$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/872408eb-35fc-31a6-b8b6-b17659a01317.roa File: 872408eb-35fc-31a6-b8b6-b17659a01317.roa (raw, json) Hash identifier: w0HG8UOJTJ2332/7TCgoQIcw2IClbigWN9NvMJOAv8o= Subject key identifier: 14:12:1C:71:61:98:3C:4B:DE:F2:75:07:6D:E3:88:EB:8A:8D:42:A7 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A8B0B524396CADFCA4F916180 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/872408eb-35fc-31a6-b8b6-b17659a01317.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 396253 IP address blocks: 138.43.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:52:43:96:ca:df:ca:4f:91:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=5b223fd1-e8fe-4f5c-804c-a8facffa8a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8b:1f:1a:73:06:9b:1f:b1:af:5b:fe:4a:f8: 9f:8b:b2:35:0e:68:69:04:ed:20:93:6d:ae:e6:64: ad:82:a6:be:2a:af:c9:5f:81:f0:99:5d:4c:8d:17: 8b:ae:30:99:31:d7:d0:dc:82:4b:e5:8f:ca:23:50: cc:11:41:f9:5c:47:c4:50:e2:d2:c0:0b:c2:bc:07: 3c:12:6b:c8:91:d3:1d:6e:28:4a:82:58:bf:ba:84: 91:dc:f6:0f:25:2c:61:c2:6a:2c:c6:7f:c1:bc:6d: 4e:3b:27:6e:20:94:12:e1:e1:e5:6d:63:4d:96:9f: 09:6c:f0:e7:f1:26:37:7a:7c:56:09:eb:75:fb:ac: 07:7a:ca:2c:05:50:53:aa:6f:a1:94:25:ec:fc:5f: f4:0f:d4:cd:5e:b5:8a:1c:46:7d:f1:a4:df:3b:16: aa:68:6d:b3:1a:33:d0:ad:f9:e1:7e:4d:6f:74:c8: 70:28:d7:3e:cd:9d:7a:e2:5e:3e:91:76:aa:cc:69: 15:21:21:ae:e2:0c:89:ee:86:07:52:01:ab:26:5e: 59:9a:9d:7b:5d:39:5e:a2:0e:1c:17:0c:09:c3:05: f7:1e:53:01:ae:45:75:51:03:64:70:e0:db:78:ff: 12:d2:ae:19:b2:92:f5:5e:5f:af:01:ba:c5:c8:1c: 7f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:12:1C:71:61:98:3C:4B:DE:F2:75:07:6D:E3:88:EB:8A:8D:42:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/872408eb-35fc-31a6-b8b6-b17659a01317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:48:c2:aa:1c:60:71:de:81:16:98:79:e9:64:1c:02:d3:e2: 64:98:f4:5f:54:e1:df:2c:e4:3f:2d:c4:cc:d3:d5:2e:75:c7: 56:3a:80:88:0e:34:35:1d:84:7f:46:4e:6a:3f:ad:20:d4:e2: b8:6f:3d:ef:7b:c2:b8:98:e0:ea:2f:cb:8a:b4:43:9b:6e:91: 68:78:80:99:96:63:a4:fd:5b:ff:ac:d7:90:61:31:a5:c0:91: c3:06:f6:93:4e:0d:53:d9:aa:9a:a9:83:b3:33:17:08:57:dc: 77:bb:0c:92:e5:af:9a:1f:b2:3f:19:4b:45:48:60:18:84:a5: ef:7a:27:13:84:9f:58:0f:23:ca:c0:8a:8a:91:c8:07:04:85: ca:bc:de:c5:84:83:73:23:5b:49:32:ca:cc:b5:16:01:97:4e: f7:8a:a1:c9:95:c7:47:a2:4d:77:82:f1:43:a0:da:fd:a6:88: 7e:8b:13:fc:77:ea:e9:09:77:39:81:10:70:1c:94:11:c3:10: 31:c4:06:8b:38:99:7f:f9:e9:e1:b3:39:4f:e5:fe:a9:83:8c: f3:bb:72:f2:34:ea:6d:31:6b:04:f4:ee:a2:dd:05:9b:c3:0e: 95:6d:61:df:f6:5b:6e:f5:6d:14:9a:38:39:3c:24:f9:23:e7: 1d:34:96:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1JDlsrfyk+RYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk NWIyMjNmZDEtZThmZS00ZjVjLTgwNGMtYThmYWNmZmE4YTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYsfGnMGmx+xr1v+Svifi7I1DmhpBO0gk22u 5mStgqa+Kq/JX4HwmV1MjReLrjCZMdfQ3IJL5Y/KI1DMEUH5XEfEUOLSwAvCvAc8 EmvIkdMdbihKgli/uoSR3PYPJSxhwmosxn/BvG1OOyduIJQS4eHlbWNNlp8JbPDn 8SY3enxWCet1+6wHesosBVBTqm+hlCXs/F/0D9TNXrWKHEZ98aTfOxaqaG2zGjPQ rfnhfk1vdMhwKNc+zZ164l4+kXaqzGkVISGu4gyJ7oYHUgGrJl5Zmp17XTleog4c FwwJwwX3HlMBrkV1UQNkcODbeP8S0q4ZspL1Xl+vAbrFyBx/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQSHHFhmDxL3vJ1B23jiOuKjUKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODcyNDA4ZWItMzVmYy0z MWE2LWI4YjYtYjE3NjU5YTAxMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiitvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANIwqocYHHegRaYeelkHALT4mSY9F9U4d8s5D8txMzT1S51x1Y6gIgO NDUdhH9GTmo/rSDU4rhvPe97wriY4Oovy4q0Q5tukWh4gJmWY6T9W/+s15BhMaXA kcMG9pNODVPZqpqpg7MzFwhX3He7DJLlr5ofsj8ZS0VIYBiEpe96JxOEn1gPI8rA ioqRyAcEhcq83sWEg3MjW0kyysy1FgGXTveKocmVx0eiTXeC8UOg2v2miH6LE/x3 6ukJdzmBEHAclBHDEDHEBos4mX/56eGzOU/l/qmDjPO7cvI06m0xawT07qLdBZvD DpVtYd/2W271bRSaODk8JPkj5x00lpo= -----END CERTIFICATE-----Generated at Wed Aug 6 11:12:29 2025 by rpki-client