$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa File: fb972b12-802e-3973-880e-d35ad80cf075.roa (raw, json) Hash identifier: dySJ/y83PDvQncmAwZb1ek+861vqMgIkPvdt8PvMt6Q= Subject key identifier: 47:2C:C2:BE:88:C5:AF:A7:CB:CE:BB:5B:63:89:4C:87:DC:AC:FD:2D Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D07ACF0067285508C58F65AC0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 137922 IP address blocks: 138.43.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f0:06:72:85:50:8c:58:f6:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=a9e9a417-5c21-43f2-aa57-f1c7b2712601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:1c:c9:1e:bb:d5:45:e9:82:f7:91:61:f7: de:d2:26:29:e1:57:5b:85:c3:c0:3c:d5:c6:1c:3e: e5:0a:cb:b1:bf:af:e5:4b:b6:00:d7:4b:fb:bf:a6: 28:1e:38:c0:53:31:60:7a:5e:1b:29:5a:74:21:6f: 72:0e:cf:82:c7:0d:6b:39:c5:96:be:3a:45:60:6f: 6b:dc:15:3c:a7:84:99:f4:f9:92:a3:8d:d8:c0:f6: 93:bf:45:92:6f:76:3b:fe:1d:3c:c2:aa:f1:db:66: 9e:dd:fa:8e:96:19:5d:e2:d9:27:29:b3:69:28:dc: 03:be:ae:e2:5d:87:aa:58:82:60:fd:c8:6a:c3:6a: c3:8e:22:07:33:50:ac:ab:b7:3e:8f:e2:68:0c:32: eb:af:29:c9:95:68:b5:03:19:47:f7:ba:33:03:6a: 3d:2c:37:3c:65:3a:2a:61:e4:b5:74:f3:83:ad:9c: 74:41:23:27:2d:0f:e3:3e:f2:e0:98:da:51:aa:4c: 95:9a:41:46:50:2c:b5:80:4c:2a:4a:26:38:d6:f5: 1f:98:00:ae:31:24:f2:f6:6f:d6:8b:1f:ab:51:fc: b3:49:62:c1:93:80:4a:43:42:51:1e:5e:b7:bb:32: d1:35:52:e1:e2:04:30:cb:a6:fd:ad:47:14:4e:b1: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2C:C2:BE:88:C5:AF:A7:CB:CE:BB:5B:63:89:4C:87:DC:AC:FD:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:6e:62:5f:9a:79:6d:50:25:fc:66:75:71:b1:76:36:02:52: 4d:b8:a3:88:7e:ff:e6:3f:fd:7b:b2:e4:86:0f:bf:4d:16:67: bf:63:18:c5:e1:b5:9e:e5:4b:79:a6:5d:e2:c3:cd:11:33:95: 6a:f7:01:5f:34:05:5b:16:f6:f8:0f:b3:3e:ae:ef:93:21:f9: 6e:c2:ad:07:67:f1:88:f6:60:da:f4:fa:bc:cf:44:5c:97:9a: a1:db:ed:e1:25:e4:d3:da:40:b4:e5:91:89:de:48:51:96:d0: 3a:e4:39:a7:63:1d:75:99:05:42:79:d1:00:9a:7b:cc:c8:e4: e2:e5:b9:44:8b:8b:06:c6:bb:91:d1:44:6e:96:98:7d:c9:0c: dc:1c:48:7e:8c:38:ce:83:b1:c6:d9:3b:78:ae:bb:a2:c2:16: ef:ba:99:73:ab:6d:7f:35:04:56:65:df:19:a1:7b:4a:5e:9b: 77:bb:ac:95:65:8a:74:5d:6f:03:e8:3f:dd:26:f9:4d:12:c2: d5:fd:95:e9:26:f8:5b:d0:a8:cf:96:ff:24:13:e1:a1:f6:4c: 5e:79:b7:5e:cf:d1:73:2d:a3:10:fc:d0:4c:ce:43:c1:83:98: a4:e3:da:2c:c6:de:f3:b3:63:99:a9:7c:ac:ea:fb:a9:87:92: 82:d8:7c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPAGcoVQjFj2WsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YTllOWE0MTctNWMyMS00M2YyLWFhNTctZjFjN2IyNzEyNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SAcyR671UXpgveRYffe0iYp4VdbhcPAPNXG HD7lCsuxv6/lS7YA10v7v6YoHjjAUzFgel4bKVp0IW9yDs+Cxw1rOcWWvjpFYG9r 3BU8p4SZ9PmSo43YwPaTv0WSb3Y7/h08wqrx22ae3fqOlhld4tknKbNpKNwDvq7i XYeqWIJg/chqw2rDjiIHM1Csq7c+j+JoDDLrrynJlWi1AxlH97ozA2o9LDc8ZToq YeS1dPODrZx0QSMnLQ/jPvLgmNpRqkyVmkFGUCy1gEwqSiY41vUfmACuMSTy9m/W ix+rUfyzSWLBk4BKQ0JRHl63uzLRNVLh4gQwy6b9rUcUTrFKFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcswr6Ixa+ny867W2OJTIfcrP0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZmI5NzJiMTItODAyZS0z OTczLTg4MGUtZDM1YWQ4MGNmMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiitgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVuYl+aeW1QJfxmdXGxdjYCUk24o4h+/+Y//Xuy5IYPv00WZ79jGMXh tZ7lS3mmXeLDzREzlWr3AV80BVsW9vgPsz6u75Mh+W7CrQdn8Yj2YNr0+rzPRFyX mqHb7eEl5NPaQLTlkYneSFGW0DrkOadjHXWZBUJ50QCae8zI5OLluUSLiwbGu5HR RG6WmH3JDNwcSH6MOM6DscbZO3iuu6LCFu+6mXOrbX81BFZl3xmhe0pem3e7rJVl inRdbwPoP90m+U0SwtX9lekm+FvQqM+W/yQT4aH2TF55t17P0XMtoxD80EzOQ8GD mKTj2izG3vOzY5mpfKzq+6mHkoLYfAo= -----END CERTIFICATE-----Generated at Mon Mar 2 20:18:31 2026 by rpki-client