$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65d9eda1-4964-3bc3-83ea-56e66f4e9516.roa File: 65d9eda1-4964-3bc3-83ea-56e66f4e9516.roa (raw, json) Hash identifier: Wp+TA22pEypOXMPPwhgqpunrdbYNgLCFy+9X7ahnVSk= Subject key identifier: 1B:5C:B9:DD:12:C1:BF:D4:DB:13:63:EF:0C:5A:0E:B8:22:81:24:63 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F3CE2752B38A05884E9BFC480 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65d9eda1-4964-3bc3-83ea-56e66f4e9516.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 138.229.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:75:2b:38:a0:58:84:e9:bf:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=8e970bea-1955-4c2e-b7fe-69cf2b432c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e7:50:2d:89:7f:2e:0b:7c:98:d3:1b:d4:67: 26:e4:f6:26:af:43:6c:ef:4d:27:e7:39:a4:aa:33: b1:50:f0:07:7b:71:bb:43:f8:d5:66:53:5d:17:4b: f0:52:10:67:79:28:77:9b:47:7b:5a:5b:b0:a7:6c: ea:cc:dd:d6:e5:2a:72:d5:57:cc:c9:86:af:e7:84: 45:05:2e:6a:aa:fe:2b:a9:04:77:10:57:a0:c2:e6: a7:32:b0:85:a1:20:5b:cd:e4:b9:31:2e:65:75:15: 66:16:39:47:69:43:ec:a1:02:73:40:da:a6:8c:1a: d3:ad:37:3e:b7:a3:2a:0e:2e:16:77:f4:bd:85:6f: ee:33:4a:f9:d7:ca:ff:99:fc:9b:49:c0:ee:6b:7a: 26:ef:53:92:ed:98:71:09:a0:4f:60:16:17:00:44: 33:6f:46:73:f4:c8:7e:a0:8c:9d:92:0d:bc:c2:03: 6c:8d:a8:8d:0d:ec:62:aa:5c:86:f8:6c:b7:14:15: e9:c8:31:4f:b2:d2:f2:bc:81:43:09:ef:f6:e9:64: bf:2f:3a:fa:37:40:d9:13:fd:96:86:91:e8:1c:fa: 3a:d6:0c:72:bf:00:5f:31:b0:3c:cf:c9:8e:ba:32: 3f:5e:37:16:50:9f:4e:28:e8:da:ed:7f:70:dd:d3: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5C:B9:DD:12:C1:BF:D4:DB:13:63:EF:0C:5A:0E:B8:22:81:24:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65d9eda1-4964-3bc3-83ea-56e66f4e9516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ca:2f:36:3e:4b:df:a4:81:0e:f3:83:e6:ab:a8:bf:88:b1: 45:22:c9:bd:7b:b5:3e:65:38:12:a8:ce:90:03:9a:74:47:6f: fd:c4:df:68:fb:70:63:8d:39:f4:ed:7e:33:df:8e:31:3c:e7: b3:dd:d0:c5:ee:51:36:7f:b2:f4:27:53:6f:aa:bb:2c:a5:81: 37:b1:e3:8b:f2:f9:d5:63:6a:9f:bd:38:e4:db:91:c0:f5:3c: ec:ef:9c:99:07:9b:04:83:27:eb:11:a5:85:fa:5c:98:4c:20: 0d:d6:64:59:83:81:15:22:55:fd:fc:07:ef:5c:f1:e5:3b:88: 0c:13:42:85:8b:25:d2:dc:1b:b3:c8:64:61:2a:60:b5:9b:ca: eb:4c:b0:62:b1:6f:ad:c2:d3:0d:31:f5:34:3a:e6:59:f7:5d: 39:ac:6a:b8:bc:a4:29:c5:59:c8:93:81:0e:56:17:45:a7:8f: 9d:6d:91:22:cc:72:c6:48:ab:2d:34:fd:9c:0f:ff:f7:bc:6d: c9:3e:f8:16:c8:b8:9d:aa:9e:35:ad:04:93:2b:b9:a6:70:70: 2f:dc:36:d4:9c:b7:0c:38:bb:0d:64:2e:43:47:98:ba:52:2b: f9:28:0b:c4:d7:1d:44:81:1e:67:a0:8b:4d:20:27:c1:e9:d1: b3:38:d9:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884nUrOKBYhOm/xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OGU5NzBiZWEtMTk1NS00YzJlLWI3ZmUtNjljZjJiNDMyYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgedQLYl/Lgt8mNMb1Gcm5PYmr0Ns700n5zmk qjOxUPAHe3G7Q/jVZlNdF0vwUhBneSh3m0d7Wluwp2zqzN3W5Spy1VfMyYav54RF BS5qqv4rqQR3EFegwuanMrCFoSBbzeS5MS5ldRVmFjlHaUPsoQJzQNqmjBrTrTc+ t6MqDi4Wd/S9hW/uM0r518r/mfybScDua3om71OS7ZhxCaBPYBYXAEQzb0Zz9Mh+ oIydkg28wgNsjaiNDexiqlyG+Gy3FBXpyDFPstLyvIFDCe/26WS/Lzr6N0DZE/2W hpHoHPo61gxyvwBfMbA8z8mOujI/XjcWUJ9OKOja7X9w3dPs1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtcud0Swb/U2xNj7wxaDrgigSRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjVkOWVkYTEtNDk2NC0z YmMzLTgzZWEtNTZlNjZmNGU5NTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLKLzY+S9+kgQ7zg+arqL+IsUUiyb17tT5lOBKozpADmnRHb/3E32j7 cGONOfTtfjPfjjE857Pd0MXuUTZ/svQnU2+quyylgTex44vy+dVjap+9OOTbkcD1 POzvnJkHmwSDJ+sRpYX6XJhMIA3WZFmDgRUiVf38B+9c8eU7iAwTQoWLJdLcG7PI ZGEqYLWbyutMsGKxb63C0w0x9TQ65ln3XTmsari8pCnFWciTgQ5WF0Wnj51tkSLM csZIqy00/ZwP//e8bck++BbIuJ2qnjWtBJMruaZwcC/cNtSctww4uw1kLkNHmLpS K/koC8TXHUSBHmegi00gJ8Hp0bM42Qc= -----END CERTIFICATE-----Generated at Tue Sep 22 06:20:26 2026 by rpki-client