$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa File: 14e815f8-9bf5-3679-b99c-adfb53e03dab.roa (raw, json) Hash identifier: L0iFoDppR93ayrmW4IR4+bOJ+vJGpKfwryfgemn2CJg= Subject key identifier: 83:5B:C5:7C:4C:BE:42:4A:67:66:13:5B:14:38:CB:CC:B9:3A:68:4D Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584F4973B8D9BB34EB07F029F480 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396253 IP address blocks: 138.43.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:b8:d9:bb:34:eb:07:f0:29:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cf303e18-c6fe-44ef-a6cd-8ad903217fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:88:57:6a:26:df:bc:de:7e:42:23:15:5d:8a: ff:38:52:5e:db:30:62:58:af:da:71:2f:05:42:d8: 61:0a:32:ed:c5:bd:ee:d1:e7:fe:b0:a9:14:12:3e: 36:96:f9:d0:2e:42:a1:0e:5c:aa:04:f4:c8:46:46: 42:e7:d8:69:2c:67:48:2f:ba:f8:4a:19:4a:22:da: 11:99:ed:d8:b0:0d:e8:e8:70:52:07:0e:8f:3f:a7: 37:4a:00:0d:19:11:76:c4:f5:90:54:c9:0d:9f:b6: 3a:07:01:10:f6:e2:db:5f:6c:27:f5:63:e1:77:3d: ca:72:2e:11:ac:14:98:44:bc:ab:25:c7:14:49:96: 65:94:28:4f:6c:02:9c:6e:be:3c:e2:07:71:0d:21: 73:57:f9:27:02:ef:4f:96:bd:94:c7:90:47:2a:a4: 7f:31:6c:33:aa:2d:e8:43:d3:f6:e6:e4:61:22:26: f5:7a:f3:18:a9:89:89:1b:bc:48:5b:7f:ca:39:9a: a9:38:d0:0e:d0:98:ee:ac:f2:7f:83:22:81:3c:ae: 16:ca:bb:b8:53:d0:d7:50:19:7c:6a:5a:93:b5:b5: c6:26:75:66:f4:5c:2e:8b:05:12:6c:93:c8:f3:26: 3a:4e:83:6f:f8:6d:ee:91:34:d9:ff:b3:b8:88:ab: 56:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5B:C5:7C:4C:BE:42:4A:67:66:13:5B:14:38:CB:CC:B9:3A:68:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1d:06:c5:fe:f2:d3:25:47:57:54:05:cc:a1:f9:4e:55:2c: a2:fb:17:1d:51:fa:53:25:8d:1d:7f:ea:78:3c:14:ee:ca:30: 84:35:38:57:54:e2:25:ff:c5:cc:97:ba:88:4f:17:83:04:b9: 61:fd:5b:b6:b4:4d:c6:0a:22:5a:5c:39:44:82:b7:f7:1b:80: 7e:6a:5d:0b:b7:fd:41:ea:36:00:13:a3:e0:e6:f1:eb:cb:7f: fa:01:d7:56:51:ba:4b:67:e8:97:b9:ea:cf:7d:39:2c:4c:21: ac:d1:d4:d3:5a:ef:5a:f2:50:b2:a9:ba:2b:b4:b7:55:f7:37: 84:d0:5c:25:48:45:d2:ad:61:49:a6:16:6c:d4:08:4f:40:a7: 89:04:33:96:4d:5a:04:bd:47:66:f0:8b:30:ce:cd:d6:2e:c1: f9:94:99:73:52:1f:52:fd:47:77:41:c0:c9:52:2c:7e:05:55: 79:30:0e:92:6f:80:91:21:67:23:37:76:1d:9e:45:ff:1d:ba: f8:5a:af:dc:5a:8d:4c:9b:be:16:b6:02:18:80:01:9b:a2:93: 7f:9a:ab:6e:ce:a1:96:df:b6:f0:56:0b:88:1e:a9:c7:a2:ba: d6:c8:6b:29:12:f8:7e:3c:33:4a:10:cc:d5:bd:be:d1:99:bf: 1a:4c:f9:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7jZuzTrB/Ap9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2YzMDNlMTgtYzZmZS00NGVmLWE2Y2QtOGFkOTAzMjE3ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIhXaibfvN5+QiMVXYr/OFJe2zBiWK/acS8F QthhCjLtxb3u0ef+sKkUEj42lvnQLkKhDlyqBPTIRkZC59hpLGdIL7r4ShlKItoR me3YsA3o6HBSBw6PP6c3SgANGRF2xPWQVMkNn7Y6BwEQ9uLbX2wn9WPhdz3Kci4R rBSYRLyrJccUSZZllChPbAKcbr484gdxDSFzV/knAu9Plr2Ux5BHKqR/MWwzqi3o Q9P25uRhIib1evMYqYmJG7xIW3/KOZqpONAO0JjurPJ/gyKBPK4Wyru4U9DXUBl8 alqTtbXGJnVm9FwuiwUSbJPI8yY6ToNv+G3ukTTZ/7O4iKtWOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINbxXxMvkJKZ2YTWxQ4y8y5OmhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMTRlODE1ZjgtOWJmNS0z Njc5LWI5OWMtYWRmYjUzZTAzZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiitiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsdBsX+8tMlR1dUBcyh+U5VLKL7Fx1R+lMljR1/6ng8FO7KMIQ1OFdU 4iX/xcyXuohPF4MEuWH9W7a0TcYKIlpcOUSCt/cbgH5qXQu3/UHqNgATo+Dm8evL f/oB11ZRuktn6Je56s99OSxMIazR1NNa71ryULKpuiu0t1X3N4TQXCVIRdKtYUmm FmzUCE9Ap4kEM5ZNWgS9R2bwizDOzdYuwfmUmXNSH1L9R3dBwMlSLH4FVXkwDpJv gJEhZyM3dh2eRf8duvhar9xajUybvha2AhiAAZuik3+aq27OoZbftvBWC4geqcei utbIaykS+H48M0oQzNW9vtGZvxpM+Qw= -----END CERTIFICATE-----Generated at Sun Oct 4 22:51:32 2026 by rpki-client