$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/38182387-c020-301e-b758-b4317299c1e8.roa File: 38182387-c020-301e-b758-b4317299c1e8.roa (raw, json) Hash identifier: 1PL90LzC2pep60HjckkOJr/8/8+lKf9hxOce+sYhrK8= Subject key identifier: 3A:87:4E:8C:C7:DD:67:94:94:F7:46:21:3E:1E:C0:AC:05:EB:24:B7 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F498AD6D4122810D101DA1200 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/38182387-c020-301e-b758-b4317299c1e8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20001 IP address blocks: 138.229.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:d6:d4:12:28:10:d1:01:da:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e20ceaa4-af45-4fc8-bbc8-6dcbcb36983d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5a:0b:43:17:94:54:35:1e:8a:5a:46:b5:95: 49:48:4c:37:7b:1a:25:56:0c:12:5f:01:2a:9e:4b: cc:27:a8:d5:bf:4e:ec:6a:64:05:3b:58:61:40:74: 23:c3:65:25:6b:92:fa:61:36:6a:ab:78:b7:15:96: ed:4a:71:b3:2e:a9:94:15:f2:fa:2d:16:3f:bd:2b: f7:19:d5:96:b9:be:64:b0:5b:cc:31:1a:dc:3a:59: 14:f7:e1:bb:de:81:05:a4:eb:a3:6a:40:8f:84:e9: 8c:72:ac:09:4b:ad:76:c7:a5:42:48:33:d5:0b:1e: f6:43:7b:be:88:e0:c6:04:9d:b6:d8:9b:0c:89:d8: 84:af:67:ba:0a:f7:cf:c7:40:24:46:77:ca:b7:1e: 02:cb:2f:70:79:b5:c9:12:6c:43:fc:97:85:33:cf: ca:5e:7c:6a:de:68:cf:ef:e4:48:22:28:c5:92:cc: fc:cb:23:1a:c9:5f:60:20:01:ce:e2:b4:e2:ef:74: 57:cb:27:c9:4c:0b:a6:9d:2e:1c:90:3b:5d:18:28: dc:46:6a:aa:e6:78:86:74:e2:60:35:43:2f:f5:fb: 9d:94:41:8b:7c:21:70:8c:07:45:df:ba:a4:a6:a1: 6d:80:99:97:6e:50:06:c1:c2:5c:c8:6b:3c:f3:e0: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:87:4E:8C:C7:DD:67:94:94:F7:46:21:3E:1E:C0:AC:05:EB:24:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/38182387-c020-301e-b758-b4317299c1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4f:dc:85:fd:49:b3:0c:48:27:a5:c3:89:14:54:23:fe:c3: 4d:42:8d:d0:71:e0:d7:db:30:39:cb:a8:f9:e7:82:e6:ed:a9: 82:c6:ba:b6:09:3b:cb:4b:9b:09:d5:39:71:de:c6:29:a5:c7: 74:4b:7d:6b:56:ed:10:51:04:ff:07:06:45:12:87:9f:17:c4: ab:90:d0:eb:ca:54:50:a9:20:9f:24:2e:e3:34:94:45:69:7d: 2f:fd:43:ab:3f:b2:5c:60:50:52:16:18:fa:bf:af:2a:85:13: 7a:7f:a6:bf:c0:37:b8:a5:c6:00:d2:ed:d5:c7:94:d2:e7:67: e0:32:82:45:f5:ae:38:f0:58:4d:3f:cc:d4:9d:93:da:69:05: d3:15:78:11:ff:eb:f2:35:9f:5b:8a:98:00:8e:fb:33:20:94: 36:ef:58:42:56:1d:97:57:fb:be:14:08:85:48:da:12:9b:7e: ce:c5:39:84:13:ac:a4:0e:7b:1c:07:4f:09:30:56:60:66:b9: 55:67:de:22:cd:a7:79:c2:1e:ee:0a:3a:ea:f6:bf:cd:56:18: 05:a7:a2:59:32:f2:20:09:a4:9e:0a:76:01:0f:a2:14:c1:b7: 84:86:83:60:c9:29:49:7a:ce:fa:38:45:b9:b9:99:15:78:e2: b1:13:d1:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JitbUEigQ0QHaEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTIwY2VhYTQtYWY0NS00ZmM4LWJiYzgtNmRjYmNiMzY5ODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFoLQxeUVDUeilpGtZVJSEw3exolVgwSXwEq nkvMJ6jVv07samQFO1hhQHQjw2Ula5L6YTZqq3i3FZbtSnGzLqmUFfL6LRY/vSv3 GdWWub5ksFvMMRrcOlkU9+G73oEFpOujakCPhOmMcqwJS612x6VCSDPVCx72Q3u+ iODGBJ222JsMidiEr2e6CvfPx0AkRnfKtx4Cyy9webXJEmxD/JeFM8/KXnxq3mjP 7+RIIijFksz8yyMayV9gIAHO4rTi73RXyyfJTAumnS4ckDtdGCjcRmqq5niGdOJg NUMv9fudlEGLfCFwjAdF37qkpqFtgJmXblAGwcJcyGs88+B+6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqHTozH3WeUlPdGIT4ewKwF6yS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzgxODIzODctYzAyMC0z MDFlLWI3NTgtYjQzMTcyOTljMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZP3IX9SbMMSCelw4kUVCP+w01CjdBx4NfbMDnLqPnngubtqYLGurYJ O8tLmwnVOXHeximlx3RLfWtW7RBRBP8HBkUSh58XxKuQ0OvKVFCpIJ8kLuM0lEVp fS/9Q6s/slxgUFIWGPq/ryqFE3p/pr/AN7ilxgDS7dXHlNLnZ+AygkX1rjjwWE0/ zNSdk9ppBdMVeBH/6/I1n1uKmACO+zMglDbvWEJWHZdX+74UCIVI2hKbfs7FOYQT rKQOexwHTwkwVmBmuVVn3iLNp3nCHu4KOur2v81WGAWnolky8iAJpJ4KdgEPohTB t4SGg2DJKUl6zvo4Rbm5mRV44rET0Ss= -----END CERTIFICATE-----Generated at Sun Oct 11 07:41:32 2026 by rpki-client