$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa File: 0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa (raw, json) Hash identifier: jtt/UoJubDMgJpnW78RMbDj4NPkk+GqXlSARQ2jDicU= Subject key identifier: B6:AD:CC:3C:DA:C9:12:20:2E:9B:A0:C8:59:DF:39:1D:83:C7:69:C2 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B583C84AE8A494FE3A200AC00 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396253 IP address blocks: 138.43.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:84:ae:8a:49:4f:e3:a2:00:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=87d9607c-4770-409b-aae2-486269f0962f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:43:52:47:52:a4:b9:92:b8:94:1a:ee:c8: 05:bf:c8:01:d5:c0:78:f8:ad:a3:b7:f0:a8:b8:e3: 3a:37:4f:53:82:07:6e:ab:00:6b:85:0c:e6:02:63: 16:e9:a8:b2:64:80:64:df:63:52:c0:31:43:a2:da: 11:88:ba:11:98:56:08:b8:c4:4f:7d:c2:05:87:4d: 4e:13:af:1e:1f:d2:dd:5b:7a:48:28:3d:ff:6b:7e: a6:c2:b1:96:75:20:14:f7:f4:db:bf:f6:cd:1d:db: 0a:79:46:24:5b:36:45:fb:80:c7:19:89:5d:84:27: 37:92:45:98:2d:a7:ea:d7:73:47:1a:04:ff:ca:b3: 40:6e:7a:21:0f:9d:5a:10:8f:bb:be:14:d9:f9:c6: d1:ad:c4:c1:23:34:aa:5b:34:98:d9:95:0e:99:ba: cd:16:86:9f:ff:24:2a:0a:93:4c:10:0f:a9:d3:84: c1:af:0a:d8:da:ad:f3:2d:13:73:96:60:b7:8b:81: d2:36:1a:5f:b1:c3:ad:65:d1:40:4e:41:35:4d:f0: a3:63:6a:e0:c8:94:c7:cc:e4:26:aa:e1:67:43:72: 64:95:7f:48:ea:e5:32:d3:31:43:c4:2f:33:0f:4e: 6f:d2:19:10:02:95:74:c1:0f:b4:01:33:4c:7b:65: 1a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AD:CC:3C:DA:C9:12:20:2E:9B:A0:C8:59:DF:39:1D:83:C7:69:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0c1be94c-dc49-3c91-bf5c-ddc3f90c205c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b5:33:82:19:bd:91:0c:45:ac:24:d6:9e:ab:ba:45:f8:c4: 69:1e:ef:f8:6c:8d:53:6a:0a:91:e7:54:18:11:37:b4:05:aa: 02:13:a5:17:12:bb:3a:5d:b4:55:9e:e3:0c:d9:93:1e:3b:fe: 3f:25:66:0e:3a:10:d8:54:45:67:86:14:15:38:92:6a:6a:54: cd:d6:aa:75:d7:1d:de:72:4e:49:1b:5d:10:66:8f:42:df:cb: 91:11:84:88:d6:37:00:28:3f:e6:61:75:9a:31:36:15:e1:26: f7:ec:53:56:56:1a:88:0a:af:9a:0e:85:d2:f3:d7:80:64:15: d5:68:1c:49:77:08:da:0b:5e:a0:03:a4:b1:c4:63:0c:31:be: 08:b9:fd:b9:bd:a2:84:9f:fe:a4:38:d9:66:9c:2e:0f:54:1a: d4:b8:8b:4c:d8:4d:ea:d9:b0:14:c8:4b:bd:0e:f3:b7:17:00: 06:66:48:10:f5:ef:5f:44:f3:da:03:fe:72:13:f3:27:e7:23: da:dd:2d:41:57:37:d3:3f:b5:35:0a:2a:d5:a7:a2:97:65:b9: 60:08:ba:20:cb:18:e7:3d:60:d8:6c:a9:55:91:2f:29:f0:0f: cd:1b:7e:d7:85:62:2f:5f:89:f3:a3:b0:fa:78:6d:9b:51:b4: fc:d8:a2:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPISuiklP46IArAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ODdkOTYwN2MtNDc3MC00MDliLWFhZTItNDg2MjY5ZjA5NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3BDUkdSpLmSuJQa7sgFv8gB1cB4+K2jt/Co uOM6N09TggduqwBrhQzmAmMW6aiyZIBk32NSwDFDotoRiLoRmFYIuMRPfcIFh01O E68eH9LdW3pIKD3/a36mwrGWdSAU9/Tbv/bNHdsKeUYkWzZF+4DHGYldhCc3kkWY Lafq13NHGgT/yrNAbnohD51aEI+7vhTZ+cbRrcTBIzSqWzSY2ZUOmbrNFoaf/yQq CpNMEA+p04TBrwrY2q3zLRNzlmC3i4HSNhpfscOtZdFATkE1TfCjY2rgyJTHzOQm quFnQ3JklX9I6uUy0zFDxC8zD05v0hkQApV0wQ+0ATNMe2UadwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLatzDzayRIgLpugyFnfOR2Dx2nCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGMxYmU5NGMtZGM0OS0z YzkxLWJmNWMtZGRjM2Y5MGMyMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiitsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG1M4IZvZEMRawk1p6rukX4xGke7/hsjVNqCpHnVBgRN7QFqgITpRcS uzpdtFWe4wzZkx47/j8lZg46ENhURWeGFBU4kmpqVM3WqnXXHd5yTkkbXRBmj0Lf y5ERhIjWNwAoP+ZhdZoxNhXhJvfsU1ZWGogKr5oOhdLz14BkFdVoHEl3CNoLXqAD pLHEYwwxvgi5/bm9ooSf/qQ42WacLg9UGtS4i0zYTerZsBTIS70O87cXAAZmSBD1 719E89oD/nIT8yfnI9rdLUFXN9M/tTUKKtWnopdluWAIuiDLGOc9YNhsqVWRLynw D80bfteFYi9fifOjsPp4bZtRtPzYooM= -----END CERTIFICATE-----Generated at Fri Oct 24 09:46:24 2025 by rpki-client