$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/701c96dc-f7d4-3386-927b-5808922c0565.roa File: 701c96dc-f7d4-3386-927b-5808922c0565.roa (raw, json) Hash identifier: abXizWCwUrPlZsrXUSchfpFbQlN2FgBT4iERXIWSKyU= Subject key identifier: 42:9E:F3:85:B7:DD:55:10:22:DA:7D:E1:CB:B1:21:D7:60:FD:51:A8 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D19B4AC6302C73532CD5FD980 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/701c96dc-f7d4-3386-927b-5808922c0565.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396253 IP address blocks: 138.43.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:ac:63:02:c7:35:32:cd:5f:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=b13c1ec1-70f6-4afb-b704-b2194f3c8d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f6:71:a2:ca:5c:db:9f:17:0b:79:0a:8d:ba: fb:86:f4:5e:72:b3:a1:97:4d:54:ad:18:67:ca:09: 31:9c:b0:5d:c1:3f:75:e1:be:53:e3:1e:b8:7a:08: 6e:01:19:3d:0d:f9:19:ce:a1:1b:22:88:c1:45:51: 3f:9b:06:db:e2:44:1d:99:27:6e:57:81:1f:a0:76: b6:b8:89:fd:e5:a9:34:85:95:42:0d:32:7a:17:91: c8:2f:78:61:c1:ed:f1:bb:46:74:00:3b:6a:4c:9a: b5:83:5b:cd:74:59:71:92:bf:68:29:28:d5:eb:ff: 1b:e6:fc:ab:8d:f7:00:e1:e7:8f:24:be:80:06:a3: de:11:4f:a3:58:e2:6f:b6:61:43:36:46:e2:9d:af: ee:e8:21:f7:b5:64:9b:3e:4d:b7:9e:6a:c6:ed:f6: ab:f3:38:26:42:ef:3c:87:3e:76:af:13:86:c4:c0: 6a:e8:a0:80:8d:53:e0:59:38:73:c8:38:09:4b:52: b2:75:28:27:0d:04:bc:7f:94:74:cf:4e:08:cc:c3: 3e:e9:a8:7f:6a:fb:40:08:df:1d:9a:89:de:1e:d7: 88:0e:53:3e:a4:83:4e:7f:a2:1d:29:57:88:e4:c0: 99:8c:b4:cf:88:70:00:12:4c:e3:cf:30:bd:9b:94: cd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9E:F3:85:B7:DD:55:10:22:DA:7D:E1:CB:B1:21:D7:60:FD:51:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/701c96dc-f7d4-3386-927b-5808922c0565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:48:21:23:5e:17:56:5a:74:e2:37:63:71:6b:5b:e8:d1:9b: df:f0:7e:4f:3c:56:80:01:17:d8:ab:ae:35:d4:b9:9c:b2:3b: d0:2d:d3:73:e3:20:c6:06:ca:9e:51:d1:0a:bf:1a:79:d0:10: 64:67:2c:33:1f:d8:fb:fa:57:08:74:d1:10:07:86:d8:49:bd: 51:24:ff:a1:e9:48:7b:53:77:b4:dc:8d:cc:c9:31:54:41:e6: d3:50:d0:ed:ec:d8:e1:76:39:b1:9d:3e:59:ee:3d:bf:ca:b0: 22:ad:4c:7a:66:de:f5:35:f1:06:e5:22:36:33:91:f7:c4:df: 90:ac:66:57:52:d0:06:8c:b5:8f:d6:2b:0c:01:69:93:21:21: a1:6f:f3:2f:d2:7a:71:24:d7:1d:9c:cf:10:01:24:ad:32:92: 26:59:cc:75:fb:df:aa:24:de:8f:04:25:0d:4c:9e:a2:60:ab: 4b:f2:15:cc:7b:91:d5:06:ad:24:89:74:ae:a2:51:97:c5:c4: 42:aa:26:f0:81:32:27:2e:37:25:89:97:de:92:fb:8b:2a:18: f6:20:92:fe:3c:f9:e5:89:18:25:ec:00:29:43:aa:c4:00:65: 41:37:1f:22:43:1c:fa:be:aa:8f:74:c3:f2:ec:fb:17:4c:c8: 0e:8f:67:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKxjAsc1Ms1f2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YjEzYzFlYzEtNzBmNi00YWZiLWI3MDQtYjIxOTRmM2M4ZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPZxospc258XC3kKjbr7hvRecrOhl01UrRhn ygkxnLBdwT914b5T4x64eghuARk9DfkZzqEbIojBRVE/mwbb4kQdmSduV4EfoHa2 uIn95ak0hZVCDTJ6F5HIL3hhwe3xu0Z0ADtqTJq1g1vNdFlxkr9oKSjV6/8b5vyr jfcA4eePJL6ABqPeEU+jWOJvtmFDNkbina/u6CH3tWSbPk23nmrG7far8zgmQu88 hz52rxOGxMBq6KCAjVPgWThzyDgJS1KydSgnDQS8f5R0z04IzMM+6ah/avtACN8d moneHteIDlM+pINOf6IdKVeI5MCZjLTPiHAAEkzjzzC9m5TN4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKe84W33VUQItp94cuxIddg/VGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNzAxYzk2ZGMtZjdkNC0z Mzg2LTkyN2ItNTgwODkyMmMwNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiitoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlIISNeF1ZadOI3Y3FrW+jRm9/wfk88VoABF9irrjXUuZyyO9At03Pj IMYGyp5R0Qq/GnnQEGRnLDMf2Pv6Vwh00RAHhthJvVEk/6HpSHtTd7TcjczJMVRB 5tNQ0O3s2OF2ObGdPlnuPb/KsCKtTHpm3vU18QblIjYzkffE35CsZldS0AaMtY/W KwwBaZMhIaFv8y/SenEk1x2czxABJK0ykiZZzHX736ok3o8EJQ1MnqJgq0vyFcx7 kdUGrSSJdK6iUZfFxEKqJvCBMicuNyWJl96S+4sqGPYgkv48+eWJGCXsAClDqsQA ZUE3HyJDHPq+qo90w/Ls+xdMyA6PZ+o= -----END CERTIFICATE-----Generated at Thu Mar 26 19:54:45 2026 by rpki-client