$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa File: 82a59d09-a68a-3b74-821f-acd3c06dab3a.roa (raw, json) Hash identifier: seUwqTJtz4dYot2KnHc5FCMH9xobz0zHB9tmG84fPPk= Subject key identifier: 11:AD:BB:A1:06:43:FE:DD:61:23:47:76:0E:54:B1:53:0F:AB:D0:B8 Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Certificate serial: 010D0C9F4328584F4973E31F273F87BAA156C840 Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 138.128.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e3:1f:27:3f:87:ba:a1:56:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=99a78e1b-9adf-45ee-8e46-c90634a6a064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:bf:2b:e0:20:11:b7:41:6e:da:f4:36:c5: 6f:c2:f6:f7:33:6b:ed:a0:82:95:7d:3a:e5:9b:e3: 91:de:38:39:ac:3f:7d:9b:9f:10:d1:00:a3:63:ce: 57:0e:16:86:c1:60:55:bd:d8:83:d1:de:fc:aa:bd: 5f:a0:99:75:ec:10:6b:6d:0d:f2:35:64:74:7b:4e: 6e:d7:ac:3b:12:b6:e2:db:87:f2:1d:ec:73:b4:b1: f5:2a:6d:bc:56:8e:68:d9:30:95:78:59:eb:86:d5: 3b:1c:43:b8:2f:c2:b4:76:68:09:7c:0a:b1:25:6f: 0f:c5:57:08:6d:8a:4e:42:90:f9:1b:52:54:d1:cb: d4:6d:a1:a1:e2:1c:60:77:9d:35:d9:9c:80:cb:4b: 1c:7a:37:9c:c6:7d:3b:e8:e7:34:e3:22:ad:38:f0: f8:90:b3:e8:b9:0d:19:5d:21:a3:7c:56:c4:51:b8: 5f:36:a3:1b:ab:21:c8:18:2d:a8:25:95:c9:32:7f: 6b:d0:48:da:97:cb:dd:ba:69:09:ea:96:26:1e:09: 80:43:78:d6:bf:b7:07:61:7d:a6:53:95:b8:0b:49: d0:bd:61:1f:ac:3a:0c:29:fc:43:46:e1:b0:91:b9: a4:4c:2c:4a:1c:0f:23:39:4a:ee:7d:f8:e7:c0:18: 41:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AD:BB:A1:06:43:FE:DD:61:23:47:76:0E:54:B1:53:0F:AB:D0:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl X509v3 Authority Key Identifier: keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer sbgp-ipAddrBlock: critical IPv4: 138.128.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:8c:0c:19:85:de:81:8a:7b:fc:8e:f4:6d:68:1f:01:0d:9a: 96:9b:a5:61:61:91:d3:3d:6b:ee:08:bf:5f:e9:34:07:c8:75: 4a:82:c0:d9:b8:34:d6:6b:43:0f:31:a2:e3:f5:38:f7:3e:ba: f8:7a:1c:75:f6:26:49:a3:64:e5:61:bd:8c:86:74:f1:09:4f: 15:ce:44:d7:9c:be:c1:0b:2e:b8:88:05:b0:de:af:8e:87:46: 63:2a:d7:0f:7e:80:9e:eb:77:ef:41:7d:6c:a9:ea:94:d9:6f: fa:8c:24:50:73:49:02:aa:c0:9a:4b:30:b9:a8:7a:3e:81:a0: 51:f5:6d:ce:64:d4:7e:41:eb:c1:57:79:49:10:c9:6d:f6:ab: 15:db:c1:b2:49:50:9e:0e:6b:69:dc:d7:24:cd:5c:83:f6:bb: ec:00:7c:ee:9a:eb:7f:9c:f3:cd:d9:00:98:75:8e:1c:ba:60: c0:b6:ce:60:8e:97:71:82:9a:f8:b4:8f:02:29:7d:9f:34:62: 13:59:ac:e7:a2:ce:7b:00:87:d1:22:a2:2e:54:39:b5:6b:07: 51:85:86:78:d3:95:f6:03:35:3d:57:8d:0c:73:b5:5d:79:29: d3:67:5d:96:ae:8e:d5:e9:9d:22:66:dc:6a:e4:01:f6:4d:97: 8a:e5:3c:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+MfJz+HuqFWyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjll OWRkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTlhNzhlMWItOWFkZi00NWVlLThlNDYtYzkwNjM0YTZhMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3K/K+AgEbdBbtr0NsVvwvb3M2vtoIKVfTrl m+OR3jg5rD99m58Q0QCjY85XDhaGwWBVvdiD0d78qr1foJl17BBrbQ3yNWR0e05u 16w7Erbi24fyHexztLH1Km28Vo5o2TCVeFnrhtU7HEO4L8K0dmgJfAqxJW8PxVcI bYpOQpD5G1JU0cvUbaGh4hxgd5012ZyAy0scejecxn076Oc04yKtOPD4kLPouQ0Z XSGjfFbEUbhfNqMbqyHIGC2oJZXJMn9r0Ejal8vdumkJ6pYmHgmAQ3jWv7cHYX2m U5W4C0nQvWEfrDoMKfxDRuGwkbmkTCxKHA8jOUruffjnwBhBrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGtu6EGQ/7dYSNHdg5UsVMPq9C4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNi Y2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvODJhNTlkMDktYTY4YS0z Yjc0LTgyMWYtYWNkM2MwNmRhYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmIzYmNiNDctNWYxOC00NmQzLTli NTAtNjNkNWNiYjllOWRkLzJiM2JjYjQ3LTVmMTgtNDZkMy05YjUwLTYzZDVjYmI5 ZTlkZC5jcmwwHwYDVR0jBBgwFoAUteboBGJM8WceBokEZtHmJS27gq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1 Y2JiOWU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKMDBmF3oGKe/yO9G1oHwENmpabpWFhkdM9a+4Iv1/pNAfIdUqCwNm4 NNZrQw8xouP1OPc+uvh6HHX2JkmjZOVhvYyGdPEJTxXORNecvsELLriIBbDer46H RmMq1w9+gJ7rd+9BfWyp6pTZb/qMJFBzSQKqwJpLMLmoej6BoFH1bc5k1H5B68FX eUkQyW32qxXbwbJJUJ4Oa2nc1yTNXIP2u+wAfO6a63+c883ZAJh1jhy6YMC2zmCO l3GCmvi0jwIpfZ80YhNZrOeiznsAh9Eioi5UObVrB1GFhnjTlfYDNT1XjQxztV15 KdNnXZaujtXpnSJm3GrkAfZNl4rlPO0= -----END CERTIFICATE-----Generated at Tue Sep 29 08:27:35 2026 by rpki-client