$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/98fc522a-5973-3499-b306-48af0a534fc7.roa File: 98fc522a-5973-3499-b306-48af0a534fc7.roa (raw, json) Hash identifier: V/Zv5qiNrRglWT6CI9DgbSDFN5a4qZJLJaUBhNC+H1g= Subject key identifier: E6:89:05:E8:6E:3F:AB:81:71:3E:98:E2:90:A1:3A:08:C2:A8:45:22 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A383EBFB56F7D8A3C3EF68400 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/98fc522a-5973-3499-b306-48af0a534fc7.roa Signing time: Tue 17 Jun 2025 09:12:28 +0000 ROA not before: Tue 17 Jun 2025 09:12:28 +0000 ROA not after: Mon 15 Sep 2025 09:12:28 +0000 asID: 7029 IP address blocks: 138.229.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:3e:bf:b5:6f:7d:8a:3c:3e:f6:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 17 09:12:28 2025 GMT Not After : Sep 15 09:12:28 2025 GMT Subject: CN=ada161c9-f900-499d-8b8e-1784bde1ecfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:01:5e:f7:b8:38:29:a3:fa:77:0b:de:fd: f8:80:03:98:25:b5:01:a4:e0:7c:e8:95:cb:7e:23: 85:5e:e5:4f:20:a5:0c:24:56:82:1a:16:05:68:b3: e5:0e:82:45:bd:b5:bd:3e:45:81:3d:e5:61:76:ad: 94:9b:ae:6f:7e:09:68:bd:4a:44:60:59:34:9c:78: b4:69:59:90:fb:7f:aa:0c:1a:2b:e4:14:0c:c2:cc: 77:1e:76:5d:80:97:b3:4f:d2:cc:06:01:2f:3c:f9: 74:52:b9:27:59:95:a1:40:b7:b7:64:e5:97:85:93: f4:32:7e:54:f3:73:26:1f:74:b2:37:f9:0e:af:28: 33:3c:07:3f:bd:65:78:e1:6d:de:2c:a3:ae:ad:a5: 07:07:2f:bb:cb:7f:c2:b5:e9:70:b1:1b:64:fd:df: e1:06:7a:67:09:02:4a:d7:65:fd:ca:17:bd:cf:26: 24:20:25:52:2e:a7:0c:8d:01:f8:52:77:7a:6f:34: 57:a9:c7:61:47:94:b7:cf:fb:4a:98:f2:5d:fe:3b: 88:6e:81:15:f9:99:53:d4:bb:61:a9:2d:05:70:b0: 2b:4d:cf:8b:76:9b:32:e4:73:7e:85:12:e1:00:a9: 0c:68:67:2c:5f:63:8d:20:9e:3c:55:b9:f3:97:0f: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:89:05:E8:6E:3F:AB:81:71:3E:98:E2:90:A1:3A:08:C2:A8:45:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/98fc522a-5973-3499-b306-48af0a534fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 138.229.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:68:bf:c1:0c:57:9f:a1:77:dd:f1:36:be:17:30:49:66:a7: 82:c1:ba:28:04:bd:f6:fe:74:5c:23:24:3d:2a:7d:9f:c8:01: 11:ec:df:6f:d7:59:eb:98:81:94:53:49:75:a9:22:22:6c:0e: 23:5d:b9:74:5a:76:a8:c6:e0:f9:f4:fe:a0:cb:78:cf:aa:88: 60:a7:b1:7b:3f:42:0d:d7:c5:8d:7b:c7:2e:c1:1c:f7:05:36: 1c:4e:4f:63:69:20:88:98:63:3e:f9:c4:07:80:ea:89:b3:98: 76:30:1f:4d:bd:e1:ac:24:9c:eb:ec:bd:2e:0b:40:83:b4:42: 40:0d:93:12:02:ff:a8:32:35:c2:a4:7f:e2:8a:9e:30:f7:54: 6d:95:c1:1c:2d:80:c6:fd:c1:e1:67:f2:23:f3:e3:98:8e:42: 4e:1d:94:0b:3b:29:65:62:62:73:76:0b:90:3b:d2:cf:9c:57: 6c:e1:c3:18:0d:83:54:83:d5:63:c9:bc:ca:02:84:9f:8e:36: 0e:cf:47:19:9a:9a:e2:dc:08:f3:7d:77:e5:f2:c5:2c:3a:c2: 45:5e:46:44:16:08:17:47:84:21:f5:c8:b6:c4:34:96:e1:97: 09:b3:0e:f8:1a:70:ef:9e:af:99:2f:76:88:4e:a6:47:23:70: 29:ba:23:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo4Pr+1b32KPD72hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYxNzA5MTIyOFoXDTI1MDkxNTA5MTIyOFowLzEtMCsGA1UEAxMk YWRhMTYxYzktZjkwMC00OTlkLThiOGUtMTc4NGJkZTFlY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkYBXve4OCmj+ncL3v34gAOYJbUBpOB86JXL fiOFXuVPIKUMJFaCGhYFaLPlDoJFvbW9PkWBPeVhdq2Um65vfglovUpEYFk0nHi0 aVmQ+3+qDBor5BQMwsx3HnZdgJezT9LMBgEvPPl0UrknWZWhQLe3ZOWXhZP0Mn5U 83MmH3SyN/kOrygzPAc/vWV44W3eLKOuraUHBy+7y3/CtelwsRtk/d/hBnpnCQJK 12X9yhe9zyYkICVSLqcMjQH4Und6bzRXqcdhR5S3z/tKmPJd/juIboEV+ZlT1Lth qS0FcLArTc+Ldpsy5HN+hRLhAKkMaGcsX2ONIJ48Vbnzlw9z7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaJBehuP6uBcT6Y4pChOgjCqEUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOThmYzUyMmEtNTk3My0z NDk5LWIzMDYtNDhhZjBhNTM0ZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5ov8EMV5+hd93xNr4XMElmp4LBuigEvfb+dFwjJD0qfZ/IARHs32/X WeuYgZRTSXWpIiJsDiNduXRadqjG4Pn0/qDLeM+qiGCnsXs/Qg3XxY17xy7BHPcF NhxOT2NpIIiYYz75xAeA6omzmHYwH0294awknOvsvS4LQIO0QkANkxIC/6gyNcKk f+KKnjD3VG2VwRwtgMb9weFn8iPz45iOQk4dlAs7KWViYnN2C5A70s+cV2zhwxgN g1SD1WPJvMoChJ+ONg7PRxmamuLcCPN9d+XyxSw6wkVeRkQWCBdHhCH1yLbENJbh lwmzDvgacO+er5kvdohOpkcjcCm6I/c= -----END CERTIFICATE-----Generated at Thu Jun 19 15:07:10 2025 by rpki-client