$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa File: 9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa (raw, json) Hash identifier: 8CXujye3uAQ1Kj22O/9gRPGewv5lYn6qi2jY8NFfIdI= Subject key identifier: BC:00:57:11:54:9E:7D:A8:9B:A1:64:59:CF:82:F5:7D:B7:48:6D:5B Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F3CE2B58E5258F1CE7693D780 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22516 IP address blocks: 138.229.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:b5:8e:52:58:f1:ce:76:93:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=f7d11b63-7ebb-43c5-a6dd-2bd588a2bfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:49:fa:5b:08:a4:ac:e1:74:d4:21:59:55:24: e7:64:76:75:5e:fb:49:77:17:7b:94:41:85:07:5b: 8e:74:7a:9a:01:90:14:36:83:8e:17:dc:01:31:1f: 9d:f3:3b:e3:89:7f:11:b1:18:f7:28:76:34:49:6f: d4:c9:a6:d0:21:7d:55:09:c5:86:30:0e:6c:74:2c: a3:7c:f4:87:cb:aa:c8:14:21:3c:64:ad:54:54:ed: 14:50:67:b3:db:a3:ff:2e:b9:d6:83:58:2e:10:36: b8:bf:98:21:cb:d6:0c:01:5b:03:a5:e5:b8:3b:e4: 00:7f:fb:e9:88:ba:7e:40:88:3a:1d:71:a9:e8:3d: e3:b2:57:f1:82:7e:1a:6a:a8:bb:d1:82:6f:3e:8a: 3f:05:36:6d:fb:10:7e:8c:0e:92:da:1e:8a:9b:63: aa:f5:a3:78:34:a3:3d:00:0a:f5:85:c0:ed:9b:a5: 1a:22:8d:93:12:d5:01:45:17:7a:aa:3c:0e:9a:70: 18:5f:dc:6e:67:ce:68:b7:44:2e:2b:d8:28:f2:a0: 1f:2b:55:df:92:18:3f:dc:9f:e9:bd:ed:b9:59:08: a5:00:fe:fe:96:0e:ba:e6:e9:76:44:f2:0f:fb:26: 55:ce:45:fa:45:d3:86:0f:6f:00:87:82:c2:be:b4: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:00:57:11:54:9E:7D:A8:9B:A1:64:59:CF:82:F5:7D:B7:48:6D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:5d:b8:97:07:9a:ec:76:16:a2:3e:fa:83:58:73:c3:c1:70: 7c:18:3c:00:ec:a6:21:7f:83:fd:5e:16:dd:c6:24:0c:d1:17: 8d:c9:78:f0:80:eb:c4:11:c2:cd:e2:ea:35:98:42:4d:75:52: a0:5f:e5:ea:96:12:d8:e0:83:c4:ee:44:1e:cd:f3:10:2e:b1: ba:62:0c:e9:53:c0:56:33:1e:ff:d4:dd:7b:e3:f3:19:96:2d: a5:67:6a:e6:81:0b:0c:db:d4:8a:60:24:96:44:84:da:c5:63: 2f:41:85:de:92:79:10:18:7c:01:5c:0b:74:76:c0:6b:8d:59: 49:bc:15:de:bd:f2:26:aa:3a:df:d7:50:d4:c8:2c:db:1a:bb: 15:84:6d:81:a6:18:ae:b1:c8:28:c7:54:b7:cb:c7:de:b7:dd: 64:d9:51:68:21:46:ce:ea:f4:b5:4a:22:2c:5b:c1:7e:e6:e5: ec:c0:c8:e7:60:18:0e:23:df:b0:ba:c1:1e:20:d5:53:7c:15: ca:b1:35:34:b7:14:c8:90:e7:04:5a:9b:4a:3f:bb:c5:95:ee: 1a:fd:4b:9c:da:be:ea:3e:87:dd:a5:94:96:76:6a:46:00:d8: 71:2b:a4:c0:9f:10:4e:7e:fd:b7:d9:f1:e7:7a:a1:be:6e:97: 85:cb:15:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884rWOUljxznaT14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjdkMTFiNjMtN2ViYi00M2M1LWE2ZGQtMmJkNTg4YTJiZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8En6WwikrOF01CFZVSTnZHZ1XvtJdxd7lEGF B1uOdHqaAZAUNoOOF9wBMR+d8zvjiX8RsRj3KHY0SW/UyabQIX1VCcWGMA5sdCyj fPSHy6rIFCE8ZK1UVO0UUGez26P/LrnWg1guEDa4v5ghy9YMAVsDpeW4O+QAf/vp iLp+QIg6HXGp6D3jslfxgn4aaqi70YJvPoo/BTZt+xB+jA6S2h6Km2Oq9aN4NKM9 AAr1hcDtm6UaIo2TEtUBRRd6qjwOmnAYX9xuZ85ot0QuK9go8qAfK1Xfkhg/3J/p ve25WQilAP7+lg665ul2RPIP+yZVzkX6RdOGD28Ah4LCvrSAMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwAVxFUnn2om6FkWc+C9X23SG1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOWFjMWE2YTYtZjQzNi0z ZTZjLTkxNmQtYmUzZjA2ZTc3MDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBduJcHmux2FqI++oNYc8PBcHwYPADspiF/g/1eFt3GJAzRF43JePCA 68QRws3i6jWYQk11UqBf5eqWEtjgg8TuRB7N8xAusbpiDOlTwFYzHv/U3Xvj8xmW LaVnauaBCwzb1IpgJJZEhNrFYy9Bhd6SeRAYfAFcC3R2wGuNWUm8Fd698iaqOt/X UNTILNsauxWEbYGmGK6xyCjHVLfLx9633WTZUWghRs7q9LVKIixbwX7m5ezAyOdg GA4j37C6wR4g1VN8FcqxNTS3FMiQ5wRam0o/u8WV7hr9S5zavuo+h92llJZ2akYA 2HErpMCfEE5+/bfZ8ed6ob5ul4XLFbg= -----END CERTIFICATE-----Generated at Thu Oct 8 20:41:05 2026 by rpki-client