$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21e3c037-17de-3101-9670-83541603afd8.roa File: 21e3c037-17de-3101-9670-83541603afd8.roa (raw, json) Hash identifier: lTOcM6ps1mhdx/uKS4S7avdz6YVuX7fr8FXnaBz5MNQ= Subject key identifier: 0A:B6:AA:B6:0A:53:FB:67:79:2F:37:27:A0:DB:2A:18:02:94:52:9B Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584E9A7FE04793BB9EB1E6DCE898 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21e3c037-17de-3101-9670-83541603afd8.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 138.229.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:e0:47:93:bb:9e:b1:e6:dc:e8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=259ff326-2eec-4750-85ee-e75fb99bded9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:64:35:d2:1c:dd:cb:0b:cd:be:31:31:8e:9e: 52:68:54:c9:76:d9:2a:84:d7:f6:57:62:d1:7e:4a: c0:ab:a4:05:09:53:01:de:18:63:c8:ed:e9:a7:69: f4:79:b6:99:49:e8:94:e5:d4:6d:1e:d8:9d:67:d5: 41:9e:7e:fc:a9:ee:e3:3b:5c:04:2b:92:b5:ac:90: c2:af:4b:55:e9:c5:c9:52:5a:71:1c:09:1c:c9:d9: 7a:2b:f0:37:13:c7:4c:2d:06:99:21:e5:69:7f:09: ff:43:1c:04:0e:ee:c1:9f:95:ea:0a:db:56:e7:0f: 1f:d2:7b:26:3c:30:57:49:77:8b:3f:8f:ab:6c:53: 23:5c:59:ca:5b:69:8d:a4:7f:34:5d:0d:cc:7e:a4: ea:23:04:46:6b:01:a4:b5:e7:82:1a:02:6b:a4:98: d5:05:09:c1:9a:7d:6c:aa:46:d6:5d:7e:40:14:62: 54:59:a0:df:ba:5d:bd:48:ca:1c:1e:82:3e:4e:56: 1d:b4:16:11:70:30:65:cc:2b:2a:2c:24:bc:59:2d: 6d:62:c3:a2:7e:bc:f4:3c:0b:8d:e9:74:50:ef:37: 7a:16:5f:6d:9c:96:33:de:09:ba:f9:b4:ce:60:b9: b6:96:03:32:ff:b7:81:e4:a1:b1:87:e7:f8:b6:b4: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B6:AA:B6:0A:53:FB:67:79:2F:37:27:A0:DB:2A:18:02:94:52:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21e3c037-17de-3101-9670-83541603afd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:bc:c5:12:5b:b3:67:1d:a5:1e:e4:d5:16:76:12:4c:ea:d4: 26:59:d5:76:49:f7:c8:93:4f:f9:f7:6e:3b:88:d9:02:c4:73: 2d:d8:74:76:02:2e:ff:91:5a:d8:f1:02:85:65:c0:08:4c:47: 60:fc:30:82:39:4b:34:6a:c7:5c:d8:cf:a9:d5:4c:f4:35:27: 11:f7:83:7e:48:9b:82:a3:b2:aa:76:a1:eb:c5:2d:e5:e8:61: 25:b7:1a:26:79:96:ed:95:90:df:c6:4a:dd:41:84:0c:a2:e9: 56:da:4a:96:9d:b7:f2:b9:aa:64:b9:5c:96:ab:5c:e1:1d:5d: 89:a5:53:41:fe:a8:19:60:99:04:b2:18:f9:e0:a2:87:12:36: 9f:95:b8:8f:03:65:eb:7d:c6:19:a6:31:3b:a2:32:7c:ea:38: ff:30:a0:eb:09:2b:5d:ad:99:5c:3a:75:36:e7:f4:77:fe:d1: a3:39:0a:5a:8b:11:86:20:ae:f0:b3:20:9c:e6:10:58:09:b4: 64:96:70:eb:45:c2:6d:89:5a:87:b8:c9:bb:89:c9:c9:24:05: 30:ab:48:c2:f2:25:9f:5b:67:90:b0:28:f5:22:e1:cc:c5:df: 8d:a6:64:56:03:ec:c6:f7:10:e4:12:5a:f5:cc:f5:91:3c:f8: 37:db:73:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af+BHk7uesebc6JgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk MjU5ZmYzMjYtMmVlYy00NzUwLTg1ZWUtZTc1ZmI5OWJkZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGQ10hzdywvNvjExjp5SaFTJdtkqhNf2V2LR fkrAq6QFCVMB3hhjyO3pp2n0ebaZSeiU5dRtHtidZ9VBnn78qe7jO1wEK5K1rJDC r0tV6cXJUlpxHAkcydl6K/A3E8dMLQaZIeVpfwn/QxwEDu7Bn5XqCttW5w8f0nsm PDBXSXeLP4+rbFMjXFnKW2mNpH80XQ3MfqTqIwRGawGkteeCGgJrpJjVBQnBmn1s qkbWXX5AFGJUWaDful29SMocHoI+TlYdtBYRcDBlzCsqLCS8WS1tYsOifrz0PAuN 6XRQ7zd6Fl9tnJYz3gm6+bTOYLm2lgMy/7eB5KGxh+f4trSYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAq2qrYKU/tneS83J6DbKhgClFKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMjFlM2MwMzctMTdkZS0z MTAxLTk2NzAtODM1NDE2MDNhZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi8xRJbs2cdpR7k1RZ2Ekzq1CZZ1XZJ98iTT/n3bjuI2QLEcy3YdHYC Lv+RWtjxAoVlwAhMR2D8MII5SzRqx1zYz6nVTPQ1JxH3g35Im4Kjsqp2oevFLeXo YSW3GiZ5lu2VkN/GSt1BhAyi6VbaSpadt/K5qmS5XJarXOEdXYmlU0H+qBlgmQSy GPngoocSNp+VuI8DZet9xhmmMTuiMnzqOP8woOsJK12tmVw6dTbn9Hf+0aM5ClqL EYYgrvCzIJzmEFgJtGSWcOtFwm2JWoe4ybuJyckkBTCrSMLyJZ9bZ5CwKPUi4czF 342mZFYD7Mb3EOQSWvXM9ZE8+DfbczI= -----END CERTIFICATE-----Generated at Tue Jul 28 18:20:05 2026 by rpki-client