$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa File: 517c1ed1-2fb3-3723-ad55-68791be7cf98.roa (raw, json) Hash identifier: 55iRUopBwHZMnsfQBcPs40lTQ5GP+Vzj0Rz73o7SZzU= Subject key identifier: 74:92:F1:7B:5B:86:85:06:D5:7D:72:1D:E8:29:75:76:47:35:5E:E4 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584F4973F21FF736D0D899FD3500 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 137922 IP address blocks: 138.43.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f2:1f:f7:36:d0:d8:99:fd:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=71395e63-e7bd-478e-af7a-47a714162436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e4:69:ec:c3:f7:0b:2f:37:81:63:ec:c4:f2: a9:10:d9:66:13:e8:ad:d6:ef:18:ed:08:de:81:55: f5:ab:81:b4:46:ad:24:52:5d:32:80:32:81:59:c6: 14:3f:93:21:16:2d:1e:e0:33:dd:a3:ac:08:47:33: ab:b5:a0:cc:96:a2:84:38:a3:0c:60:18:ff:7f:36: d3:08:10:bd:7b:d2:e8:72:77:2e:6d:cb:7c:ff:e3: 50:1e:de:90:a6:e1:ae:2d:cd:13:ef:61:22:ea:6b: 16:a4:8b:aa:9f:96:1a:83:9b:f3:d2:ae:21:06:b4: c4:fa:57:48:f2:e0:eb:e1:8b:37:a7:08:4f:d9:17: fe:26:bb:62:fb:a4:56:60:63:cf:5b:df:4e:53:3c: 53:03:14:87:21:6e:0c:a7:42:c4:24:47:af:99:84: 39:d3:ee:26:05:80:40:a3:b9:ab:22:fd:f6:41:07: 28:4d:ed:cd:d4:81:72:35:b9:f9:86:43:19:59:30: 99:95:24:eb:31:20:7d:67:18:fa:ff:3b:b0:0b:04: 5e:1d:3a:97:b4:db:8e:20:62:2d:3f:87:46:3e:08: bb:f7:2c:c1:2e:a7:a5:b2:85:43:ec:cc:6b:30:81: 9e:1b:c2:49:b0:27:e1:21:73:ca:67:fe:3f:5d:80: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:92:F1:7B:5B:86:85:06:D5:7D:72:1D:E8:29:75:76:47:35:5E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 138.43.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:92:69:03:23:cd:8b:55:7e:d0:1f:1d:75:b2:94:93:87:a9: 01:a1:12:a0:e7:d3:6b:a4:44:bc:64:30:cc:b6:25:59:b1:2c: db:65:9d:26:3b:7c:7b:29:86:70:b8:92:07:f3:99:f9:84:78: 33:dc:ba:0a:c9:ca:3e:76:0f:a7:32:92:a9:b8:3b:3b:c6:d0: 9e:e1:ac:e8:5f:cb:20:cd:1b:85:90:f9:59:26:30:6e:79:6f: 29:26:51:7b:4e:2e:31:1e:35:8c:10:71:9c:1d:92:ec:ce:80: 98:f5:53:e1:a0:61:a3:fc:98:8c:a5:fb:8c:be:9f:d3:99:d8: 1f:c7:88:b6:09:06:67:6d:fe:d8:fb:52:c9:80:ee:2b:00:f8: a4:98:90:4b:e2:bd:dd:69:1f:b5:53:87:95:5c:77:9d:95:af: 4f:7f:e1:c5:27:5f:b6:72:ba:8e:29:1d:14:be:4c:cd:7b:55: e7:d0:15:8d:4d:6b:0d:3c:55:98:21:9d:7e:98:5a:02:d4:05: 4a:27:05:b6:eb:06:2b:a8:a5:31:b5:71:d4:50:37:43:d6:61: 6d:18:5d:13:dc:14:91:01:f7:10:f7:f1:a8:22:76:dd:3a:80: 3a:0d:1a:59:fe:c1:08:fc:4a:23:72:8e:e1:3f:9e:6b:d3:97: a8:e9:92:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/If9zbQ2Jn9NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzEzOTVlNjMtZTdiZC00NzhlLWFmN2EtNDdhNzE0MTYyNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+Rp7MP3Cy83gWPsxPKpENlmE+it1u8Y7Qje gVX1q4G0Rq0kUl0ygDKBWcYUP5MhFi0e4DPdo6wIRzOrtaDMlqKEOKMMYBj/fzbT CBC9e9Locncubct8/+NQHt6QpuGuLc0T72Ei6msWpIuqn5Yag5vz0q4hBrTE+ldI 8uDr4Ys3pwhP2Rf+Jrti+6RWYGPPW99OUzxTAxSHIW4Mp0LEJEevmYQ50+4mBYBA o7mrIv32QQcoTe3N1IFyNbn5hkMZWTCZlSTrMSB9Zxj6/zuwCwReHTqXtNuOIGIt P4dGPgi79yzBLqelsoVD7MxrMIGeG8JJsCfhIXPKZ/4/XYAtzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSS8XtbhoUG1X1yHegpdXZHNV7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNTE3YzFlZDEtMmZiMy0z NzIzLWFkNTUtNjg3OTFiZTdjZjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiithMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqSaQMjzYtVftAfHXWylJOHqQGhEqDn02ukRLxkMMy2JVmxLNtlnSY7 fHsphnC4kgfzmfmEeDPcugrJyj52D6cykqm4OzvG0J7hrOhfyyDNG4WQ+VkmMG55 bykmUXtOLjEeNYwQcZwdkuzOgJj1U+GgYaP8mIyl+4y+n9OZ2B/HiLYJBmdt/tj7 UsmA7isA+KSYkEvivd1pH7VTh5Vcd52Vr09/4cUnX7Zyuo4pHRS+TM17VefQFY1N aw08VZghnX6YWgLUBUonBbbrBiuopTG1cdRQN0PWYW0YXRPcFJEB9xD38agidt06 gDoNGln+wQj8SiNyjuE/nmvTl6jpkh8= -----END CERTIFICATE-----Generated at Sun Oct 4 22:26:36 2026 by rpki-client