$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa File: 0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa (raw, json) Hash identifier: XzHdt2/i3vCwe2PV6B9fJQc+YTfAqypAasQLAYVqa7I= Subject key identifier: 95:9A:CF:4C:7A:D6:20:A4:73:DB:01:93:59:8C:10:D6:81:15:79:92 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584DFA7073C63FE9F9EF6CFC5AB0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 396253 IP address blocks: 138.43.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:73:c6:3f:e9:f9:ef:6c:fc:5a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=06e430ce-4cec-4aa4-b789-75efcdcf7801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:53:ef:e9:cf:76:2f:32:d8:aa:49:8b:89: 9c:01:f0:0e:b8:f4:ea:7f:a6:97:df:ca:a1:19:47: 7a:90:f6:f8:d4:63:f9:6d:a1:c0:a8:fd:46:0a:8b: 40:b9:5a:c6:e7:7b:02:db:cc:d8:37:4d:f1:07:3f: 86:92:40:76:5f:3c:be:a2:f2:fe:dc:3b:9f:16:ca: 56:62:5d:10:ab:c0:15:5e:6d:bf:a3:c6:d9:52:37: 4e:27:6a:91:53:e2:a8:f9:96:9b:8c:19:01:d5:14: 9a:49:3b:86:38:b2:eb:19:52:25:63:7c:b5:d6:15: c4:a7:10:70:a2:25:e9:ee:be:d2:46:5f:14:4d:6e: 2c:9c:fb:e2:9f:66:79:37:dd:03:72:e6:6d:ed:b5: d6:46:97:45:59:14:b0:d3:d5:ad:f6:da:8e:70:f0: 89:bf:25:41:8a:73:a0:8c:6a:11:cf:74:ad:e2:75: 17:10:f4:2c:4f:bc:2f:ca:57:51:58:fe:03:9d:b7: ea:de:c0:4d:9c:fd:23:c0:42:f7:9d:f6:b9:9f:f8: 44:80:b7:68:69:5e:53:46:0d:1a:72:01:55:58:39: b5:72:ee:af:87:90:8f:6c:49:1b:eb:3b:ea:72:a2: 70:78:88:2a:99:d2:f0:10:c6:a0:13:66:19:7a:2f: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9A:CF:4C:7A:D6:20:A4:73:DB:01:93:59:8C:10:D6:81:15:79:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:66:db:a4:86:ec:ca:a9:5b:ae:a7:b0:04:ca:64:ce:ab:6d: 03:ef:8e:a5:88:d4:46:93:08:43:4a:f9:1d:7d:fd:b2:b7:ea: 3a:81:42:04:6e:86:c0:c0:f0:34:a8:4a:2f:05:4c:2e:23:f8: e5:5d:c4:fd:23:80:d0:f8:d2:4d:13:61:e4:d4:b7:3b:35:e4: 90:17:cd:30:97:f7:26:d1:81:e5:38:7c:42:da:f7:84:9f:92: 33:ac:61:d9:2f:94:4a:84:e9:4a:90:0d:4e:b5:29:d9:73:8f: df:9b:7f:b6:0f:5c:11:9e:40:2a:5f:bc:57:06:ff:99:b9:f6: f3:6a:f8:95:c9:46:22:6f:60:55:c4:91:ee:27:f7:0d:19:07: 4f:3d:f7:3b:ca:6e:80:55:da:45:e2:33:d5:f6:88:7f:f7:58: 82:b0:f8:46:bb:21:92:53:44:ef:8d:3f:81:7e:bf:61:45:f4: 7b:79:1c:fe:32:90:38:d6:10:b5:46:80:57:7e:6e:77:51:f5: 08:64:71:6b:8a:e1:54:bd:2c:a7:21:94:18:23:8e:7c:5c:1e: f5:d2:ea:c1:08:3e:4f:e6:4d:3f:64:67:e8:b8:48:4e:dc:2c: 0f:8e:db:1c:04:65:48:f3:b3:49:65:60:3c:0f:05:93:99:bf: 60:6e:3e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHPGP+n572z8WrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MDZlNDMwY2UtNGNlYy00YWE0LWI3ODktNzVlZmNkY2Y3ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRpT7+nPdi8y2KpJi4mcAfAOuPTqf6aX38qh GUd6kPb41GP5baHAqP1GCotAuVrG53sC28zYN03xBz+GkkB2Xzy+ovL+3DufFspW Yl0Qq8AVXm2/o8bZUjdOJ2qRU+Ko+ZabjBkB1RSaSTuGOLLrGVIlY3y11hXEpxBw oiXp7r7SRl8UTW4snPvin2Z5N90DcuZt7bXWRpdFWRSw09Wt9tqOcPCJvyVBinOg jGoRz3St4nUXEPQsT7wvyldRWP4Dnbfq3sBNnP0jwEL3nfa5n/hEgLdoaV5TRg0a cgFVWDm1cu6vh5CPbEkb6zvqcqJweIgqmdLwEMagE2YZei+k2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWaz0x61iCkc9sBk1mMENaBFXmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGFhY2NjZjktYzgwMi0z ZTk0LWI1NDUtM2UwYTk2YmJhNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiitqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVm26SG7MqpW66nsATKZM6rbQPvjqWI1EaTCENK+R19/bK36jqBQgRu hsDA8DSoSi8FTC4j+OVdxP0jgND40k0TYeTUtzs15JAXzTCX9ybRgeU4fELa94Sf kjOsYdkvlEqE6UqQDU61Kdlzj9+bf7YPXBGeQCpfvFcG/5m59vNq+JXJRiJvYFXE ke4n9w0ZB0899zvKboBV2kXiM9X2iH/3WIKw+Ea7IZJTRO+NP4F+v2FF9Ht5HP4y kDjWELVGgFd+bndR9QhkcWuK4VS9LKchlBgjjnxcHvXS6sEIPk/mTT9kZ+i4SE7c LA+O2xwEZUjzs0llYDwPBZOZv2BuPo4= -----END CERTIFICATE-----Generated at Sun Jun 14 05:22:55 2026 by rpki-client