$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa File: ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa (raw, json) Hash identifier: xRCtrCROoDjY4+i30MBrfSsyz/iOBP14OoF8W/aEaAE= Subject key identifier: 6C:CB:0C:6A:B0:C7:D3:5E:48:BE:18:82:B4:BF:7B:42:3C:87:66:4B Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F4328584AA42B7BB9493AD3C224F27C80 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 395437 IP address blocks: 138.43.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:7b:b9:49:3a:d3:c2:24:f2:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=f6157f05-818c-4416-9e8c-9e9d6d0c5c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:87:0a:6e:2e:1b:83:b7:06:62:6b:19:f0: 39:10:96:18:17:8a:fe:f0:b3:65:f9:47:f6:a1:b6: 40:6d:a8:90:1b:75:f7:0c:4f:67:30:27:9a:05:d5: df:b7:0c:b5:92:34:c7:32:f7:75:6d:c1:45:b9:85: 3f:62:14:28:e7:1a:76:a1:b6:8f:a5:b7:b4:0a:6a: 7d:ec:59:ae:73:68:ef:17:96:40:25:5b:36:f6:a0: 97:e3:f9:29:12:97:e5:a9:de:fd:6a:f5:36:fb:ac: 5c:e5:98:90:3e:09:2b:dd:85:a5:d5:b3:90:f9:66: a8:f1:a8:9d:86:5b:19:ac:b1:0c:f6:06:fd:cf:21: 51:64:ea:23:7e:43:29:2d:2f:82:03:1d:c4:64:f6: 41:d8:eb:37:cd:c0:ce:91:76:4b:f0:88:1c:74:7f: c4:4a:c2:69:54:82:88:92:6c:a6:e6:50:49:32:49: 38:8b:2e:fa:ac:5a:80:04:b5:de:76:36:56:5f:f1: 3e:87:48:02:41:d5:3d:39:46:f7:86:be:96:94:ae: 17:53:43:69:4f:bf:eb:2a:a6:ca:9b:2d:90:ad:8a: 3b:f6:10:07:9e:4f:09:b5:58:e8:5f:f9:6d:a3:ec: b0:ce:62:0b:73:b1:fb:29:18:09:7f:81:00:4a:e1: a9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CB:0C:6A:B0:C7:D3:5E:48:BE:18:82:B4:BF:7B:42:3C:87:66:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 138.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:48:d8:d8:24:27:c2:5e:04:2e:1d:8e:6b:4f:77:d1:61:0d: 42:31:fe:9a:2b:1b:1b:72:83:3b:98:2c:ab:fe:7b:2d:a1:8c: ac:0a:9b:d2:45:d6:e7:c4:53:ef:60:2e:db:98:97:61:ef:02: cf:65:a5:5c:d3:26:11:50:cc:e8:17:a2:97:60:f0:db:86:15: a4:13:71:a5:da:b3:9a:5a:0f:9b:78:c4:fd:85:3d:89:a7:6f: 55:38:81:e5:fe:ce:56:e7:2f:51:7e:fb:38:a3:cb:7d:ab:19: 1e:01:e1:cf:36:80:93:ed:cf:d9:70:ed:dd:27:df:45:08:f8: 71:ab:75:16:95:75:d8:f9:b8:48:6e:6b:36:e9:d6:b8:d6:7a: 95:53:b1:99:7f:a4:64:3f:cb:97:13:47:d1:8c:9f:ce:dd:97: 67:18:d3:b8:1c:bd:d8:32:fc:71:ae:cd:ba:f3:19:63:cf:c8: b5:4d:36:ac:fc:1e:56:e8:e2:f0:5e:12:6e:eb:0a:a9:76:51: 11:a2:f9:1b:8f:44:29:b5:f4:e9:75:66:9d:0e:e7:50:d9:46: 64:68:f7:1a:3c:d8:2c:fd:e6:2c:e0:90:bb:65:91:1d:82:f2: cc:d0:7c:0d:d2:d1:47:12:19:f6:7b:01:a1:07:81:c9:fa:93: df:f0:bd:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3u5STrTwiTyfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjYxNTdmMDUtODE4Yy00NDE2LTllOGMtOWU5ZDZkMGM1YzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP+HCm4uG4O3BmJrGfA5EJYYF4r+8LNl+Uf2 obZAbaiQG3X3DE9nMCeaBdXftwy1kjTHMvd1bcFFuYU/YhQo5xp2obaPpbe0Cmp9 7Fmuc2jvF5ZAJVs29qCX4/kpEpflqd79avU2+6xc5ZiQPgkr3YWl1bOQ+Wao8aid hlsZrLEM9gb9zyFRZOojfkMpLS+CAx3EZPZB2Os3zcDOkXZL8IgcdH/ESsJpVIKI kmym5lBJMkk4iy76rFqABLXedjZWX/E+h0gCQdU9OUb3hr6WlK4XU0NpT7/rKqbK my2QrYo79hAHnk8JtVjoX/lto+ywzmILc7H7KRgJf4EASuGpRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzLDGqwx9NeSL4YgrS/e0I8h2ZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvYmE5YzVkMDYtMTNkMS0z ZmY3LTlkMzAtOTUxYTliMTRjZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiiuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5I2NgkJ8JeBC4djmtPd9FhDUIx/porGxtygzuYLKv+ey2hjKwKm9JF 1ufEU+9gLtuYl2HvAs9lpVzTJhFQzOgXopdg8NuGFaQTcaXas5paD5t4xP2FPYmn b1U4geX+zlbnL1F++zijy32rGR4B4c82gJPtz9lw7d0n30UI+HGrdRaVddj5uEhu azbp1rjWepVTsZl/pGQ/y5cTR9GMn87dl2cY07gcvdgy/HGuzbrzGWPPyLVNNqz8 Hlbo4vBeEm7rCql2URGi+RuPRCm19Ol1Zp0O51DZRmRo9xo82Cz95izgkLtlkR2C 8szQfA3S0UcSGfZ7AaEHgcn6k9/wveA= -----END CERTIFICATE-----Generated at Tue Aug 5 08:17:15 2025 by rpki-client