$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d21e46d-8c75-36a5-b726-93319de0609e.roa File: 1d21e46d-8c75-36a5-b726-93319de0609e.roa (raw, json) Hash identifier: hb+SWbzoX0wdKgaN2aBcU9gD6QlyOtiaa6mcSnq8w5w= Subject key identifier: 16:FD:32:BA:2D:F4:10:E3:1C:00:22:11:02:DC:B4:78:62:3A:92:63 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B28C6F32EEBBA07BBC7ED7100 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d21e46d-8c75-36a5-b726-93319de0609e.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 20001 IP address blocks: 138.229.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:f3:2e:eb:ba:07:bb:c7:ed:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=13e1297b-4540-4e98-b42e-4b5afbf7d481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:70:30:06:1a:ef:b7:fc:21:89:57:2f:2c:52: be:95:89:d4:fc:0d:b8:b4:b6:d5:d7:43:5d:20:c5: e8:33:5c:5e:73:ea:b0:7d:d4:08:f7:7c:f0:be:6a: 9c:37:17:c7:d3:5b:16:a7:51:2c:54:b4:56:95:81: 8e:c3:e9:3a:a6:8e:fa:15:f4:09:f8:49:c2:f3:bf: 2a:e3:58:69:5a:51:09:28:3d:d7:e5:6f:ae:42:a6: b8:b7:bd:40:3d:18:a0:42:f0:4d:be:37:a7:8e:c7: ff:21:a0:ec:21:ce:47:7d:62:4b:58:e9:a4:7b:ab: b4:f7:64:1b:90:cc:3e:71:6b:0f:96:c1:13:05:e6: dd:d7:e3:95:b5:03:80:64:ac:de:a8:61:08:6c:50: cc:6e:6e:0a:6e:93:37:a1:d6:c3:f8:da:73:d4:f8: d5:cb:86:3c:f0:95:c6:6c:2d:3e:12:d0:e1:16:a6: 63:28:22:d3:2d:e5:69:0b:f4:82:6d:e8:37:73:c1: 68:30:60:68:ce:cd:81:89:1f:cb:5d:ee:c2:14:43: 30:f4:13:58:02:27:df:62:f0:25:ad:48:e6:79:00: ea:8a:e3:44:5f:da:70:da:f4:f1:f6:dc:79:95:d8: 9c:ea:22:a5:28:06:46:73:c6:38:ef:7f:ea:6e:83: 7a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FD:32:BA:2D:F4:10:E3:1C:00:22:11:02:DC:B4:78:62:3A:92:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d21e46d-8c75-36a5-b726-93319de0609e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7a:0f:dc:ff:58:e3:11:71:f1:3b:9d:16:c1:99:6b:c5:bd: 3a:a6:63:3c:ed:40:9b:2b:7d:02:4d:4b:4b:0d:3d:cb:32:64: 2b:e0:d3:26:7e:ee:8b:ce:26:b1:b0:77:f4:42:74:f3:1e:96: 37:31:0f:8d:f4:19:cb:1f:a9:4c:e7:a4:a3:6b:09:59:9b:cc: 2f:df:49:c0:94:b7:6a:86:97:66:e9:a5:b8:2a:05:e8:a1:c7: 83:33:c2:23:91:e0:00:19:2b:35:f3:da:35:78:ef:16:63:3b: 43:02:1f:af:8c:62:37:38:ad:7d:94:f5:67:7b:57:d5:f7:d0: ca:95:46:3e:7b:ad:aa:73:ac:a9:52:f5:34:08:31:06:96:dd: 61:a9:42:dd:fb:03:4b:55:44:3c:ff:be:87:34:e2:ed:ae:6f: 78:6f:48:63:22:f1:0a:f9:1b:c0:f0:5e:ee:44:f2:49:7f:75: 65:1f:2a:11:4a:71:60:45:cb:c4:7d:af:fa:93:c8:48:e4:8e: 86:cc:0c:1f:7c:a2:19:fd:83:30:fc:bf:ce:ff:35:58:b9:1c: 35:76:29:23:26:bb:ec:0a:10:bd:ba:a0:6c:87:b3:0e:3b:41: 88:97:d1:9c:4e:c2:4f:96:06:e1:de:10:61:4b:7f:9c:3d:03: 5f:8f:aa:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxvMu67oHu8ftcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk MTNlMTI5N2ItNDU0MC00ZTk4LWI0MmUtNGI1YWZiZjdkNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXAwBhrvt/whiVcvLFK+lYnU/A24tLbV10Nd IMXoM1xec+qwfdQI93zwvmqcNxfH01sWp1EsVLRWlYGOw+k6po76FfQJ+EnC878q 41hpWlEJKD3X5W+uQqa4t71APRigQvBNvjenjsf/IaDsIc5HfWJLWOmke6u092Qb kMw+cWsPlsETBebd1+OVtQOAZKzeqGEIbFDMbm4KbpM3odbD+Npz1PjVy4Y88JXG bC0+EtDhFqZjKCLTLeVpC/SCbeg3c8FoMGBozs2BiR/LXe7CFEMw9BNYAiffYvAl rUjmeQDqiuNEX9pw2vTx9tx5ldic6iKlKAZGc8Y473/qboN64wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb9Mrot9BDjHAAiEQLctHhiOpJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMWQyMWU0NmQtOGM3NS0z NmE1LWI3MjYtOTMzMTlkZTA2MDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC56D9z/WOMRcfE7nRbBmWvFvTqmYzztQJsrfQJNS0sNPcsyZCvg0yZ+ 7ovOJrGwd/RCdPMeljcxD430GcsfqUznpKNrCVmbzC/fScCUt2qGl2bppbgqBeih x4MzwiOR4AAZKzXz2jV47xZjO0MCH6+MYjc4rX2U9Wd7V9X30MqVRj57rapzrKlS 9TQIMQaW3WGpQt37A0tVRDz/voc04u2ub3hvSGMi8Qr5G8DwXu5E8kl/dWUfKhFK cWBFy8R9r/qTyEjkjobMDB98ohn9gzD8v87/NVi5HDV2KSMmu+wKEL26oGyHsw47 QYiX0ZxOwk+WBuHeEGFLf5w9A1+PqmQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:20 2025 by rpki-client