$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b1256dde-3bde-36c7-9cef-feee8842f54d.roa File: b1256dde-3bde-36c7-9cef-feee8842f54d.roa (raw, json) Hash identifier: n0HVF2OamO2QTKm1oM9oFneq8zs1U+U56hrn3o0+sEw= Subject key identifier: 60:1E:D7:E4:C8:9E:F3:F2:60:4D:05:66:5E:2B:87:EC:D3:A7:4E:38 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A49613DDB3519EF66BA118C00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b1256dde-3bde-36c7-9cef-feee8842f54d.roa Signing time: Mon 23 Jun 2025 12:30:42 +0000 ROA not before: Mon 23 Jun 2025 12:30:42 +0000 ROA not after: Sun 21 Sep 2025 12:30:42 +0000 asID: 20001 IP address blocks: 138.229.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:61:3d:db:35:19:ef:66:ba:11:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 23 12:30:42 2025 GMT Not After : Sep 21 12:30:42 2025 GMT Subject: CN=b107c226-af3b-4a5c-b3a4-06c4bf379fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fa:91:f8:4a:15:89:2a:f2:9d:a7:d2:59:8b: 34:e1:1b:25:36:ee:b7:85:8a:bb:d7:81:da:97:ba: fb:df:62:96:84:4f:83:51:ef:96:39:85:54:3a:05: bc:95:d0:a1:d6:5c:b8:ce:40:39:94:03:d4:e1:87: 7f:68:e5:ef:a6:20:0b:d3:1b:bc:bf:90:e1:05:3b: 8a:39:db:cf:2c:b2:65:2a:b5:86:bf:c8:e9:52:94: 5c:1b:63:15:7e:f3:15:12:77:e5:6a:d6:0a:c0:09: 28:21:77:7c:33:48:72:93:50:29:7c:52:b1:00:98: 8b:41:d7:d2:95:a1:77:fe:aa:7e:4d:18:e8:90:63: f9:5e:ea:54:b6:83:5e:a9:54:d9:b1:a8:ac:ff:4a: 57:9d:3f:f3:9c:2e:3a:04:b7:e2:82:2d:39:4b:92: c2:a6:8d:88:3e:53:fc:09:2d:b7:50:4d:80:30:35: 79:10:46:16:94:cd:0e:a7:29:ab:1c:6f:2d:62:fc: e7:8b:c4:11:6c:07:2e:b6:f8:cc:11:20:68:d7:05: fa:7e:b1:85:a9:98:b4:28:4b:b6:5f:00:04:76:82: 94:1b:9a:01:84:d7:a9:c8:9b:1f:e7:01:93:66:dc: fe:7e:42:fa:70:85:9b:d1:54:d6:b9:16:c1:4f:ff: f9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1E:D7:E4:C8:9E:F3:F2:60:4D:05:66:5E:2B:87:EC:D3:A7:4E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b1256dde-3bde-36c7-9cef-feee8842f54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ff:5e:db:10:76:7b:a0:08:89:0a:cf:57:0c:c3:0e:bd:36: d7:64:23:0f:aa:dc:ba:03:d4:42:43:b9:8c:14:30:6b:36:cc: 2e:7c:1e:e0:33:d2:cb:fe:9e:64:8e:f9:34:94:00:0b:ff:70: 7f:fd:57:26:b6:3e:2a:d7:9d:02:00:1a:95:a8:a2:3a:c1:77: 24:67:39:39:ad:d3:db:fd:7d:66:1e:62:67:dc:24:29:b4:e4: 30:d0:e9:e9:46:ad:4f:6f:d1:92:97:18:f0:8a:26:c5:5b:cb: 49:22:e3:7f:ba:96:9c:3d:18:fb:5e:a6:c5:f6:94:89:a7:11: da:19:82:c4:8c:6d:69:b2:ea:43:54:e9:db:20:d3:0b:dc:a0: b8:17:eb:a7:5c:52:03:bc:bf:9e:d5:17:02:fe:58:3f:96:e0: 88:41:1f:b6:9d:47:26:d3:28:d5:00:1b:2a:57:27:55:03:54: a8:6a:32:65:53:15:65:6f:b7:25:fa:e1:87:5a:54:40:1a:fb: ae:94:28:d9:d0:0d:6d:85:f2:05:5f:10:ad:33:e4:fe:bb:57: cf:92:08:ef:4b:d3:f8:a6:62:21:c9:fc:26:12:6b:2a:e2:1c: bb:e6:9f:26:f8:fe:30:e9:10:76:48:4e:bd:af:d5:2d:9e:54: c0:76:3c:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJYT3bNRnvZroRjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYyMzEyMzA0MloXDTI1MDkyMTEyMzA0MlowLzEtMCsGA1UEAxMk YjEwN2MyMjYtYWYzYi00YTVjLWIzYTQtMDZjNGJmMzc5ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/qR+EoViSrynafSWYs04RslNu63hYq714Ha l7r732KWhE+DUe+WOYVUOgW8ldCh1ly4zkA5lAPU4Yd/aOXvpiAL0xu8v5DhBTuK OdvPLLJlKrWGv8jpUpRcG2MVfvMVEnflatYKwAkoIXd8M0hyk1ApfFKxAJiLQdfS laF3/qp+TRjokGP5XupUtoNeqVTZsais/0pXnT/znC46BLfigi05S5LCpo2IPlP8 CS23UE2AMDV5EEYWlM0OpymrHG8tYvzni8QRbAcutvjMESBo1wX6frGFqZi0KEu2 XwAEdoKUG5oBhNepyJsf5wGTZtz+fkL6cIWb0VTWuRbBT//5uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAe1+TInvPyYE0FZl4rh+zTp044MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYjEyNTZkZGUtM2JkZS0z NmM3LTljZWYtZmVlZTg4NDJmNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED/XtsQdnugCIkKz1cMww69NtdkIw+q3LoD1EJDuYwUMGs2zC58HuAz 0sv+nmSO+TSUAAv/cH/9Vya2PirXnQIAGpWoojrBdyRnOTmt09v9fWYeYmfcJCm0 5DDQ6elGrU9v0ZKXGPCKJsVby0ki43+6lpw9GPtepsX2lImnEdoZgsSMbWmy6kNU 6dsg0wvcoLgX66dcUgO8v57VFwL+WD+W4IhBH7adRybTKNUAGypXJ1UDVKhqMmVT FWVvtyX64YdaVEAa+66UKNnQDW2F8gVfEK0z5P67V8+SCO9L0/imYiHJ/CYSayri HLvmnyb4/jDpEHZITr2v1S2eVMB2PHI= -----END CERTIFICATE-----Generated at Tue Jul 1 16:58:17 2025 by rpki-client