$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c67547c-2eb5-32e1-b304-a5cbb7f2bce3.roa File: 8c67547c-2eb5-32e1-b304-a5cbb7f2bce3.roa (raw, json) Hash identifier: we3t1f0h3n6pyatOx/BwmuSh2qREicaPIvFJS9nU7bE= Subject key identifier: E5:4C:B6:99:4D:32:50:1D:75:0A:6E:AD:00:8A:C0:76:50:D0:D2:64 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B1806F201C1E87C093E1E0C80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c67547c-2eb5-32e1-b304-a5cbb7f2bce3.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22516 IP address blocks: 138.229.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:f2:01:c1:e8:7c:09:3e:1e:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=5177e970-628e-4990-aa9a-ab154f5dfdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:84:b0:6f:05:cc:0f:be:c9:89:7f:da:4b: ec:14:ea:84:20:6a:03:fc:3e:7b:c5:1d:3a:34:d0: fb:6b:21:db:d3:5c:a3:fa:a8:d8:53:9b:a6:84:9a: 79:7b:36:46:59:2e:67:d5:3f:bf:61:37:a9:41:43: 0a:2d:bb:7d:3a:5b:3d:07:7b:2b:bb:f8:6b:7a:f7: 0c:10:24:29:42:fe:44:9d:af:f5:52:58:42:77:58: 7f:00:a3:8f:73:57:87:68:68:88:18:bf:2a:3f:44: 92:2b:6e:d9:2e:89:37:2f:6d:69:c2:ae:5c:d1:a1: 8f:8b:bd:f1:6a:ef:8d:0e:f6:86:1f:a7:3f:ce:df: 0c:1c:9c:ad:94:27:e6:8c:27:25:0b:ab:01:54:50: e4:30:8e:f8:33:7e:93:f7:93:70:7b:e0:66:11:60: f1:b0:6d:91:2f:dd:59:ae:c9:fb:98:70:79:fb:61: 35:45:5c:64:0d:85:36:47:28:b1:f3:51:8a:77:c2: ae:07:e7:2f:98:4e:a3:58:86:5e:8b:8a:76:8c:8f: dc:4c:99:cb:54:5b:ea:ca:7f:95:63:c7:1d:aa:d9: 12:39:e9:6c:14:b3:d5:7b:16:59:73:36:2d:1d:78: da:2c:11:62:2b:bf:87:f5:39:2a:5e:a1:4e:4a:0d: 7b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4C:B6:99:4D:32:50:1D:75:0A:6E:AD:00:8A:C0:76:50:D0:D2:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c67547c-2eb5-32e1-b304-a5cbb7f2bce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6b:56:4e:89:24:9b:96:ae:b5:e6:4b:fd:51:23:df:c1:84: 97:50:4a:89:05:bb:1b:03:99:63:73:94:12:c4:1e:1c:85:d0: 2f:10:d8:d8:08:b4:15:34:6a:28:53:65:52:9b:ba:f8:c8:53: 34:79:72:1a:74:f5:9e:94:cd:e8:64:ed:7f:f4:f4:cd:47:68: 48:e7:9f:fe:0b:22:b5:7c:14:9f:63:62:55:2d:3f:ac:c7:85: 79:f6:40:54:c3:d4:bd:f7:7d:93:f5:59:11:2a:22:70:ff:96: c6:af:71:44:a3:c9:fb:1b:a3:b9:e3:73:b0:a0:8f:db:a3:1d: 75:f8:3d:13:61:32:24:e8:a1:00:70:df:f8:63:d3:d5:62:3f: 7a:e2:3b:6b:c4:81:76:c2:7f:95:5f:35:8a:a5:87:d0:8d:dc: 95:3e:1b:01:91:51:55:4b:29:f2:31:7a:cd:24:a8:28:27:c8: d7:30:3e:da:40:18:b6:23:e8:ce:3c:31:19:fb:5c:47:98:c2: 6e:4e:bd:44:43:2f:8c:e9:92:10:f0:f8:90:26:c1:5d:f9:ac: 81:1b:44:2a:71:ea:a7:2f:98:4a:f2:bc:24:e5:6a:e3:dc:a6: 03:0f:0b:e1:51:a5:68:3d:e3:40:5b:68:cc:de:64:60:a6:26: c3:3c:02:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBvIBweh8CT4eDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NTE3N2U5NzAtNjI4ZS00OTkwLWFhOWEtYWIxNTRmNWRmZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdmEsG8FzA++yYl/2kvsFOqEIGoD/D57xR06 NND7ayHb01yj+qjYU5umhJp5ezZGWS5n1T+/YTepQUMKLbt9Ols9B3sru/hrevcM ECQpQv5Ena/1UlhCd1h/AKOPc1eHaGiIGL8qP0SSK27ZLok3L21pwq5c0aGPi73x au+NDvaGH6c/zt8MHJytlCfmjCclC6sBVFDkMI74M36T95Nwe+BmEWDxsG2RL91Z rsn7mHB5+2E1RVxkDYU2Ryix81GKd8KuB+cvmE6jWIZei4p2jI/cTJnLVFvqyn+V Y8cdqtkSOelsFLPVexZZczYtHXjaLBFiK7+H9TkqXqFOSg17pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVMtplNMlAddQpurQCKwHZQ0NJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGM2NzU0N2MtMmViNS0z MmUxLWIzMDQtYTVjYmI3ZjJiY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExrVk6JJJuWrrXmS/1RI9/BhJdQSokFuxsDmWNzlBLEHhyF0C8Q2NgI tBU0aihTZVKbuvjIUzR5chp09Z6Uzehk7X/09M1HaEjnn/4LIrV8FJ9jYlUtP6zH hXn2QFTD1L33fZP1WREqInD/lsavcUSjyfsbo7njc7Cgj9ujHXX4PRNhMiTooQBw 3/hj09ViP3riO2vEgXbCf5VfNYqlh9CN3JU+GwGRUVVLKfIxes0kqCgnyNcwPtpA GLYj6M48MRn7XEeYwm5OvURDL4zpkhDw+JAmwV35rIEbRCpx6qcvmEryvCTlauPc pgMPC+FRpWg940BbaMzeZGCmJsM8AkM= -----END CERTIFICATE-----Generated at Sat Sep 6 02:17:34 2025 by rpki-client