$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6405c04f-a620-3246-9917-11776db6a38b.roa File: 6405c04f-a620-3246-9917-11776db6a38b.roa (raw, json) Hash identifier: 1rR1iOCvKbCh/zdyMrAiMgLaxMIkZyn4oHuZvaYwu00= Subject key identifier: 1B:C1:D8:B7:CE:B2:41:C2:96:61:C5:EE:BF:17:1D:2A:E9:1F:2D:3D Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A496026F539138A60CE961B70 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6405c04f-a620-3246-9917-11776db6a38b.roa Signing time: Mon 23 Jun 2025 12:28:30 +0000 ROA not before: Mon 23 Jun 2025 12:28:30 +0000 ROA not after: Sun 21 Sep 2025 12:28:30 +0000 asID: 20001 IP address blocks: 138.229.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:60:26:f5:39:13:8a:60:ce:96:1b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 23 12:28:30 2025 GMT Not After : Sep 21 12:28:30 2025 GMT Subject: CN=8ce18329-78b1-4ac0-8460-2bae0f999043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:19:78:43:6d:a0:da:94:0c:a4:50:d9:85:67: 3e:cd:fe:68:05:bf:cc:db:19:c7:70:6d:86:b5:fd: 99:d2:d8:88:06:7f:1c:e2:c5:8d:df:87:b7:bb:2c: dd:da:8c:e5:d6:92:57:97:7e:e2:34:b8:0f:af:7b: ca:a9:86:1d:ce:58:d4:76:a4:55:f7:49:87:9e:6c: 99:ca:2c:1c:b7:13:1b:a8:92:af:e1:76:13:d0:e7: 8c:34:77:13:f5:45:2d:56:0c:b7:3f:e8:a0:06:76: a5:fc:67:c4:88:39:f6:b8:00:2c:30:1d:e1:07:c9: 57:3e:ce:06:bb:b0:7f:aa:e7:4a:a8:7c:1e:d5:0a: 81:a4:38:44:d3:c8:88:5c:0a:b7:de:b4:14:9e:31: d5:d9:aa:3d:20:59:18:75:b9:d0:48:7c:07:11:3a: 45:20:59:4d:bb:01:39:06:41:03:e5:52:3e:b7:15: eb:bb:0b:71:49:4f:2c:78:e7:d9:12:bb:9d:cb:9d: 3c:7b:45:11:7b:0d:8d:f1:83:43:03:d6:4e:99:ca: 24:40:3d:ea:9f:7a:36:5b:5f:f1:ef:74:97:04:ee: b6:11:49:31:68:1d:12:c3:b8:ab:4c:12:1a:46:09: f1:c7:7f:bc:1b:0a:8e:44:ea:3c:28:97:52:e3:b5: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C1:D8:B7:CE:B2:41:C2:96:61:C5:EE:BF:17:1D:2A:E9:1F:2D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6405c04f-a620-3246-9917-11776db6a38b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d5:97:9f:b6:69:c5:ff:78:a5:58:01:c2:eb:55:f7:6d:b7: a6:38:11:37:fb:b9:08:d2:e1:6e:ea:28:2c:b7:95:88:3f:f0: 62:6b:88:0c:c3:b6:d9:41:30:64:b4:3e:f5:41:ae:a5:f6:7c: fe:86:12:26:12:ba:5e:31:54:58:16:e7:cd:75:76:e3:ed:3b: a5:80:89:62:04:18:29:ad:73:e7:53:b8:60:9d:b4:60:07:5d: 46:41:9a:3c:00:37:9c:51:21:68:d2:dc:a1:14:a4:a9:4d:90: 1e:51:5a:ce:89:ea:73:16:04:d7:0e:69:f3:71:20:f6:da:0e: 22:d1:7e:b8:63:97:f1:39:bb:be:a8:42:e9:b1:42:2e:02:f8: 4b:a8:6f:58:23:31:1b:4e:96:7b:0a:fe:bc:7e:d5:0d:84:47: fc:31:46:1d:4c:0b:78:39:1e:e7:58:70:13:18:f9:44:4c:5a: 70:ea:f6:97:c4:da:cb:08:ed:1f:71:a4:7a:a8:b8:bb:30:0e: 46:78:1f:e5:16:b5:eb:f2:f3:bf:4c:b7:9a:9c:ca:79:1e:86: 3c:ea:fa:dc:0e:e4:64:f2:1e:e9:2b:a5:5e:42:bb:d1:7f:0c: 94:d3:c0:49:d4:07:14:7a:47:41:e9:be:ba:4b:74:61:57:df: 09:c6:68:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJYCb1OROKYM6WG3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYyMzEyMjgzMFoXDTI1MDkyMTEyMjgzMFowLzEtMCsGA1UEAxMk OGNlMTgzMjktNzhiMS00YWMwLTg0NjAtMmJhZTBmOTk5MDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBl4Q22g2pQMpFDZhWc+zf5oBb/M2xnHcG2G tf2Z0tiIBn8c4sWN34e3uyzd2ozl1pJXl37iNLgPr3vKqYYdzljUdqRV90mHnmyZ yiwctxMbqJKv4XYT0OeMNHcT9UUtVgy3P+igBnal/GfEiDn2uAAsMB3hB8lXPs4G u7B/qudKqHwe1QqBpDhE08iIXAq33rQUnjHV2ao9IFkYdbnQSHwHETpFIFlNuwE5 BkED5VI+txXruwtxSU8seOfZErudy508e0URew2N8YNDA9ZOmcokQD3qn3o2W1/x 73SXBO62EUkxaB0Sw7irTBIaRgnxx3+8GwqOROo8KJdS47UWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvB2LfOskHClmHF7r8XHSrpHy09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjQwNWMwNGYtYTYyMC0z MjQ2LTk5MTctMTE3NzZkYjZhMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnVl5+2acX/eKVYAcLrVfdtt6Y4ETf7uQjS4W7qKCy3lYg/8GJriAzD ttlBMGS0PvVBrqX2fP6GEiYSul4xVFgW5811duPtO6WAiWIEGCmtc+dTuGCdtGAH XUZBmjwAN5xRIWjS3KEUpKlNkB5RWs6J6nMWBNcOafNxIPbaDiLRfrhjl/E5u76o QumxQi4C+Euob1gjMRtOlnsK/rx+1Q2ER/wxRh1MC3g5HudYcBMY+URMWnDq9pfE 2ssI7R9xpHqouLswDkZ4H+UWtevy879Mt5qcynkehjzq+twO5GTyHukrpV5Cu9F/ DJTTwEnUBxR6R0HpvrpLdGFX3wnGaEI= -----END CERTIFICATE-----Generated at Mon Jul 21 12:33:18 2025 by rpki-client