$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa File: 0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa (raw, json) Hash identifier: LCdayw73RZsC/sooRtqdFTCHz++mFK8rran49Drfzzs= Subject key identifier: AC:71:C2:53:B6:68:D2:33:61:AD:74:2F:23:B1:C0:93:98:60:FB:57 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A778083CB16EE995EAA87B400 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 396253 IP address blocks: 138.43.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:83:cb:16:ee:99:5e:aa:87:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=4a5b4ce9-28aa-481d-86c0-7882e637a848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:ec:ee:2f:3a:b7:96:03:e2:e4:14:b8:61: 8f:fb:6f:31:cf:24:ae:23:7e:c8:7c:a0:f2:f1:a2: 30:56:1f:8d:e0:65:68:66:ef:cb:49:b7:cb:0a:7f: f8:ba:64:4e:c5:7e:49:be:1f:f1:45:1b:70:4b:1a: 44:ef:bf:37:62:b3:48:cf:73:66:f9:55:18:35:47: 81:f7:77:75:92:28:26:75:c0:49:e6:f9:c3:87:0f: 89:f1:f4:21:5c:65:cf:00:70:a7:8b:c8:0b:6d:d6: 69:dc:25:bf:1a:b0:07:44:f1:d9:10:55:a8:11:7a: 66:15:c4:9e:7a:9a:39:cf:b0:8b:e3:76:34:3d:92: 64:06:fc:9f:61:bc:59:c1:8c:52:64:6c:22:fd:78: b5:92:d9:7b:62:01:5f:18:85:d7:a9:d4:a3:eb:2f: 1e:1c:e8:b0:9b:c4:65:64:d7:63:f5:aa:02:d2:12: 70:a1:d3:50:a1:81:c0:be:59:56:d3:03:fb:f0:00: 48:01:f0:50:60:88:cc:57:b3:88:03:8c:e2:16:df: 63:22:a6:9c:02:3e:d4:b5:4b:a9:6e:5e:55:81:b0: 73:53:fe:35:c5:6e:4c:db:44:74:42:dd:4a:ca:47: 09:61:c5:67:c7:45:ba:51:8e:db:01:c6:e2:a0:f6: 1d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:71:C2:53:B6:68:D2:33:61:AD:74:2F:23:B1:C0:93:98:60:FB:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0aacccf9-c802-3e94-b545-3e0a96bba6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:54:6c:92:eb:fd:b7:94:b7:4f:ff:38:20:92:f6:ef:b1:cb: 93:34:77:79:ee:17:48:45:77:c0:4e:a7:5e:1d:96:90:f3:83: 1f:7e:b6:05:3f:ad:dc:d3:05:66:82:00:8d:2d:32:85:1f:1c: bf:4c:14:f8:7f:dc:da:b9:51:ca:c8:b4:d7:13:d5:33:b5:86: 1d:10:9b:22:fa:04:1d:c8:83:70:65:70:af:46:a0:59:2a:df: 13:1a:12:5d:e8:45:d9:28:5d:d2:3c:a9:c6:9a:10:f3:7e:ab: 52:a3:d5:bc:50:b1:fc:03:cf:8b:c1:de:d7:ef:2e:c8:9f:03: 62:22:b7:5c:fd:4e:75:00:c7:81:ad:e2:56:34:04:8a:d1:40: 80:e4:90:20:a7:89:42:a6:07:ba:32:10:cd:4b:cc:bc:9b:a7: d4:7c:87:ed:90:85:8e:5e:6b:fb:70:c8:f2:7f:84:92:7a:8c: 46:07:dd:a9:45:4c:fb:26:65:ef:0b:bd:6c:ec:3a:eb:df:2a: 75:1d:8c:de:ab:79:01:7d:21:48:ec:d6:e9:bb:7e:e6:cb:c0: 31:ad:61:cf:a6:aa:7b:d3:8f:c1:60:64:f8:95:04:56:b5:8e: 4f:7b:f9:c1:da:e8:a6:8d:69:29:ae:27:92:8f:19:b4:f4:17: c4:bd:40:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIPLFu6ZXqqHtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk NGE1YjRjZTktMjhhYS00ODFkLTg2YzAtNzg4MmU2MzdhODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSvs7i86t5YD4uQUuGGP+28xzySuI37IfKDy 8aIwVh+N4GVoZu/LSbfLCn/4umROxX5Jvh/xRRtwSxpE7783YrNIz3Nm+VUYNUeB 93d1kigmdcBJ5vnDhw+J8fQhXGXPAHCni8gLbdZp3CW/GrAHRPHZEFWoEXpmFcSe epo5z7CL43Y0PZJkBvyfYbxZwYxSZGwi/Xi1ktl7YgFfGIXXqdSj6y8eHOiwm8Rl ZNdj9aoC0hJwodNQoYHAvllW0wP78ABIAfBQYIjMV7OIA4ziFt9jIqacAj7UtUup bl5VgbBzU/41xW5M20R0Qt1KykcJYcVnx0W6UY7bAcbioPYdNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxxwlO2aNIzYa10LyOxwJOYYPtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGFhY2NjZjktYzgwMi0z ZTk0LWI1NDUtM2UwYTk2YmJhNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiitqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhUbJLr/beUt0//OCCS9u+xy5M0d3nuF0hFd8BOp14dlpDzgx9+tgU/ rdzTBWaCAI0tMoUfHL9MFPh/3Nq5UcrItNcT1TO1hh0QmyL6BB3Ig3BlcK9GoFkq 3xMaEl3oRdkoXdI8qcaaEPN+q1Kj1bxQsfwDz4vB3tfvLsifA2Iit1z9TnUAx4Gt 4lY0BIrRQIDkkCCniUKmB7oyEM1LzLybp9R8h+2QhY5ea/twyPJ/hJJ6jEYH3alF TPsmZe8LvWzsOuvfKnUdjN6reQF9IUjs1um7fubLwDGtYc+mqnvTj8FgZPiVBFa1 jk97+cHa6KaNaSmuJ5KPGbT0F8S9QG4= -----END CERTIFICATE-----Generated at Thu Jul 10 04:17:57 2025 by rpki-client