$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa File: 0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa (raw, json) Hash identifier: h4z3RvLAQh0gfwx4adqh5y9vx9n9/4BOznp0mlxV+hg= Subject key identifier: 94:3E:55:C9:82:70:A9:AC:16:98:DE:D7:6D:B0:A2:3F:CB:C6:D4:9E Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D19B4A81BFC3B8D758D8FD400 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396253 IP address blocks: 138.43.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a8:1b:fc:3b:8d:75:8d:8f:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=796df88c-5893-4095-9177-5f41c109ec9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:ed:a1:e2:f6:68:5e:7a:f8:de:02:58:83: 6d:14:81:69:6b:30:3c:dc:cb:2e:50:22:f4:f6:c4: 21:ab:36:4a:27:4e:48:b4:09:8e:a2:fa:08:31:b0: 97:cc:5c:75:27:0a:aa:ae:1c:4d:c6:27:21:bc:89: 77:46:a2:d6:6d:25:bc:61:2c:60:94:84:2c:f2:26: 24:0a:81:dc:88:e7:af:19:64:b5:45:15:df:bb:a7: 14:c7:82:b7:40:c6:e7:ed:1b:67:9a:14:f1:a3:74: 35:d4:a8:0e:7a:a8:d5:fd:48:7b:43:92:cf:e5:35: 05:e3:fd:0d:27:75:a1:cf:6f:47:10:34:7d:5c:4d: 7c:94:7c:4e:f6:b4:a7:24:0d:c3:0e:72:74:07:62: 3d:d0:d6:8a:3e:d5:29:e6:6c:5b:74:1c:b1:ec:2b: 66:44:76:e8:04:ed:cb:43:f1:97:cd:82:ec:d0:a1: b0:ec:f8:04:2c:de:0e:0d:fd:6b:88:54:ee:94:83: 73:ef:02:c3:6e:33:a1:e4:f0:5d:fa:a4:2b:41:14: fc:0e:31:30:d2:11:8d:6b:a6:5b:2c:4e:81:19:81: a7:50:a4:5f:5d:ab:40:92:64:ed:ec:1e:24:08:a1: 50:ab:55:55:74:39:9a:53:1a:20:5a:e8:66:38:b6: 1f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3E:55:C9:82:70:A9:AC:16:98:DE:D7:6D:B0:A2:3F:CB:C6:D4:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:26:72:71:69:59:c1:92:e3:a5:b0:74:e0:b1:50:de:1e:96: 08:29:45:29:68:28:c2:6c:62:44:49:f6:0a:5d:81:69:6b:4e: 20:5a:4b:dc:a1:01:f1:ac:bf:3c:a6:20:c6:ee:b1:69:8c:46: 43:6e:7e:67:e7:76:94:04:6d:67:68:8d:e1:f4:fe:c3:55:ed: 6c:6b:86:19:ea:bf:22:93:52:cf:8b:42:bf:dc:25:01:4d:99: 15:f1:68:9d:63:50:39:89:c6:76:50:16:e6:ce:fd:98:7f:51: 5b:d3:0b:0a:e9:2b:31:5b:55:23:8b:77:02:a0:ff:f1:0e:b4: 18:28:35:35:27:d9:a0:9f:e7:23:de:c1:9e:a6:3c:2f:91:f6: 1e:eb:af:48:1f:9d:38:96:5c:f1:b5:a2:17:38:ab:92:35:91: f2:35:c9:c1:c8:4b:96:f2:8a:ca:d6:75:30:77:26:7a:cb:bd: bd:3b:02:9d:18:0f:74:35:cd:70:99:10:4c:cc:be:d3:4a:19: a7:6e:5f:48:7c:cb:53:42:72:55:07:6b:50:2f:e3:2d:37:6b: 4a:25:ff:32:ed:8e:d2:15:2c:fb:0a:2f:78:23:d4:86:d5:47: 1d:a0:b6:1c:68:c5:8e:b0:90:cf:fd:e1:80:e5:71:df:0e:13: 6c:3e:18:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKgb/DuNdY2P1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk Nzk2ZGY4OGMtNTg5My00MDk1LTkxNzctNWY0MWMxMDllYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUTtoeL2aF56+N4CWINtFIFpazA83MsuUCL0 9sQhqzZKJ05ItAmOovoIMbCXzFx1JwqqrhxNxichvIl3RqLWbSW8YSxglIQs8iYk CoHciOevGWS1RRXfu6cUx4K3QMbn7RtnmhTxo3Q11KgOeqjV/Uh7Q5LP5TUF4/0N J3Whz29HEDR9XE18lHxO9rSnJA3DDnJ0B2I90NaKPtUp5mxbdByx7CtmRHboBO3L Q/GXzYLs0KGw7PgELN4ODf1riFTulINz7wLDbjOh5PBd+qQrQRT8DjEw0hGNa6Zb LE6BGYGnUKRfXatAkmTt7B4kCKFQq1VVdDmaUxogWuhmOLYf0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQ+VcmCcKmsFpje122woj/LxtSeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGFhY2NjZjktYzgwMi0z ZTk0LWI1NDUtM2UwYTk2YmJhNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiitqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAmcnFpWcGS46WwdOCxUN4elggpRSloKMJsYkRJ9gpdgWlrTiBaS9yh AfGsvzymIMbusWmMRkNufmfndpQEbWdojeH0/sNV7WxrhhnqvyKTUs+LQr/cJQFN mRXxaJ1jUDmJxnZQFubO/Zh/UVvTCwrpKzFbVSOLdwKg//EOtBgoNTUn2aCf5yPe wZ6mPC+R9h7rr0gfnTiWXPG1ohc4q5I1kfI1ycHIS5byisrWdTB3JnrLvb07Ap0Y D3Q1zXCZEEzMvtNKGaduX0h8y1NCclUHa1Av4y03a0ol/zLtjtIVLPsKL3gj1IbV Rx2gthxoxY6wkM/94YDlcd8OE2w+GOc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:54 2026 by rpki-client