$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b2777a0f-6c31-3038-9e0b-5a2ea78b8ab5.roa File: b2777a0f-6c31-3038-9e0b-5a2ea78b8ab5.roa (raw, json) Hash identifier: jnxFMG7eHsVHA1U8hCKIBYb0waXi0Kze0KNQPKgwD0I= Subject key identifier: EE:33:A3:56:E4:E8:30:C2:6E:6D:3C:84:91:27:4C:DF:5B:71:B9:D4 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B4E770E2850282260961D9680 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b2777a0f-6c31-3038-9e0b-5a2ea78b8ab5.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 396253 IP address blocks: 138.43.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0e:28:50:28:22:60:96:1d:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=5fa3c8e3-c682-4b7b-945d-c9f547a4d8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:f7:a3:4b:3f:9f:f9:92:3f:3b:ef:71:5c: 48:2a:43:c4:c5:aa:77:e8:9d:ef:5a:e2:05:55:27: 01:4c:7b:43:c4:2b:73:1f:5a:2c:0c:4f:e7:e3:d3: 99:54:8d:76:15:98:8d:71:ce:f7:ed:5a:15:31:8f: 52:3e:a0:94:9f:4c:cc:c4:46:99:de:6b:6d:f6:4b: 6e:b3:75:04:a9:12:7c:53:e6:d6:ae:ea:53:33:a3: dc:d7:b4:b1:cb:e9:6e:4d:2f:1b:b1:5a:92:f2:bf: 11:39:6c:f8:9d:30:0e:ea:8f:a4:2a:fc:9b:67:17: 17:da:34:01:d3:6b:b8:90:f6:06:b7:5b:94:a4:cc: 48:d7:16:4b:26:a3:25:ba:df:7c:96:b2:eb:52:7c: 54:b0:26:6f:29:1d:21:d0:12:04:c9:32:f8:ed:e7: 7e:cf:34:44:2e:9f:9d:fc:6a:44:98:40:d8:ce:3c: a0:8d:91:c1:b7:31:30:cd:28:f8:e9:e5:da:5b:be: 6e:35:d1:fc:15:68:3e:4c:c3:6b:5b:f6:a2:d5:37: 0f:5b:42:01:93:6d:c9:32:37:b0:6e:d2:6c:b1:e7: b3:d8:d6:b8:d6:b0:2d:5f:d2:88:cf:3a:5f:c6:15: c7:86:01:2c:4d:db:0d:5b:74:f9:4f:26:65:e2:24: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:33:A3:56:E4:E8:30:C2:6E:6D:3C:84:91:27:4C:DF:5B:71:B9:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b2777a0f-6c31-3038-9e0b-5a2ea78b8ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:3f:4b:e1:dc:e8:66:45:d0:6d:5a:20:76:36:f3:19:bf:24: 38:1e:6d:c9:e3:6e:c9:93:c9:6a:27:2c:3a:82:0c:b7:cd:b8: dd:4a:7a:e4:85:3c:08:02:96:20:7b:aa:d3:c1:9b:3c:5b:9c: e2:10:ad:1d:14:6a:ac:0f:30:93:c9:c2:a1:02:6d:6e:b3:97: ab:db:c8:e1:a3:dd:45:84:d9:c4:3a:34:4d:b6:4a:07:51:3a: 33:e5:39:53:20:c6:83:e3:ab:69:ef:c0:4c:bc:79:14:1c:ce: b0:fe:9d:ff:07:fc:25:dc:2b:10:fe:27:ae:6a:4d:55:cc:cc: cf:34:2d:f3:7f:ed:0b:cc:55:43:43:fc:31:e1:9f:6b:b9:e8: 3a:cf:8e:ab:ba:e9:d8:20:0a:90:e7:cc:c0:f0:56:9c:64:a5: a8:c7:96:56:30:fe:fc:b5:ce:5e:1a:6e:9f:8a:2c:e0:37:69: 92:47:fc:3f:6d:65:ca:cd:30:cb:d7:ea:b1:39:9d:cf:68:87: 66:0a:c2:6a:9f:d2:d5:01:cb:bc:75:c4:a7:f8:f4:c1:39:ca: 5b:5e:5d:62:79:e4:c6:5b:52:d3:e9:e6:86:5f:de:19:45:b6: d7:cf:78:ed:c2:9a:e8:a8:ea:61:f4:94:6a:50:95:5c:0a:63: 33:a0:5d:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdw4oUCgiYJYdloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NWZhM2M4ZTMtYzY4Mi00YjdiLTk0NWQtYzlmNTQ3YTRkOGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS33o0s/n/mSPzvvcVxIKkPExap36J3vWuIF VScBTHtDxCtzH1osDE/n49OZVI12FZiNcc737VoVMY9SPqCUn0zMxEaZ3mtt9ktu s3UEqRJ8U+bWrupTM6Pc17Sxy+luTS8bsVqS8r8ROWz4nTAO6o+kKvybZxcX2jQB 02u4kPYGt1uUpMxI1xZLJqMlut98lrLrUnxUsCZvKR0h0BIEyTL47ed+zzRELp+d /GpEmEDYzjygjZHBtzEwzSj46eXaW75uNdH8FWg+TMNrW/ai1TcPW0IBk23JMjew btJsseez2Na41rAtX9KIzzpfxhXHhgEsTdsNW3T5TyZl4iT1CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4zo1bk6DDCbm08hJEnTN9bcbnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYjI3NzdhMGYtNmMzMS0z MDM4LTllMGItNWEyZWE3OGI4YWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiitmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI/S+Hc6GZF0G1aIHY28xm/JDgebcnjbsmTyWonLDqCDLfNuN1KeuSF PAgCliB7qtPBmzxbnOIQrR0UaqwPMJPJwqECbW6zl6vbyOGj3UWE2cQ6NE22SgdR OjPlOVMgxoPjq2nvwEy8eRQczrD+nf8H/CXcKxD+J65qTVXMzM80LfN/7QvMVUND /DHhn2u56DrPjqu66dggCpDnzMDwVpxkpajHllYw/vy1zl4abp+KLOA3aZJH/D9t ZcrNMMvX6rE5nc9oh2YKwmqf0tUBy7x1xKf49ME5ylteXWJ55MZbUtPp5oZf3hlF ttfPeO3Cmuio6mH0lGpQlVwKYzOgXc0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:33:17 2025 by rpki-client