$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa File: 34356c57-8521-34f3-a43c-872918075c40.roa (raw, json) Hash identifier: JBa4wWbRdJsLDy2jXpWIQIIbaMs+innftbe5Q53hjfg= Subject key identifier: 4A:B8:DD:6F:38:3C:5A:CC:40:F5:3C:61:81:DE:2C:D1:FA:27:FB:F4 Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Certificate serial: 010D0C9F4328584F4973ABC273F8FE7202E15180 Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 138.128.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ab:c2:73:f8:fe:72:02:e1:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=55087c71-dcb6-4fbb-8c91-cca4bda6448c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c6:76:14:3f:ad:d0:c6:53:31:11:77:09:ba: fb:10:d2:61:66:2a:d2:37:6a:36:70:9c:59:e8:c9: 9f:a9:a6:5f:50:78:db:a1:dc:c1:17:32:9f:1f:ea: 52:a4:41:ea:d6:ea:66:a6:4a:74:16:76:be:7c:07: f0:f8:1e:71:5f:e7:0b:5d:be:55:48:4e:a1:a8:96: d8:be:61:63:e0:95:48:3b:80:2c:86:a2:02:2b:41: 4d:46:17:90:fe:de:2c:49:c4:d0:31:69:de:0b:14: 6b:92:04:f0:40:54:00:d2:ad:ea:78:de:c1:b6:16: d3:1d:15:dc:be:41:95:63:0d:07:0d:a2:3a:f3:b1: 0d:98:7d:dc:10:dd:75:2b:16:0f:a0:ca:ff:cd:9a: 07:5e:7c:76:ac:64:a5:01:fe:b7:f8:cc:5a:23:59: df:4f:3e:e6:a8:9e:e6:4b:95:2b:58:85:94:4e:69: 02:5c:4e:32:de:9f:88:40:cd:62:af:67:e1:23:5a: 92:a5:3c:67:d4:62:3e:db:da:62:cf:8a:6f:38:24: 14:34:94:62:eb:e7:8a:8d:3a:5d:88:82:8f:51:ac: ef:2d:bd:03:da:28:25:88:c9:82:07:bc:fa:c5:78: 00:e0:69:ce:a1:a8:46:ee:a9:37:85:b9:83:37:17: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B8:DD:6F:38:3C:5A:CC:40:F5:3C:61:81:DE:2C:D1:FA:27:FB:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl X509v3 Authority Key Identifier: keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer sbgp-ipAddrBlock: critical IPv4: 138.128.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:86:48:9e:d7:f8:84:7e:ed:39:42:88:76:51:ab:c9:1c:28: 4f:e0:1e:71:fa:81:e1:9a:98:f3:97:53:9e:1e:41:52:55:d9: 5d:4a:b5:64:5c:ad:eb:64:62:01:e0:ee:93:ef:5b:eb:ef:40: 23:cc:f4:44:ec:6f:78:75:6d:4e:76:5d:49:52:77:c9:7f:f1: 0f:cc:51:67:aa:25:b7:b2:37:4d:ea:67:5b:4d:39:4e:d6:a0: f6:3d:a5:7b:ce:e9:92:d0:b0:f9:82:b2:ab:85:53:b3:b0:00: 91:d7:96:f7:13:20:ef:84:dc:34:58:c6:45:04:07:94:b4:f0: 6d:d2:ef:a5:e3:33:4e:3c:87:20:ed:e2:0a:da:11:c9:cc:04: 3e:d8:11:b5:56:63:35:41:59:eb:37:d4:9d:7b:e0:73:54:78: 68:fa:a7:4e:4e:c4:cc:c1:a8:cf:99:88:ec:ba:b4:b1:f2:96: 3f:b1:08:1b:b9:44:46:95:c6:13:8d:1a:83:6b:0b:7f:85:dd: fe:b1:a5:4c:97:5d:c9:8f:fb:0c:b1:cb:37:95:9b:15:7a:3c: 2b:aa:96:6c:02:10:60:92:ed:0f:ea:78:5c:6b:d7:0c:ec:02: 55:b6:74:4d:d8:0c:cd:f8:47:61:2d:ae:4b:df:64:0e:18:f0: a3:cf:1e:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6vCc/j+cgLhUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjll OWRkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTUwODdjNzEtZGNiNi00ZmJiLThjOTEtY2NhNGJkYTY0NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48Z2FD+t0MZTMRF3Cbr7ENJhZirSN2o2cJxZ 6MmfqaZfUHjbodzBFzKfH+pSpEHq1upmpkp0Fna+fAfw+B5xX+cLXb5VSE6hqJbY vmFj4JVIO4AshqICK0FNRheQ/t4sScTQMWneCxRrkgTwQFQA0q3qeN7BthbTHRXc vkGVYw0HDaI687ENmH3cEN11KxYPoMr/zZoHXnx2rGSlAf63+MxaI1nfTz7mqJ7m S5UrWIWUTmkCXE4y3p+IQM1ir2fhI1qSpTxn1GI+29piz4pvOCQUNJRi6+eKjTpd iIKPUazvLb0D2igliMmCB7z6xXgA4GnOoahG7qk3hbmDNxcqxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq43W84PFrMQPU8YYHeLNH6J/v0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNi Y2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvMzQzNTZjNTctODUyMS0z NGYzLWE0M2MtODcyOTE4MDc1YzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmIzYmNiNDctNWYxOC00NmQzLTli NTAtNjNkNWNiYjllOWRkLzJiM2JjYjQ3LTVmMTgtNDZkMy05YjUwLTYzZDVjYmI5 ZTlkZC5jcmwwHwYDVR0jBBgwFoAUteboBGJM8WceBokEZtHmJS27gq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1 Y2JiOWU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioD6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKGSJ7X+IR+7TlCiHZRq8kcKE/gHnH6geGamPOXU54eQVJV2V1KtWRc retkYgHg7pPvW+vvQCPM9ETsb3h1bU52XUlSd8l/8Q/MUWeqJbeyN03qZ1tNOU7W oPY9pXvO6ZLQsPmCsquFU7OwAJHXlvcTIO+E3DRYxkUEB5S08G3S76XjM048hyDt 4graEcnMBD7YEbVWYzVBWes31J174HNUeGj6p05OxMzBqM+ZiOy6tLHylj+xCBu5 REaVxhONGoNrC3+F3f6xpUyXXcmP+wyxyzeVmxV6PCuqlmwCEGCS7Q/qeFxr1wzs AlW2dE3YDM34R2EtrkvfZA4Y8KPPHm4= -----END CERTIFICATE-----Generated at Mon Sep 28 10:19:21 2026 by rpki-client