$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa File: 9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa (raw, json) Hash identifier: uqELesqpIk+Znrjkf345Ji4W9Tbksv5t0I+cos8qrWQ= Subject key identifier: E3:48:70:60:33:07:2B:CE:98:A0:E8:54:99:FD:A8:51:D6:61:87:45 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B1806F3AB4C09A5402F7F3580 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22516 IP address blocks: 138.229.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:f3:ab:4c:09:a5:40:2f:7f:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=62bac27f-c8e0-4d0a-b9a8-4583ee92a0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:a2:d9:d9:9f:bc:17:64:26:29:f3:7a:42: 19:19:f5:9b:e2:54:7b:82:c4:08:12:7b:29:92:d6: 9e:88:1d:21:71:bb:d5:49:0a:75:d7:df:cc:b2:42: a5:1b:b5:e1:45:30:06:51:55:23:3c:14:77:82:f0: e2:16:fb:a2:52:4c:50:e0:94:e0:6e:54:c3:4a:a3: 97:1a:92:9a:a4:2d:15:ea:d3:3e:94:65:2a:4e:e0: 60:0c:8c:b9:a0:9e:61:51:24:89:e3:15:93:f5:92: e2:92:08:5f:4d:0d:f8:74:ae:05:6e:91:6c:03:3b: f9:7b:74:d2:e5:f9:3b:db:61:32:e1:7a:68:b1:39: b3:af:2e:ce:3e:7d:e3:b9:d3:9c:24:26:b2:0d:ee: 0a:43:4f:51:b5:b2:34:ec:79:c5:e7:4c:af:c3:58: df:ea:d2:a3:22:4d:2d:ef:d2:dc:2f:9d:93:39:ee: 1c:64:31:5a:e2:7a:1b:e4:5d:fc:c0:25:5f:56:bb: 4d:5c:a6:35:fb:82:a6:52:0a:d3:30:a0:b9:34:f5: 61:38:d4:ff:5f:ec:a9:6c:43:b7:e3:f1:94:77:59: c3:7c:6a:3a:9b:c9:64:9b:6d:ec:7e:be:eb:70:83: a4:45:fd:0a:5e:72:3d:1c:bc:16:67:1c:63:42:c1: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:48:70:60:33:07:2B:CE:98:A0:E8:54:99:FD:A8:51:D6:61:87:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ac1a6a6-f436-3e6c-916d-be3f06e77045.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:6c:6f:8c:c0:ca:1a:62:50:c9:5a:5a:33:70:e7:6a:68:2b: 21:a6:22:5f:59:6b:e4:7c:0d:a9:70:03:86:dd:dc:b6:51:dd: ca:17:d8:1b:9e:b9:ea:a1:f0:b6:4a:24:14:b1:0c:7a:7f:9c: 6a:89:75:5f:57:df:58:ea:87:fa:fc:88:c8:fc:19:7d:c5:6d: 77:e9:63:1d:8d:96:6e:90:80:21:0d:69:b1:64:3e:81:f0:1f: 46:3e:a4:62:ae:b2:83:2c:bc:ea:a7:57:69:15:da:9f:d3:be: 81:5c:e1:f0:b4:65:69:c1:c3:c7:c7:16:6b:78:ed:b5:22:52: b2:04:23:33:59:81:f3:b7:2a:34:4d:8f:60:c2:5d:8b:c5:81: fe:81:b9:6a:94:6c:a4:8b:a9:5c:f2:e5:e9:e1:64:0a:72:65: d9:db:90:77:cf:f0:c8:54:77:41:e0:c4:a8:76:8c:c9:fa:d1: cb:26:cd:7d:fe:c8:f0:57:d6:3b:12:19:fd:3d:90:56:98:82: 98:51:f3:cd:13:d3:81:aa:61:6e:b0:43:bc:a4:33:a4:66:43: 03:d8:66:ae:b6:46:63:60:3c:4a:8c:5b:b4:19:77:48:68:bd: fc:17:15:34:91:1d:2f:e6:34:48:11:24:da:7b:ea:38:0f:83: b3:58:fc:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBvOrTAmlQC9/NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NjJiYWMyN2YtYzhlMC00ZDBhLWI5YTgtNDU4M2VlOTJhMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliSi2dmfvBdkJinzekIZGfWb4lR7gsQIEnsp ktaeiB0hcbvVSQp119/MskKlG7XhRTAGUVUjPBR3gvDiFvuiUkxQ4JTgblTDSqOX GpKapC0V6tM+lGUqTuBgDIy5oJ5hUSSJ4xWT9ZLikghfTQ34dK4FbpFsAzv5e3TS 5fk722Ey4XposTmzry7OPn3judOcJCayDe4KQ09RtbI07HnF50yvw1jf6tKjIk0t 79LcL52TOe4cZDFa4nob5F38wCVfVrtNXKY1+4KmUgrTMKC5NPVhONT/X+ypbEO3 4/GUd1nDfGo6m8lkm23sfr7rcIOkRf0KXnI9HLwWZxxjQsGpDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONIcGAzByvOmKDoVJn9qFHWYYdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOWFjMWE2YTYtZjQzNi0z ZTZjLTkxNmQtYmUzZjA2ZTc3MDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5sb4zAyhpiUMlaWjNw52poKyGmIl9Za+R8DalwA4bd3LZR3coX2Bue ueqh8LZKJBSxDHp/nGqJdV9X31jqh/r8iMj8GX3FbXfpYx2Nlm6QgCENabFkPoHw H0Y+pGKusoMsvOqnV2kV2p/TvoFc4fC0ZWnBw8fHFmt47bUiUrIEIzNZgfO3KjRN j2DCXYvFgf6BuWqUbKSLqVzy5enhZApyZdnbkHfP8MhUd0HgxKh2jMn60csmzX3+ yPBX1jsSGf09kFaYgphR880T04GqYW6wQ7ykM6RmQwPYZq62RmNgPEqMW7QZd0ho vfwXFTSRHS/mNEgRJNp76jgPg7NY/JA= -----END CERTIFICATE-----Generated at Sat Sep 6 02:17:31 2025 by rpki-client