$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa File: 14e815f8-9bf5-3679-b99c-adfb53e03dab.roa (raw, json) Hash identifier: 6aBgxzhUWJKyrJDrkz4nimzdEI0dX5k+s9rb8cajY0o= Subject key identifier: 60:77:1E:C3:2E:DD:DC:50:D6:96:D0:30:64:9F:82:FD:48:E0:E7:59 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B477C69A39D6BB77ECEC80480 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396253 IP address blocks: 138.43.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:69:a3:9d:6b:b7:7e:ce:c8:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=7013f2d2-521d-4b97-8a8a-22d5da2e4da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:15:c3:0e:c0:f5:a6:6e:09:21:89:7b:ee:01: d6:91:97:f6:32:6f:87:f6:54:f9:44:23:56:78:7a: bf:fe:19:15:0f:bb:9e:36:d7:e7:43:2d:bf:95:6c: e4:55:b5:26:73:ba:17:03:57:e6:7b:e5:c3:07:37: d4:2d:f7:ea:39:21:6e:50:bb:52:03:2f:93:3e:6b: 81:b5:fb:93:f8:42:df:02:a6:ed:31:ed:cd:c7:2d: 41:39:c0:e3:f9:53:48:c4:26:77:55:ee:d5:d2:d3: b7:b5:55:c8:68:93:aa:4c:11:d1:91:4d:05:77:22: 6b:66:c5:7a:74:79:c6:1a:0f:82:21:1c:e1:91:af: 4e:f4:b0:7b:2e:1c:84:29:5f:44:75:46:8b:34:2f: 0e:3f:10:ea:e3:ce:db:68:41:f1:0c:08:a1:3e:4b: ab:b8:d1:4b:fc:46:08:38:49:14:68:d7:d8:39:8d: 3f:57:c4:6b:b8:2b:ef:ed:5c:35:9b:2d:f0:36:ed: 70:26:58:2f:a3:f4:61:21:08:a9:22:7c:9e:78:c9: 9d:82:c8:76:4c:24:48:8c:92:39:0e:cd:10:83:43: 3c:9c:52:90:9c:99:bc:1d:35:2e:70:e6:43:70:7a: 3e:b1:20:ba:26:1a:52:17:58:59:e2:22:b7:c2:69: 2d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:77:1E:C3:2E:DD:DC:50:D6:96:D0:30:64:9F:82:FD:48:E0:E7:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a2:08:bc:61:6e:2e:69:75:dd:3c:61:d4:29:4b:00:68:9c: cd:4a:1a:6b:93:8d:ab:87:ba:25:1e:93:55:29:24:e3:8f:d5: a8:2a:c4:4e:8d:e4:3a:3b:c6:0b:e5:c8:00:e7:18:26:54:a3: d7:91:fa:e2:81:91:1a:17:91:48:dd:37:c7:2a:09:a8:c6:3e: ab:12:9b:dc:76:b0:a7:c0:60:88:4a:df:ee:f0:1b:c5:91:cf: 07:af:ed:c8:72:29:61:36:b8:ef:42:65:98:bf:de:b0:b0:d9: 0a:f5:20:e9:4d:a0:c7:09:15:52:3c:40:9a:e4:1c:b3:60:36: 68:02:48:d5:fc:dc:79:b2:6b:43:70:8f:d3:81:03:3f:31:b4: d4:a0:6f:53:40:92:91:84:b3:46:58:33:84:38:8e:d5:30:30: bc:80:99:45:f3:e0:f7:be:5e:28:06:b4:a5:6f:55:42:ef:14: 18:c7:58:1f:3a:fe:b3:58:99:5c:7a:33:19:da:3e:87:13:88: 89:f3:7b:72:3d:9c:fe:d7:06:d0:a7:97:e8:4d:d6:06:49:ac: 7f:6e:0e:0f:8f:92:0e:03:05:77:d2:5a:fe:1d:17:c4:31:15: 7b:70:6e:51:24:00:48:f4:48:84:3e:a2:61:d5:5a:6e:db:3c: 7d:4a:4e:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfGmjnWu3fs7IBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NzAxM2YyZDItNTIxZC00Yjk3LThhOGEtMjJkNWRhMmU0ZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hXDDsD1pm4JIYl77gHWkZf2Mm+H9lT5RCNW eHq//hkVD7ueNtfnQy2/lWzkVbUmc7oXA1fme+XDBzfULffqOSFuULtSAy+TPmuB tfuT+ELfAqbtMe3Nxy1BOcDj+VNIxCZ3Ve7V0tO3tVXIaJOqTBHRkU0FdyJrZsV6 dHnGGg+CIRzhka9O9LB7LhyEKV9EdUaLNC8OPxDq487baEHxDAihPkuruNFL/EYI OEkUaNfYOY0/V8RruCvv7Vw1my3wNu1wJlgvo/RhIQipInyeeMmdgsh2TCRIjJI5 Ds0Qg0M8nFKQnJm8HTUucOZDcHo+sSC6JhpSF1hZ4iK3wmktfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB3HsMu3dxQ1pbQMGSfgv1I4OdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMTRlODE1ZjgtOWJmNS0z Njc5LWI5OWMtYWRmYjUzZTAzZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiitiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaiCLxhbi5pdd08YdQpSwBonM1KGmuTjauHuiUek1UpJOOP1agqxE6N 5Do7xgvlyADnGCZUo9eR+uKBkRoXkUjdN8cqCajGPqsSm9x2sKfAYIhK3+7wG8WR zwev7chyKWE2uO9CZZi/3rCw2Qr1IOlNoMcJFVI8QJrkHLNgNmgCSNX83Hmya0Nw j9OBAz8xtNSgb1NAkpGEs0ZYM4Q4jtUwMLyAmUXz4Pe+XigGtKVvVULvFBjHWB86 /rNYmVx6MxnaPocTiInze3I9nP7XBtCnl+hN1gZJrH9uDg+Pkg4DBXfSWv4dF8Qx FXtwblEkAEj0SIQ+omHVWm7bPH1KTs0= -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:26 2025 by rpki-client