$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa File: d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa (raw, json) Hash identifier: P11vo9ILsyD5FNEX7ETYkWkp0OM4oPPyFRNGlQpR2hM= Subject key identifier: DF:54:D6:E4:9C:A4:D8:9E:93:40:E8:0F:54:26:66:BA:58:19:17:F0 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584F1897A265E9D45C8571BAE030 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 396905 IP address blocks: 138.43.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a2:65:e9:d4:5c:85:71:ba:e0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=478fcc82-b233-4de0-9882-2de58d81bf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:81:00:32:76:62:a1:91:74:a7:a2:41:93:2a: b7:81:d3:4a:67:45:3b:e3:12:a7:a0:ff:c7:34:4b: 91:2d:2a:4e:6f:c0:3f:db:39:06:df:59:f3:79:5a: c6:ef:83:19:3e:00:f7:08:a6:31:4d:2c:5d:25:da: 51:9a:18:d2:09:74:99:47:5c:ff:22:cd:bb:06:7a: fe:fb:1b:99:e7:02:83:f8:a0:4e:c9:9f:13:d8:f5: 31:34:72:89:c9:47:79:72:38:53:3d:07:37:65:d5: 7e:9e:28:9f:69:9d:26:76:f7:8e:83:8d:e1:fd:6f: 5f:7a:54:29:fe:71:7d:c1:ba:3c:11:0d:bf:93:da: 7a:af:33:dd:3f:ad:97:c4:b8:f6:4d:15:e3:e9:88: 44:e1:a5:5f:9f:b5:f3:5b:b3:a6:87:af:10:05:6c: f8:0a:c7:08:9c:47:f8:e8:f5:d5:07:ec:44:3e:0c: 4e:bb:7d:ce:34:14:24:d5:84:28:ec:17:44:4b:3d: 49:32:35:46:cb:dc:78:93:7a:82:5b:cf:78:12:b2: e4:5c:43:7f:1c:55:e3:68:d4:3c:11:f4:14:69:8c: 18:56:72:29:97:43:69:a2:5b:52:9d:3b:91:a5:a5: 80:4d:27:0b:6f:46:22:24:4d:b8:97:c9:9c:76:7e: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:54:D6:E4:9C:A4:D8:9E:93:40:E8:0F:54:26:66:BA:58:19:17:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 138.43.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:08:d6:57:49:97:80:cd:20:7f:7b:52:32:5a:ee:23:c4:6f: ac:5f:a1:3b:c8:4e:76:b4:4f:e9:c6:de:f6:a5:fb:a8:2c:b5: e9:48:aa:18:2d:ea:f1:74:3d:7a:3e:3b:81:a7:f5:43:55:30: 42:ec:3f:6f:a8:16:b2:58:66:98:96:0c:2d:4c:99:28:29:bf: ed:27:ad:13:bf:96:97:00:95:26:d6:1b:4e:9a:fd:4f:a7:20: 0b:57:19:df:ec:e3:00:e8:7e:96:1f:3b:5a:89:1b:7f:5f:11: 92:91:37:3a:ff:31:14:a2:2f:cf:54:49:43:50:af:f3:59:5d: c4:f9:37:99:31:da:55:95:e5:b0:70:20:5e:42:8e:73:23:df: a4:07:7a:d0:2c:5a:0d:78:89:eb:8f:43:83:4e:98:52:7c:5d: f9:4b:a3:0d:15:a7:29:bc:b8:85:1a:cb:33:8b:5c:d0:30:f5: 20:a1:f0:70:dd:3d:ac:c8:0b:35:b1:9f:d7:48:90:e5:96:28: da:7d:96:39:cb:5d:36:c7:2c:60:87:85:24:10:cc:c4:5b:e2: 32:c3:6f:68:5b:b3:1a:ee:5e:7a:71:2a:d6:7f:c0:af:d5:d2: 18:35:1d:f3:1f:ef:cc:ad:1d:dd:33:77:fd:37:23:24:13:55: de:34:ad:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6Jl6dRchXG64DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDc4ZmNjODItYjIzMy00ZGUwLTk4ODItMmRlNThkODFiZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoEAMnZioZF0p6JBkyq3gdNKZ0U74xKnoP/H NEuRLSpOb8A/2zkG31nzeVrG74MZPgD3CKYxTSxdJdpRmhjSCXSZR1z/Is27Bnr+ +xuZ5wKD+KBOyZ8T2PUxNHKJyUd5cjhTPQc3ZdV+niifaZ0mdveOg43h/W9felQp /nF9wbo8EQ2/k9p6rzPdP62XxLj2TRXj6YhE4aVfn7XzW7Omh68QBWz4CscInEf4 6PXVB+xEPgxOu33ONBQk1YQo7BdESz1JMjVGy9x4k3qCW894ErLkXEN/HFXjaNQ8 EfQUaYwYVnIpl0NpoltSnTuRpaWATScLb0YiJE24l8mcdn6IUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9U1uScpNiek0DoD1QmZrpYGRfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvZDNlODVjMGUtZDQ2NS0z YmMxLTk1YzQtY2VmZTBhYjNlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiis8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8I1ldJl4DNIH97UjJa7iPEb6xfoTvITna0T+nG3val+6gstelIqhgt 6vF0PXo+O4Gn9UNVMELsP2+oFrJYZpiWDC1MmSgpv+0nrRO/lpcAlSbWG06a/U+n IAtXGd/s4wDofpYfO1qJG39fEZKRNzr/MRSiL89USUNQr/NZXcT5N5kx2lWV5bBw IF5CjnMj36QHetAsWg14ieuPQ4NOmFJ8XflLow0Vpym8uIUayzOLXNAw9SCh8HDd PazICzWxn9dIkOWWKNp9ljnLXTbHLGCHhSQQzMRb4jLDb2hbsxruXnpxKtZ/wK/V 0hg1HfMf78ytHd0zd/03IyQTVd40rbY= -----END CERTIFICATE-----Generated at Wed Sep 23 02:21:39 2026 by rpki-client