$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa File: 14e815f8-9bf5-3679-b99c-adfb53e03dab.roa (raw, json) Hash identifier: /J6hTOXruFVaFFPzwIqmOmKyWIBei8x8KmnFAxpfP9M= Subject key identifier: 42:FC:02:5A:10:C8:0A:77:AA:27:A6:09:11:F1:47:0C:72:06:63:9E Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D07ACF019720FC10E86131B00 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 396253 IP address blocks: 138.43.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f0:19:72:0f:c1:0e:86:13:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=a2a959a8-0886-41c8-b4f0-8f8b132dfa4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:54:7e:d3:f9:3d:a1:f0:70:16:29:48:9c:7d: 5f:d7:c6:ad:71:61:d9:2e:fb:fd:eb:9d:f0:b8:e0: 56:6d:41:d5:c0:c5:9f:1a:67:da:dd:ba:1d:1d:20: 61:cf:fd:56:25:a8:a2:b8:d5:ef:af:7c:11:5f:e3: 0a:15:0a:36:51:ef:6a:76:ae:ae:0c:79:68:cb:d6: c0:94:96:ea:e4:57:9b:84:89:de:15:6f:0b:87:65: 2a:4e:46:e4:c3:0d:23:62:e1:fc:46:24:a6:69:1d: 50:2e:79:ff:8a:30:3a:56:cf:dc:31:06:24:94:d3: 82:b4:45:17:d4:22:74:c9:f3:39:23:22:7e:87:92: 81:d2:f9:17:5b:fe:cc:c9:00:e2:61:d4:3c:eb:f7: fb:8a:f9:26:e1:99:3f:d3:c7:d1:50:fa:e5:42:ca: e6:70:47:57:89:b9:00:ce:c5:ee:71:04:d0:f2:f6: 8b:51:6c:5e:b4:e3:bb:71:17:78:83:66:7f:f5:77: 94:97:24:5a:73:40:95:44:09:de:fe:17:ee:09:ca: f3:1b:49:c5:21:be:94:07:1f:4d:11:79:d2:7f:3a: 01:dc:bc:00:87:2e:b3:81:a8:df:82:b7:49:d3:c8: 3c:70:a8:67:23:bb:08:fd:82:8c:71:d0:0e:88:38: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FC:02:5A:10:C8:0A:77:AA:27:A6:09:11:F1:47:0C:72:06:63:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b9:fd:cd:18:c5:e6:55:21:44:38:c4:4e:0f:f4:ff:c6:bb: 08:6d:2f:16:6e:d4:c5:58:ea:8a:85:b0:06:e9:84:66:54:9f: cc:53:22:d3:3d:c2:c7:24:f9:9a:86:ea:74:f0:a1:6f:10:7f: 20:4f:a7:51:e4:63:ba:87:7c:c8:f9:e1:ce:83:af:44:3f:12: d0:e8:e6:1a:3a:19:e2:22:64:da:1e:78:2c:2b:90:96:96:f3: 48:ce:2e:4a:79:af:c1:0f:83:41:0b:65:89:ec:d2:00:cb:ee: 88:1d:51:70:97:b7:5a:5a:6b:ba:36:a6:df:22:32:b1:4b:7d: 99:11:a4:70:96:c4:33:49:17:58:2d:8a:81:63:01:30:35:09: a4:1e:00:f4:39:db:35:fe:4f:ff:a4:be:11:44:c2:18:2e:c7: de:89:ec:74:26:63:93:fe:14:b8:0e:f5:f8:32:e7:11:b4:c9: 05:19:7d:a4:13:3e:2d:fc:25:83:2b:d5:9c:09:1c:bf:ab:4a: cc:32:af:04:74:bb:20:98:65:f2:52:df:dc:80:80:3c:39:df: 95:05:e5:ae:dd:fa:4f:b5:b0:e5:1e:d9:36:e8:6a:7b:f8:fb: b3:06:94:76:d8:ac:32:4e:98:ca:06:f3:9a:be:d8:90:57:26: 17:39:c0:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPAZcg/BDoYTGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YTJhOTU5YTgtMDg4Ni00MWM4LWI0ZjAtOGY4YjEzMmRmYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglR+0/k9ofBwFilInH1f18atcWHZLvv9653w uOBWbUHVwMWfGmfa3bodHSBhz/1WJaiiuNXvr3wRX+MKFQo2Ue9qdq6uDHloy9bA lJbq5FebhIneFW8Lh2UqTkbkww0jYuH8RiSmaR1QLnn/ijA6Vs/cMQYklNOCtEUX 1CJ0yfM5IyJ+h5KB0vkXW/7MyQDiYdQ86/f7ivkm4Zk/08fRUPrlQsrmcEdXibkA zsXucQTQ8vaLUWxetOO7cRd4g2Z/9XeUlyRac0CVRAne/hfuCcrzG0nFIb6UBx9N EXnSfzoB3LwAhy6zgajfgrdJ08g8cKhnI7sI/YKMcdAOiDhv/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEL8AloQyAp3qiemCRHxRwxyBmOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMTRlODE1ZjgtOWJmNS0z Njc5LWI5OWMtYWRmYjUzZTAzZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiitiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC5/c0YxeZVIUQ4xE4P9P/GuwhtLxZu1MVY6oqFsAbphGZUn8xTItM9 wsck+ZqG6nTwoW8QfyBPp1HkY7qHfMj54c6Dr0Q/EtDo5ho6GeIiZNoeeCwrkJaW 80jOLkp5r8EPg0ELZYns0gDL7ogdUXCXt1paa7o2pt8iMrFLfZkRpHCWxDNJF1gt ioFjATA1CaQeAPQ52zX+T/+kvhFEwhgux96J7HQmY5P+FLgO9fgy5xG0yQUZfaQT Pi38JYMr1ZwJHL+rSswyrwR0uyCYZfJS39yAgDw535UF5a7d+k+1sOUe2Tboanv4 +7MGlHbYrDJOmMoG85q+2JBXJhc5wEg= -----END CERTIFICATE-----Generated at Mon Mar 2 12:28:24 2026 by rpki-client