$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3172b7f5-6858-3e61-91cc-f5f28123724f.roa File: 3172b7f5-6858-3e61-91cc-f5f28123724f.roa (raw, json) Hash identifier: 1yxWItGKnr6lqA0H2s7TXMlIrtS2zmSU4zEZpD46YBc= Subject key identifier: 99:20:96:9C:83:A9:5B:3C:08:37:DB:7B:1D:E7:2D:28:48:BF:1E:6E Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584DBA3B15E4935F8FD087E6A380 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3172b7f5-6858-3e61-91cc-f5f28123724f.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 22516 IP address blocks: 138.229.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:15:e4:93:5f:8f:d0:87:e6:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=f4b8e9e9-dc5d-4c94-9f18-73b893a00dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:67:c7:c6:8b:89:01:ce:c1:59:c0:48:63: d4:eb:7a:a1:40:15:db:45:e1:4e:ae:8a:8b:1e:d8: dc:26:a2:26:b8:6a:b2:13:18:37:1b:b6:59:3a:5b: f5:bd:42:33:9e:2e:38:03:ef:4a:e1:1a:a1:49:7c: 29:51:29:53:65:c9:b0:13:42:93:31:19:c5:f4:60: 5b:bf:ef:8f:09:dc:e7:5a:74:69:f5:4f:ea:66:68: ee:92:9d:6e:74:9d:b0:87:a5:02:6a:be:20:48:d6: 8f:3a:68:25:ce:5b:b0:2e:ce:8a:da:a8:01:7a:87: 97:6e:1a:b8:91:82:14:07:46:3b:e1:78:a9:bf:af: 8b:fa:f3:1a:c0:1b:87:2c:3d:2c:16:c9:ed:f4:3f: ba:9a:1b:49:2f:2d:8f:e7:0b:32:5d:a3:6e:fa:3d: 18:15:72:8b:43:ad:e5:00:9a:5b:c0:80:78:0d:01: 16:c4:1f:a1:84:49:53:ee:57:9d:41:ed:89:ee:f9: 91:80:8f:df:1e:ce:bb:94:d8:46:2f:7a:7b:ab:0f: 14:e8:a1:b0:ff:06:aa:92:c2:45:a9:f1:ea:19:dc: 91:c0:e7:80:30:2c:e3:8b:58:06:d4:6b:48:fa:49: f5:6b:14:1b:02:73:23:92:12:d3:be:41:c9:88:e6: f4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:20:96:9C:83:A9:5B:3C:08:37:DB:7B:1D:E7:2D:28:48:BF:1E:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3172b7f5-6858-3e61-91cc-f5f28123724f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:96:c1:2c:eb:d8:c4:e9:c4:3b:86:39:77:6b:bb:ac:c8:7f: 27:b6:a2:57:ea:5d:a2:c0:8f:96:35:88:f1:c7:b4:b6:a5:3b: b6:aa:17:d5:52:35:c4:c4:9f:ab:9b:73:ff:c9:ab:38:2c:32: 7c:91:97:9c:40:91:53:cf:c7:91:ff:f2:dc:4e:26:8e:88:ac: 5f:61:8c:78:3a:57:31:89:4f:61:fb:0e:e6:a1:da:5a:11:18: e9:c8:b5:fb:2c:df:4c:4e:c8:b8:dd:10:05:8f:57:83:0f:db: 40:f0:5e:ea:e0:b0:25:7a:f5:a0:87:6a:1f:26:dc:77:bf:58: 42:d2:13:20:cc:93:18:a4:90:42:1f:82:2f:95:dd:61:89:56: da:0f:12:ad:c7:fe:4c:ab:e3:87:4b:f2:1d:ea:ac:7b:59:d9: 10:06:ed:de:b5:cb:1c:7f:92:58:c0:95:15:c0:9c:a6:42:20: f5:d6:0f:c3:4c:1e:2a:bc:27:58:66:b0:03:ef:86:f5:01:64: 58:ed:bb:82:16:fc:15:64:f6:4d:2e:08:18:94:75:97:8a:14: 6b:99:01:ae:4a:e3:0a:b6:6a:8c:f2:06:0e:6f:6a:95:d1:65: cd:4d:ed:4a:bb:0e:04:d2:2b:9d:11:c5:e5:d5:5a:53:1e:29: 8d:42:bf:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OxXkk1+P0Ifmo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk ZjRiOGU5ZTktZGM1ZC00Yzk0LTlmMTgtNzNiODkzYTAwZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfBnx8aLiQHOwVnASGPU63qhQBXbReFOroqL HtjcJqImuGqyExg3G7ZZOlv1vUIzni44A+9K4RqhSXwpUSlTZcmwE0KTMRnF9GBb v++PCdznWnRp9U/qZmjukp1udJ2wh6UCar4gSNaPOmglzluwLs6K2qgBeoeXbhq4 kYIUB0Y74Xipv6+L+vMawBuHLD0sFsnt9D+6mhtJLy2P5wsyXaNu+j0YFXKLQ63l AJpbwIB4DQEWxB+hhElT7ledQe2J7vmRgI/fHs67lNhGL3p7qw8U6KGw/waqksJF qfHqGdyRwOeAMCzji1gG1GtI+kn1axQbAnMjkhLTvkHJiOb0NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkglpyDqVs8CDfbex3nLShIvx5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzE3MmI3ZjUtNjg1OC0z ZTYxLTkxY2MtZjVmMjgxMjM3MjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANeWwSzr2MTpxDuGOXdru6zIfye2olfqXaLAj5Y1iPHHtLalO7aqF9VS NcTEn6ubc//JqzgsMnyRl5xAkVPPx5H/8txOJo6IrF9hjHg6VzGJT2H7Duah2loR GOnItfss30xOyLjdEAWPV4MP20DwXurgsCV69aCHah8m3He/WELSEyDMkxikkEIf gi+V3WGJVtoPEq3H/kyr44dL8h3qrHtZ2RAG7d61yxx/kljAlRXAnKZCIPXWD8NM Hiq8J1hmsAPvhvUBZFjtu4IW/BVk9k0uCBiUdZeKFGuZAa5K4wq2aozyBg5vapXR Zc1N7Uq7DgTSK50RxeXVWlMeKY1Cv7s= -----END CERTIFICATE-----Generated at Wed May 13 14:21:20 2026 by rpki-client