$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa File: fb972b12-802e-3973-880e-d35ad80cf075.roa (raw, json) Hash identifier: QA5git2okHy4ED99MS56GLc8cMFiSVA4SPUO3sPQedE= Subject key identifier: DE:38:24:DB:68:4B:73:8E:7D:1F:5A:43:54:61:D7:F4:DC:94:47:5C Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B477C698BC3195167361F8700 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 137922 IP address blocks: 138.43.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:69:8b:c3:19:51:67:36:1f:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=002289cd-4f04-462e-8d0b-2ef1cc03ea21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:a2:48:ed:b6:d0:f6:6a:28:ce:3a:14:9f: b9:8e:48:27:ac:02:2c:cb:87:c0:5c:65:76:50:4d: db:04:da:f0:73:5e:52:03:7f:2a:8b:85:ec:9d:14: 0e:87:da:af:aa:f9:7e:3d:93:75:99:02:ac:60:44: bd:82:1a:fa:d0:b6:1d:1f:0c:cf:61:76:59:c0:4b: d8:8a:38:47:1f:04:ba:68:1a:25:96:2c:5c:d4:70: cf:0a:9b:bf:76:0d:94:5c:19:7f:41:48:76:16:d4: 9e:dd:fc:f1:92:0d:c8:67:2c:8b:41:68:52:3b:78: 8c:7c:76:7e:0b:78:f9:e8:0f:32:c0:47:1c:31:f8: 4d:6d:ed:99:7d:c1:84:7d:3f:53:3f:9a:f6:a9:0c: e0:4c:bb:54:55:07:1e:84:4d:de:93:57:17:53:41: 21:82:d3:c3:e9:f9:4c:8c:50:7f:8d:76:2d:dc:e6: 96:e2:80:e8:30:15:28:40:ed:02:29:07:da:d7:45: bb:7e:a3:b4:20:fa:f1:4e:24:36:dc:bd:d2:35:a1: 44:a1:01:e3:40:25:8b:4c:1d:38:03:cf:2c:6b:31: a9:ad:75:f4:b5:f4:6a:64:a1:2b:29:63:09:8d:9f: 1c:35:29:8c:55:3b:9a:8b:c5:90:88:ce:06:d6:41: fc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:38:24:DB:68:4B:73:8E:7D:1F:5A:43:54:61:D7:F4:DC:94:47:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:97:8d:6a:24:72:41:21:4f:51:95:c3:0c:2e:e2:cc:e6:e7: 23:6d:3d:ab:da:c6:48:ff:67:fd:f4:38:8e:47:37:50:1d:df: 04:8b:53:0d:1e:25:22:1e:82:06:6e:7a:3a:38:bc:69:12:49: 68:bf:41:fd:6f:3a:d7:da:76:b5:fe:16:7a:4d:46:1b:b8:b5: 60:a5:92:20:59:b0:01:e5:cf:ec:2c:c7:dc:91:65:d3:45:d1: 99:f8:a8:fd:91:cc:20:9a:48:39:d2:ee:7a:da:df:de:08:cf: f6:bc:6f:2d:38:b5:da:6f:3d:e8:48:c9:1b:dd:87:bb:d6:1a: 76:ac:64:ee:14:82:f5:5d:2d:03:3b:e6:be:5c:4f:d4:00:0e: 3a:0e:db:2f:22:1c:51:46:90:88:fd:fc:ea:3c:67:af:06:48: f0:76:d8:74:2a:cb:a4:ea:08:bd:15:b0:56:5f:f5:7e:5a:aa: d5:1e:5a:5e:f4:54:6c:60:f1:9c:4a:e8:01:08:24:ae:29:60: 1b:d6:71:2f:0c:1e:64:ab:2c:64:e8:af:f3:33:cd:67:e3:4c: 23:ea:fb:5f:5e:62:fb:d5:01:5c:5d:f7:aa:aa:67:2a:d0:ce: bc:18:84:eb:e8:b3:ad:fa:05:e8:a7:4d:71:2e:57:57:b3:92: 02:58:c9:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfGmLwxlRZzYfhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MDAyMjg5Y2QtNGYwNC00NjJlLThkMGItMmVmMWNjMDNlYTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqSiSO220PZqKM46FJ+5jkgnrAIsy4fAXGV2 UE3bBNrwc15SA38qi4XsnRQOh9qvqvl+PZN1mQKsYES9ghr60LYdHwzPYXZZwEvY ijhHHwS6aBollixc1HDPCpu/dg2UXBl/QUh2FtSe3fzxkg3IZyyLQWhSO3iMfHZ+ C3j56A8ywEccMfhNbe2ZfcGEfT9TP5r2qQzgTLtUVQcehE3ek1cXU0EhgtPD6flM jFB/jXYt3OaW4oDoMBUoQO0CKQfa10W7fqO0IPrxTiQ23L3SNaFEoQHjQCWLTB04 A88sazGprXX0tfRqZKErKWMJjZ8cNSmMVTuai8WQiM4G1kH8uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN44JNtoS3OOfR9aQ1Rh1/TclEdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZmI5NzJiMTItODAyZS0z OTczLTg4MGUtZDM1YWQ4MGNmMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiitgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKXjWokckEhT1GVwwwu4szm5yNtPavaxkj/Z/30OI5HN1Ad3wSLUw0e JSIeggZuejo4vGkSSWi/Qf1vOtfadrX+FnpNRhu4tWClkiBZsAHlz+wsx9yRZdNF 0Zn4qP2RzCCaSDnS7nra394Iz/a8by04tdpvPehIyRvdh7vWGnasZO4UgvVdLQM7 5r5cT9QADjoO2y8iHFFGkIj9/Oo8Z68GSPB22HQqy6TqCL0VsFZf9X5aqtUeWl70 VGxg8ZxK6AEIJK4pYBvWcS8MHmSrLGTor/MzzWfjTCPq+19eYvvVAVxd96qqZyrQ zrwYhOvos636BeinTXEuV1ezkgJYyU4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:17 2025 by rpki-client