$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa File: 0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa (raw, json) Hash identifier: 29sLQCww1j5mSBAwFVTlYbOsjEI2kLaLBlwjMdkB3Do= Subject key identifier: 25:C9:D9:60:4B:AC:56:CA:FE:0E:D8:41:FC:4A:5E:8C:C9:F0:37:B8 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D19B4AC782A0D6355FD4CA840 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396253 IP address blocks: 138.43.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:ac:78:2a:0d:63:55:fd:4c:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=1a7a926a-6260-4c35-9dc8-7fab2869effd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:50:61:f3:f0:41:f5:2e:32:34:d6:d3:58: 92:1d:62:0d:b1:e9:92:7c:35:ef:0f:a0:ad:fe:c4: 13:9f:d9:11:2d:e2:2c:0e:70:62:af:3a:88:20:12: 87:48:37:9a:5d:0c:03:d9:4b:6f:70:a9:73:9e:35: e5:d1:b6:fe:37:02:23:23:35:5f:cf:d1:d7:fb:59: c7:31:57:cb:fe:b5:d4:87:e6:01:4e:cd:31:ea:0f: ce:93:b1:9b:65:9c:a5:e9:91:74:71:0b:3b:51:77: 2f:c9:9e:b3:12:c2:4c:d7:7c:7d:e1:cc:7d:24:f7: 86:23:ba:1c:74:e9:c2:f2:36:d4:91:2e:3e:1f:76: 99:4e:4b:b7:99:08:bb:1b:ef:e5:85:c6:40:bd:59: 23:55:9a:98:7f:cb:e6:06:3d:8e:90:29:b1:61:42: e5:f0:a9:ef:10:4b:76:07:cd:89:e2:a9:97:ac:b8: a8:3d:01:88:3f:1a:7e:41:75:37:9d:22:fb:9e:73: 78:50:c1:9d:c8:c1:ef:19:28:b9:73:d1:67:c1:c3: ac:c4:e7:1e:dc:7c:04:b2:2c:12:77:92:4b:b8:a3: b1:8a:bc:02:cc:49:a4:bb:f5:a8:35:b4:42:92:f3: 7d:f1:0e:31:54:bf:0e:80:73:6c:04:75:71:17:33: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C9:D9:60:4B:AC:56:CA:FE:0E:D8:41:FC:4A:5E:8C:C9:F0:37:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:78:a9:4c:d8:8d:db:b3:f1:cc:ea:66:62:77:0a:54:20:7f: c2:f5:4f:48:90:54:f6:ba:16:b0:2e:2a:0e:82:b2:46:54:ac: 77:e0:c7:1b:43:94:fb:3a:a7:d7:d8:60:a5:e8:b2:ac:c5:c2: 6e:8e:42:21:f4:e6:67:d3:e2:30:79:e6:d8:34:08:0b:e9:06: c5:c0:3f:33:1b:98:1c:4d:31:1d:06:01:b9:30:08:02:f7:c9: cd:5c:85:d6:b2:61:f6:d7:6c:89:d3:0d:9a:83:5b:f9:1f:a7: 8c:d6:0f:c8:be:3a:48:0a:e2:35:e9:37:66:47:91:bb:1c:c8: 7c:88:a4:c5:b0:8f:4a:08:b4:d3:01:68:7c:99:12:d2:17:ff: 39:6b:42:1f:87:e3:a8:56:14:a9:ed:11:37:77:37:de:b2:90: 01:05:49:fc:76:9e:f5:a9:51:f5:0e:46:af:e8:cc:54:74:d8: 17:97:ab:1a:06:d1:51:11:8c:84:a2:a6:82:74:c3:a1:72:fb: 2c:ca:af:4c:cb:a6:4a:4c:09:7c:88:22:d6:23:24:3e:d1:46: 91:0c:f0:c6:97:e0:8f:28:c7:2f:30:a8:e0:6d:a8:ff:81:38: 41:c2:d8:29:7f:d8:12:2a:f7:55:38:a5:58:fe:72:30:25:f5: d1:7a:7c:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKx4Kg1jVf1MqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MWE3YTkyNmEtNjI2MC00YzM1LTlkYzgtN2ZhYjI4NjllZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPJQYfPwQfUuMjTW01iSHWINsemSfDXvD6Ct /sQTn9kRLeIsDnBirzqIIBKHSDeaXQwD2UtvcKlznjXl0bb+NwIjIzVfz9HX+1nH MVfL/rXUh+YBTs0x6g/Ok7GbZZyl6ZF0cQs7UXcvyZ6zEsJM13x94cx9JPeGI7oc dOnC8jbUkS4+H3aZTku3mQi7G+/lhcZAvVkjVZqYf8vmBj2OkCmxYULl8KnvEEt2 B82J4qmXrLioPQGIPxp+QXU3nSL7nnN4UMGdyMHvGSi5c9FnwcOsxOce3HwEsiwS d5JLuKOxirwCzEmku/WoNbRCkvN98Q4xVL8OgHNsBHVxFzMNYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXJ2WBLrFbK/g7YQfxKXozJ8De4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGMxYmU5NGMtZGM0OS0z YzkxLWJmNWMtZGRjM2Y5MGMyMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiitsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE94qUzYjduz8czqZmJ3ClQgf8L1T0iQVPa6FrAuKg6CskZUrHfgxxtD lPs6p9fYYKXosqzFwm6OQiH05mfT4jB55tg0CAvpBsXAPzMbmBxNMR0GAbkwCAL3 yc1chdayYfbXbInTDZqDW/kfp4zWD8i+OkgK4jXpN2ZHkbscyHyIpMWwj0oItNMB aHyZEtIX/zlrQh+H46hWFKntETd3N96ykAEFSfx2nvWpUfUORq/ozFR02BeXqxoG 0VERjISipoJ0w6Fy+yzKr0zLpkpMCXyIItYjJD7RRpEM8MaX4I8oxy8wqOBtqP+B OEHC2Cl/2BIq91U4pVj+cjAl9dF6fFE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:27 2026 by rpki-client