$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa File: d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa (raw, json) Hash identifier: H3I7RvuwTBR3FrFm3D7iEEsCcIxzMLu5Z4BCmcIHcK0= Subject key identifier: 2C:86:A2:50:11:DA:91:19:14:D7:FE:7C:64:CB:1B:0A:44:88:40:7F Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584FD7F137BF936B1A411539B780 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa Signing time: Sun 15 Nov 2026 02:00:12 +0000 ROA not before: Sun 15 Nov 2026 02:00:12 +0000 ROA not after: Sat 13 Feb 2027 02:00:12 +0000 asID: 395722 IP address blocks: 152.38.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d7:f1:37:bf:93:6b:1a:41:15:39:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Nov 15 02:00:12 2026 GMT Not After : Feb 13 02:00:12 2027 GMT Subject: CN=50f75e0c-0bf8-4b69-8ba0-302f3b60ab6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:e6:64:64:0e:38:5c:06:3b:f7:b1:f8:5d: a1:e2:ee:a2:30:35:ae:c9:c7:2c:9d:a4:fc:f3:17: 5b:7a:de:d7:d9:05:4c:60:ed:26:54:ff:f4:8d:37: 28:72:38:55:51:e4:38:cb:ec:f3:ca:98:33:bc:c1: c5:20:8d:49:19:40:05:d3:cb:75:51:28:c8:be:1b: 1e:2b:ea:8f:03:6f:33:6b:a5:4b:5f:58:6f:bb:d6: 59:b5:f2:ca:ad:d1:d5:9a:41:fc:03:f9:80:1d:f5: 3f:87:c7:f8:a3:b6:c0:ce:d6:12:97:d8:b5:83:ff: 89:65:7a:1f:30:84:c7:19:72:c3:e3:b1:76:98:00: 25:5a:1b:8a:29:88:11:78:5f:e4:b6:d3:4b:e7:99: 83:9b:ad:9d:94:27:1b:5f:7a:0b:b0:0a:60:33:de: b0:c2:e3:94:99:78:ff:d7:23:f8:85:39:1c:09:7e: 0c:64:24:46:ed:ee:4f:f1:f9:ce:cc:68:cc:8e:f6: 62:06:d1:38:5f:17:c4:f0:48:57:77:f1:32:6a:f0: 93:04:08:b0:48:f4:c0:40:5e:a8:a9:1a:67:06:ed: b6:aa:d5:4d:a6:79:4b:0b:85:59:ed:df:dd:1a:67: ad:78:72:9f:7e:9a:c7:66:6c:11:5b:8c:94:f4:1b: 3c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:86:A2:50:11:DA:91:19:14:D7:FE:7C:64:CB:1B:0A:44:88:40:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d73490e9-8d90-31d0-ad41-bf9afc26ce8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:1e:e1:42:24:18:98:64:25:b3:d8:71:80:b7:fd:86:41:0c: 93:45:1a:ae:62:25:21:2c:00:ab:9d:80:b2:de:80:65:5e:ed: 30:4d:df:3b:41:11:81:b0:b1:23:66:b5:8c:ca:51:80:68:82: 5e:6e:3d:c4:b3:8b:a5:b1:e3:ae:96:26:b4:6d:bd:b6:ed:9e: ca:91:50:44:b6:86:1a:95:42:cf:80:15:44:09:18:cd:84:73: 5c:50:ac:60:09:c2:bf:54:dd:ff:d9:6e:f6:59:77:a5:e7:0a: cd:04:7a:38:37:dc:02:d7:09:ab:e1:50:76:0f:71:47:a5:46: 7f:2e:b7:66:95:1e:b3:2b:23:f2:c0:8e:07:f0:4c:25:63:46: 6e:bb:e5:d3:01:f6:1c:fb:d8:b7:e8:63:66:ef:14:75:b3:40: ce:e4:bf:b4:a2:e0:91:09:5f:d0:ad:24:07:ee:db:1f:3c:09: 02:bf:3d:54:82:d0:f7:14:43:07:a6:d6:43:a7:3c:f0:a1:de: 8b:49:17:2a:64:95:a2:12:f7:86:ff:db:78:25:59:a3:c6:ca: 6e:16:40:44:b5:31:f5:07:f9:ac:0e:c8:cb:75:8e:d8:00:5e: 52:1f:11:e7:dd:4c:fa:ae:05:bf:16:a4:a6:7d:3e:6c:bd:11: 76:20:dc:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/X8Te/k2saQRU5t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MTExNTAyMDAxMloXDTI3MDIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NTBmNzVlMGMtMGJmOC00YjY5LThiYTAtMzAyZjNiNjBhYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/DmZGQOOFwGO/ex+F2h4u6iMDWuyccsnaT8 8xdbet7X2QVMYO0mVP/0jTcocjhVUeQ4y+zzypgzvMHFII1JGUAF08t1USjIvhse K+qPA28za6VLX1hvu9ZZtfLKrdHVmkH8A/mAHfU/h8f4o7bAztYSl9i1g/+JZXof MITHGXLD47F2mAAlWhuKKYgReF/kttNL55mDm62dlCcbX3oLsApgM96wwuOUmXj/ 1yP4hTkcCX4MZCRG7e5P8fnOzGjMjvZiBtE4XxfE8EhXd/EyavCTBAiwSPTAQF6o qRpnBu22qtVNpnlLC4VZ7d/dGmeteHKffprHZmwRW4yU9Bs8WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyGolAR2pEZFNf+fGTLGwpEiEB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvZDczNDkwZTktOGQ5MC0z MWQwLWFkNDEtYmY5YWZjMjZjZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAe4UIkGJhkJbPYcYC3/YZBDJNFGq5iJSEsAKudgLLegGVe7TBN3ztB EYGwsSNmtYzKUYBogl5uPcSzi6Wx466WJrRtvbbtnsqRUES2hhqVQs+AFUQJGM2E c1xQrGAJwr9U3f/ZbvZZd6XnCs0Eejg33ALXCavhUHYPcUelRn8ut2aVHrMrI/LA jgfwTCVjRm675dMB9hz72LfoY2bvFHWzQM7kv7Si4JEJX9CtJAfu2x88CQK/PVSC 0PcUQwem1kOnPPCh3otJFypklaIS94b/23glWaPGym4WQES1MfUH+awOyMt1jtgA XlIfEefdTPquBb8WpKZ9Pmy9EXYg3AU= -----END CERTIFICATE-----Generated at Sun Nov 15 10:18:42 2026 by rpki-client