$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5f59312e-a909-3d9c-9901-86e7cd3b06bb.roa File: 5f59312e-a909-3d9c-9901-86e7cd3b06bb.roa (raw, json) Hash identifier: sSrSkJ8g53F6+7zhD3NBjNhM/SPOMan5TiLj5cw8KN0= Subject key identifier: 92:D8:67:43:DD:E9:0F:22:74:40:BE:BA:9A:44:81:63:F6:AA:7B:88 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F4989516693CFF3B35BFBD2C0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5f59312e-a909-3d9c-9901-86e7cd3b06bb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20001 IP address blocks: 138.229.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:51:66:93:cf:f3:b3:5b:fb:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=633824bf-3ccf-47b6-9a13-687859fc39e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:76:50:39:74:24:3d:c1:44:3d:37:58:36: a0:c0:b7:ac:8f:03:52:93:19:75:fd:5b:a0:07:44: ea:4d:94:1b:c5:4c:d3:8e:15:14:bc:c5:56:0b:42: 09:96:b3:63:7e:a2:ca:97:f2:4a:e3:93:e9:f5:95: ce:d2:eb:fc:6d:30:4c:4b:72:1e:3b:b1:a2:77:e3: 4c:37:c3:bb:c4:c9:c8:a8:02:70:0b:19:99:f1:0f: e7:22:8e:a5:fd:1d:86:5e:16:1f:6d:08:64:15:e3: ea:4c:73:1b:51:39:33:5f:ef:ce:fd:f4:08:a9:be: 67:e2:70:ad:f0:94:3e:86:29:3f:9c:43:dc:a4:85: 4a:f9:4e:81:42:de:2d:e3:0b:92:41:af:82:c8:94: 35:cd:5d:62:5e:26:ce:df:56:38:01:2a:13:91:bf: 5a:36:80:2f:71:ed:4d:1e:80:b9:62:02:61:62:e2: e2:80:88:91:9d:bf:b3:71:21:08:d2:3d:8d:9c:13: a7:67:26:01:8a:7b:22:e4:94:2b:cc:4e:b4:05:4e: 61:40:73:fe:48:88:6a:4c:1a:c4:12:5e:45:bd:b6: 2b:6c:5c:d3:1f:77:d0:47:b9:e9:f2:c5:f5:61:c6: 69:9d:bb:4f:06:2b:e5:e2:00:ae:95:75:8b:27:86: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D8:67:43:DD:E9:0F:22:74:40:BE:BA:9A:44:81:63:F6:AA:7B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5f59312e-a909-3d9c-9901-86e7cd3b06bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:bd:14:1c:fe:56:0f:91:95:be:db:44:0e:24:0a:7a:f8:0e: ca:29:a7:c6:30:64:9e:c4:e9:e1:4b:60:37:c2:27:7b:b7:07: 49:50:a6:c0:ba:09:de:4f:64:16:f3:b9:a7:5d:b0:0c:29:a8: ca:2b:99:aa:28:ae:f0:d5:52:e6:46:69:38:d3:6f:ac:59:1e: bd:0b:40:86:fd:ba:9a:d5:2b:4c:b6:ee:b4:76:65:18:bf:fa: 5e:76:6a:ec:e2:f4:33:77:78:78:89:7c:7c:86:dd:e3:f3:18: c6:39:6d:bd:e6:52:83:17:0c:d3:ae:e7:6a:81:78:4c:43:90: 5c:71:d5:ed:08:24:0c:67:13:25:59:2a:f5:68:b2:25:00:8b: 86:fb:e6:b7:57:80:e2:38:33:bd:09:de:41:1a:29:4c:33:19: 94:32:b5:cf:17:88:44:c1:e8:00:f3:65:44:fe:ee:56:d3:e8: 9a:74:76:a2:bb:f5:23:0c:3e:cb:0e:06:03:a0:d9:e4:ca:32: a8:0d:55:5a:4f:98:73:10:02:4f:b4:60:26:d9:c5:ac:e0:7b: c5:01:c7:21:be:c3:5d:67:3d:b3:07:e5:44:2a:30:64:a6:0e: 6a:5c:fe:52:34:ae:3d:09:00:b9:a6:44:75:43:d8:1f:4f:3f: d8:a6:5e:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiVFmk8/zs1v70sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjMzODI0YmYtM2NjZi00N2I2LTlhMTMtNjg3ODU5ZmMzOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXt2UDl0JD3BRD03WDagwLesjwNSkxl1/Vug B0TqTZQbxUzTjhUUvMVWC0IJlrNjfqLKl/JK45Pp9ZXO0uv8bTBMS3IeO7Gid+NM N8O7xMnIqAJwCxmZ8Q/nIo6l/R2GXhYfbQhkFePqTHMbUTkzX+/O/fQIqb5n4nCt 8JQ+hik/nEPcpIVK+U6BQt4t4wuSQa+CyJQ1zV1iXibO31Y4ASoTkb9aNoAvce1N HoC5YgJhYuLigIiRnb+zcSEI0j2NnBOnZyYBinsi5JQrzE60BU5hQHP+SIhqTBrE El5FvbYrbFzTH3fQR7np8sX1YcZpnbtPBivl4gCulXWLJ4bxrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLYZ0Pd6Q8idEC+uppEgWP2qnuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNWY1OTMxMmUtYTkwOS0z ZDljLTk5MDEtODZlN2NkM2IwNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC9FBz+Vg+Rlb7bRA4kCnr4Dsopp8YwZJ7E6eFLYDfCJ3u3B0lQpsC6 Cd5PZBbzuaddsAwpqMormaoorvDVUuZGaTjTb6xZHr0LQIb9uprVK0y27rR2ZRi/ +l52auzi9DN3eHiJfHyG3ePzGMY5bb3mUoMXDNOu52qBeExDkFxx1e0IJAxnEyVZ KvVosiUAi4b75rdXgOI4M70J3kEaKUwzGZQytc8XiETB6ADzZUT+7lbT6Jp0dqK7 9SMMPssOBgOg2eTKMqgNVVpPmHMQAk+0YCbZxazge8UBxyG+w11nPbMH5UQqMGSm Dmpc/lI0rj0JALmmRHVD2B9PP9imXj0= -----END CERTIFICATE-----Generated at Fri Sep 25 19:42:06 2026 by rpki-client