$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21e3c037-17de-3101-9670-83541603afd8.roa File: 21e3c037-17de-3101-9670-83541603afd8.roa (raw, json) Hash identifier: TqFnFl1B9EJso7bRmiuqvxMSQKH04Iw/EbXULyY7ohg= Subject key identifier: 0F:B2:B8:2C:AB:70:EB:F9:8D:77:A7:D7:77:DE:81:C0:27:70:01:FB Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B1806F3BA743821B0C4B096C0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21e3c037-17de-3101-9670-83541603afd8.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 138.229.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:f3:ba:74:38:21:b0:c4:b0:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=ef466d85-3c8e-4dd0-b26b-9920360f0e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:d4:e5:ed:97:47:3c:c9:40:22:31:43:0a: 8e:e4:58:11:d4:1d:71:35:87:eb:88:c4:67:04:8f: df:a4:dd:61:2e:ac:38:52:04:b4:b8:6f:65:1a:a4: 5d:39:dd:7d:14:ec:47:3f:c5:95:4a:97:41:fe:0f: aa:00:15:99:ac:af:29:c5:ec:5a:df:e9:24:15:9e: 0b:45:c3:94:0b:32:b5:e6:c4:56:71:79:3b:ec:a2: 60:7a:9b:3f:fd:5c:67:86:a8:6c:f1:84:1f:4d:83: 9d:87:94:3f:62:38:d3:2b:92:b9:89:1e:0f:e5:94: 49:11:ba:9d:33:25:1b:05:4b:77:9b:54:d2:a2:99: 9e:32:e4:65:7b:46:a5:1c:6e:a4:05:02:b9:0a:48: d4:b5:dc:be:ff:90:18:53:10:a1:b7:53:36:fb:3f: e7:a0:bd:ed:f1:21:b7:e0:5d:1a:00:54:a8:fa:12: 55:3b:76:8d:3e:77:95:6e:ae:c2:fe:5f:c0:4f:ee: b6:40:12:ef:e7:e6:0a:8d:7f:5a:5a:ce:f7:af:35: 2d:41:ed:ad:99:37:92:6f:ac:e5:96:dd:7c:55:8f: a6:86:a9:a9:40:2e:de:ad:95:24:21:27:5f:d8:af: 5c:ff:86:f4:08:b3:d8:69:77:19:12:b1:18:98:d2: 47:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B2:B8:2C:AB:70:EB:F9:8D:77:A7:D7:77:DE:81:C0:27:70:01:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21e3c037-17de-3101-9670-83541603afd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:3c:40:c5:69:9b:92:19:c6:ec:e5:d4:f9:71:16:00:ef:d0: 7d:8d:01:fb:0c:b5:83:2e:29:27:23:96:a6:5c:04:f5:28:91: 31:33:2e:82:d6:94:ac:01:de:76:19:31:af:6c:8c:97:c4:e6: 81:18:2a:3f:fc:77:32:fc:38:05:60:e2:55:33:ef:fd:0d:79: b4:28:ab:ff:e9:d4:cf:45:17:93:8c:b8:74:b2:bf:9c:03:2b: 3a:b6:67:71:a6:de:05:1b:05:cd:c9:b2:10:c5:b8:57:e7:41: 78:43:05:df:ab:5f:44:c3:8f:1e:41:e4:a6:86:c3:75:fc:9f: 3b:a1:18:a5:8d:1b:48:c2:6b:c0:46:99:18:30:4c:33:06:7a: 0a:d7:df:81:b1:16:78:05:e2:58:24:0f:e7:62:e1:c3:5d:ba: 35:0b:0a:98:bf:75:e3:15:8c:dc:ea:82:50:26:f9:b4:db:57: 25:b5:17:94:e4:ca:b4:0e:e2:0a:a3:13:c0:00:26:2c:4d:12: 6e:b9:46:92:55:d2:a3:75:0e:e9:03:21:7f:f4:80:48:56:f9: bf:76:65:65:c0:6a:eb:f4:67:10:cf:de:f8:aa:8f:b7:cc:17: b1:02:03:e0:0e:a8:56:9c:03:93:f9:44:dd:11:df:de:86:39: 93:c7:9d:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBvO6dDghsMSwlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZWY0NjZkODUtM2M4ZS00ZGQwLWIyNmItOTkyMDM2MGYwZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVrU5e2XRzzJQCIxQwqO5FgR1B1xNYfriMRn BI/fpN1hLqw4UgS0uG9lGqRdOd19FOxHP8WVSpdB/g+qABWZrK8pxexa3+kkFZ4L RcOUCzK15sRWcXk77KJgeps//Vxnhqhs8YQfTYOdh5Q/YjjTK5K5iR4P5ZRJEbqd MyUbBUt3m1TSopmeMuRle0alHG6kBQK5CkjUtdy+/5AYUxCht1M2+z/noL3t8SG3 4F0aAFSo+hJVO3aNPneVbq7C/l/AT+62QBLv5+YKjX9aWs73rzUtQe2tmTeSb6zl lt18VY+mhqmpQC7erZUkISdf2K9c/4b0CLPYaXcZErEYmNJHJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+yuCyrcOv5jXen13fegcAncAH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMjFlM2MwMzctMTdkZS0z MTAxLTk2NzAtODM1NDE2MDNhZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ8QMVpm5IZxuzl1PlxFgDv0H2NAfsMtYMuKScjlqZcBPUokTEzLoLW lKwB3nYZMa9sjJfE5oEYKj/8dzL8OAVg4lUz7/0NebQoq//p1M9FF5OMuHSyv5wD Kzq2Z3Gm3gUbBc3JshDFuFfnQXhDBd+rX0TDjx5B5KaGw3X8nzuhGKWNG0jCa8BG mRgwTDMGegrX34GxFngF4lgkD+di4cNdujULCpi/deMVjNzqglAm+bTbVyW1F5Tk yrQO4gqjE8AAJixNEm65RpJV0qN1DukDIX/0gEhW+b92ZWXAauv0ZxDP3viqj7fM F7ECA+AOqFacA5P5RN0R396GOZPHnQc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:07 2025 by rpki-client