$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa File: 0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa (raw, json) Hash identifier: 12/sMsIjDc16E57+MXwkwNlGrMEKRd6lyCGOjrTNXwk= Subject key identifier: B2:F2:80:85:1E:16:17:4E:F6:D9:64:36:59:2B:13:8B:E8:B5:30:98 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B583C7FC5F4BBABC229106400 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396253 IP address blocks: 138.43.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:7f:c5:f4:bb:ab:c2:29:10:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=04f07b7c-e7c7-4ea9-a23c-fb688794aeff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:81:91:77:1d:1a:93:c1:21:a9:92:0b:a1:4a: e8:9c:eb:96:24:fd:81:57:6b:99:3c:67:e9:cb:30: 0e:88:ca:21:82:9d:2f:d4:1d:3b:1c:29:c0:11:67: 48:f5:5c:30:6f:01:76:94:b4:f4:c6:43:3a:d8:34: 39:e5:d0:78:15:99:69:df:09:9d:b3:37:f4:c4:20: b9:82:63:80:10:f3:a5:f9:1e:a9:95:f6:5e:b5:25: 40:ee:8b:44:7c:99:19:e9:c7:57:91:b3:82:74:c5: f5:32:1d:a0:b7:75:f9:9c:f3:0c:09:ca:cd:14:3a: 95:41:e2:9b:87:48:60:ea:07:28:e3:a8:ef:0f:91: 94:ca:83:da:89:ec:ff:dd:33:9f:49:76:5f:27:ee: bf:6e:5d:16:86:37:9d:0c:d5:8e:ea:94:b9:3d:4e: b6:de:f4:dc:75:10:28:11:de:6f:95:87:c4:9a:e1: db:35:1a:01:b6:c9:dd:ab:b6:cf:d8:c8:97:f2:15: 49:94:b2:fb:47:95:57:0a:97:0d:b1:73:c3:93:e2: fd:8d:44:a9:b6:0e:52:09:6a:9e:a8:5a:af:13:24: da:a1:91:a8:07:30:60:cd:af:11:90:ae:45:77:c8: 05:42:36:c6:4a:6b:a9:4e:10:d2:31:aa:80:be:6f: 12:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F2:80:85:1E:16:17:4E:F6:D9:64:36:59:2B:13:8B:E8:B5:30:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6b:16:24:29:39:59:dc:1a:fe:91:ab:51:4d:b4:de:95:48: 9a:c9:07:b8:66:79:c8:55:29:9e:7a:cc:86:77:aa:a5:60:8c: 8c:3b:7a:c1:ff:00:4d:7b:82:0b:c2:c3:d7:8d:88:9d:ee:fd: 0c:d8:e8:e5:c5:0b:eb:3e:66:f8:9b:92:6a:a2:ba:3a:be:d9: 29:5d:79:f7:f2:64:64:f3:89:e1:40:29:f8:37:11:f0:ee:44: c6:35:bc:0f:be:93:54:d5:7f:d1:21:3e:3b:7d:e0:c4:95:33: 28:0c:d2:cc:13:03:31:8c:20:49:c5:61:42:da:d0:96:83:a6: 7b:9b:69:ce:1d:92:79:e1:d3:da:86:2f:66:55:9c:68:71:19: ef:3f:ee:b8:0d:c1:23:09:61:fd:a6:c8:36:35:95:88:9b:b6: 6c:3f:70:46:b4:4b:e6:92:40:5f:b3:2e:cf:f6:f8:10:42:81: 12:a5:9e:93:c6:ca:62:67:43:dc:37:bb:b4:6c:73:67:29:6a: 99:c1:17:3a:c5:0a:d5:24:87:fb:36:89:d0:65:b2:3d:21:ff: 00:a3:3f:e7:2c:8e:0b:da:31:e7:d3:df:9a:95:28:01:b6:f8: 53:09:66:5f:26:3d:e4:19:fc:4e:cf:95:70:5c:c8:be:87:f9: 34:af:cf:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPH/F9LurwikQZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDRmMDdiN2MtZTdjNy00ZWE5LWEyM2MtZmI2ODg3OTRhZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoGRdx0ak8EhqZILoUronOuWJP2BV2uZPGfp yzAOiMohgp0v1B07HCnAEWdI9VwwbwF2lLT0xkM62DQ55dB4FZlp3wmdszf0xCC5 gmOAEPOl+R6plfZetSVA7otEfJkZ6cdXkbOCdMX1Mh2gt3X5nPMMCcrNFDqVQeKb h0hg6gco46jvD5GUyoPaiez/3TOfSXZfJ+6/bl0WhjedDNWO6pS5PU623vTcdRAo Ed5vlYfEmuHbNRoBtsndq7bP2MiX8hVJlLL7R5VXCpcNsXPDk+L9jUSptg5SCWqe qFqvEyTaoZGoBzBgza8RkK5Fd8gFQjbGSmupThDSMaqAvm8SEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLygIUeFhdO9tlkNlkrE4votTCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGFhY2NjZjktYzgwMi0z ZTk0LWI1NDUtM2UwYTk2YmJhNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiitqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBrFiQpOVncGv6Rq1FNtN6VSJrJB7hmechVKZ56zIZ3qqVgjIw7esH/ AE17ggvCw9eNiJ3u/QzY6OXFC+s+Zvibkmqiujq+2SldeffyZGTzieFAKfg3EfDu RMY1vA++k1TVf9EhPjt94MSVMygM0swTAzGMIEnFYULa0JaDpnubac4dknnh09qG L2ZVnGhxGe8/7rgNwSMJYf2myDY1lYibtmw/cEa0S+aSQF+zLs/2+BBCgRKlnpPG ymJnQ9w3u7Rsc2cpapnBFzrFCtUkh/s2idBlsj0h/wCjP+csjgvaMefT35qVKAG2 +FMJZl8mPeQZ/E7PlXBcyL6H+TSvz1U= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:05 2025 by rpki-client