEu/NkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDcyMTE3MDAxM1oXDTI2MTAxOTE3MDAxM1owLzEtMCsGA1UEAxMk YTU0N2QxZjMtYzViNC00ZWJmLThmZDgtZDRmMzExNjJlYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOFGOeiVMTpq1reHfPeYFg5FsJv+BtaEC5z9 mVT3GD9kTBfThwfEWfokZhBdm+AO/7yyUvDNhmVyaHb5TpK2pGO5FmitMyqltB7U 1W8snolrZHNCSbSbxnk6ltCagi7+xGJ6pU8AMe7tRDcjs2n7ZKS+jytHqFxYhZ3m JAGnGS9+3oj/37KWXbdz63NxSO+UbqhOJZN9CxYK/qv607u7Al//1Dfc/KOlomTP IhNpRTrQUmPNYPdXUwqJ07NJ5e8DaB4HCRxTaDFiwrKYHvnAeZBspWPC086hfOVI BkSQt5AXXeZ9rm9IRtwnZPzKq+QoDPSSmpC3rJxfqaTus/hLBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgv0IDgjEFDlu/IBexXXU+hwnooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvZDczNDkwZTktOGQ5MC0z MWQwLWFkNDEtYmY5YWZjMjZjZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ/ek006qYpA6ITDSKYi7aEZiDMtYAoG3QE8yVv7JUHBjEOOCMlu+n8 8nbXvDAkGR/CNwlZ4Y45w/2li1xem5Zc17K6xyGdmliABZhMre29Ik0nRup0qChQ SdT66tAoLv09wXAq+NnMqpyVcOsndlVPLdIWLjX1FOXXANnVCuKgiw/nAK3WhA0I L8ZxMxFMv0c6jacdDVudDOYhnfBh9zq6XxoeD3ZKi2dnpC6kEJncGnXn+9oVE/C0 co6iks9vpE2AMEFLjRLF3dS0AXgtHPYR55KaSCy8HACshv8MPcn6LB1cKRB+EZ8D xYcQ+pBtHIuNhmq+GItrPh3uX/nBKkQ= -----END CERTIFICATE-----Generated at Fri Jul 24 03:36:33 2026 by rpki-client