$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa File: 517c1ed1-2fb3-3723-ad55-68791be7cf98.roa (raw, json) Hash identifier: SEohzY1or4TB60IeLwXX8w5NrTuFeOIh9yBwW1mXwjE= Subject key identifier: B6:49:27:04:B0:4A:9C:1C:36:D6:E4:63:82:EC:AF:9B:46:D7:96:3F Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D07ACF5F458D03E06E3273400 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 137922 IP address blocks: 138.43.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f5:f4:58:d0:3e:06:e3:27:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=8e8c4b05-2517-4ebe-9880-6e2587fff004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:82:2d:d5:da:03:13:5b:65:6b:27:32:31:71: e9:27:78:fc:af:0c:2d:2e:5f:07:5d:23:0f:13:da: 7f:1f:15:78:f0:6b:c4:52:99:40:ce:38:2a:b9:8f: 6b:07:94:62:d6:f5:0b:f2:87:8e:e6:44:72:cb:2a: 0f:63:20:e0:30:35:f1:3c:8f:ec:e7:81:66:d7:49: cf:f2:ae:85:27:85:c7:8d:05:f3:a5:8e:f7:88:9d: 38:c0:76:36:a2:c7:02:d9:29:57:1f:aa:c7:36:70: cd:66:9e:0a:b6:9c:52:d4:36:40:73:79:77:d1:1e: b5:d0:3c:42:78:5e:8b:29:aa:c1:8d:b6:dd:60:29: 7f:17:35:57:36:72:f3:04:cd:e5:7c:ba:b6:03:14: 76:e1:06:42:d5:f3:b2:2d:cf:ef:a2:6c:9a:15:bb: 06:1c:58:cf:ee:a4:87:ea:aa:2b:3c:9f:3b:d5:cb: 88:68:89:4e:5b:c4:e4:32:88:ae:50:92:1e:a8:d7: ac:6d:69:89:44:74:79:28:7f:d0:47:21:c4:e2:69: f8:49:46:8a:d0:5c:e9:b7:93:83:5d:37:b5:c7:46: 1e:cf:4e:6e:b3:2e:ac:d3:da:2b:6c:0f:2f:1f:01: 9a:16:0c:08:a5:bb:a1:6a:5a:0a:61:87:2e:0f:73: 7d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:49:27:04:B0:4A:9C:1C:36:D6:E4:63:82:EC:AF:9B:46:D7:96:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:89:29:1f:a8:95:7c:a9:ff:81:01:a5:50:d8:07:ac:45:de: 56:12:9e:38:74:2f:42:58:47:c1:94:8d:c8:ee:dc:0a:5b:24: c3:93:52:17:ae:0b:bc:8a:34:a8:bd:df:28:1c:2c:5f:e4:5b: e6:52:03:d9:fb:d6:45:57:48:61:ce:f7:b0:0d:bc:7f:17:57: 15:42:27:58:f8:3e:24:dd:a3:23:72:9a:aa:13:d3:a7:aa:d9: ad:78:2e:d7:d3:49:94:0e:bb:7e:12:33:2e:62:22:19:ab:26: c7:db:4b:48:68:30:21:b4:e5:25:54:2c:b0:b3:2f:27:cf:26: 5e:20:fd:96:8f:a1:28:d7:c6:cc:6a:b6:6a:4b:6e:1b:71:92: d6:f9:fd:2a:ac:07:52:c8:8d:d9:10:44:3f:30:6a:08:3e:12: 56:75:e4:35:81:d0:f2:e7:f3:29:96:0d:3a:cf:b6:c3:e2:cd: cf:e2:7f:fa:b4:73:51:d8:ff:9f:fa:b0:60:be:3c:c8:e7:ea: ec:11:9a:21:75:01:d3:37:0f:3e:e7:24:f1:39:a8:fe:77:a8: b6:08:47:6f:9a:5d:49:e9:67:e2:e2:e7:94:76:9d:57:83:4a: b6:a1:f5:f3:81:43:ea:8a:d6:30:4f:76:db:d5:88:2e:68:c9: 1d:e0:e0:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPX0WNA+BuMnNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk OGU4YzRiMDUtMjUxNy00ZWJlLTk4ODAtNmUyNTg3ZmZmMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIIt1doDE1tlaycyMXHpJ3j8rwwtLl8HXSMP E9p/HxV48GvEUplAzjgquY9rB5Ri1vUL8oeO5kRyyyoPYyDgMDXxPI/s54Fm10nP 8q6FJ4XHjQXzpY73iJ04wHY2oscC2SlXH6rHNnDNZp4KtpxS1DZAc3l30R610DxC eF6LKarBjbbdYCl/FzVXNnLzBM3lfLq2AxR24QZC1fOyLc/vomyaFbsGHFjP7qSH 6qorPJ871cuIaIlOW8TkMoiuUJIeqNesbWmJRHR5KH/QRyHE4mn4SUaK0Fzpt5OD XTe1x0Yez05usy6s09orbA8vHwGaFgwIpbuhaloKYYcuD3N9MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZJJwSwSpwcNtbkY4Lsr5tG15Y/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNTE3YzFlZDEtMmZiMy0z NzIzLWFkNTUtNjg3OTFiZTdjZjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiithMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqJKR+olXyp/4EBpVDYB6xF3lYSnjh0L0JYR8GUjcju3ApbJMOTUheu C7yKNKi93ygcLF/kW+ZSA9n71kVXSGHO97ANvH8XVxVCJ1j4PiTdoyNymqoT06eq 2a14LtfTSZQOu34SMy5iIhmrJsfbS0hoMCG05SVULLCzLyfPJl4g/ZaPoSjXxsxq tmpLbhtxktb5/SqsB1LIjdkQRD8wagg+ElZ15DWB0PLn8ymWDTrPtsPizc/if/q0 c1HY/5/6sGC+PMjn6uwRmiF1AdM3Dz7nJPE5qP53qLYIR2+aXUnpZ+Li55R2nVeD Srah9fOBQ+qK1jBPdtvViC5oyR3g4JE= -----END CERTIFICATE-----Generated at Mon Mar 2 14:48:27 2026 by rpki-client