$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa File: ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa (raw, json) Hash identifier: g9W9prBjFFHDoq3zp42O/wZMbQUn+YnBW5be7vKN94M= Subject key identifier: E3:C3:41:40:B0:25:C8:B7:74:8A:ED:71:80:6C:49:77:76:85:6B:B4 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F43285849C4D4B87969E1022647680280 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 395437 IP address blocks: 138.43.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:b8:79:69:e1:02:26:47:68:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=6f6c245b-f4df-45d6-8e8a-13bbe0e0b839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:59:74:74:b8:6b:f3:20:9e:15:af:5e:6d: c0:34:f8:d9:ce:f8:b0:eb:4f:93:09:de:f0:e0:d8: 1d:77:ca:69:9a:22:db:8c:2b:29:c8:09:5d:df:b9: 2c:d5:51:e9:ae:de:7c:9a:d3:08:93:2f:b8:2f:f0: b8:58:a3:cf:21:93:27:21:61:f3:7c:d6:17:4d:e1: 83:14:6c:45:d7:bb:fa:b0:e6:14:d6:18:c3:00:21: 95:c2:2f:8a:e1:99:f6:f7:dc:ca:3c:f9:cf:4f:74: 1e:01:c1:4b:b3:95:9f:fc:86:77:5c:41:a6:b1:76: 5c:88:db:1c:ca:40:f0:6a:9e:24:fb:0b:7f:a9:43: dd:2f:7c:98:e6:ca:b7:a9:4a:0a:99:a6:8f:ba:a2: a9:e0:bd:ea:fb:f7:e1:db:7f:52:aa:fb:f9:cd:68: 8b:47:f0:04:db:0d:0f:c7:30:6f:46:e2:2a:f0:e6: c7:76:5c:b8:88:81:fd:61:bb:82:74:b1:2f:c8:59: c3:85:7a:9b:f4:12:e5:e8:4c:e6:24:a4:34:dd:7b: 12:d9:98:b0:0d:3a:fc:a9:9b:d6:79:69:b7:78:4a: 73:fd:ee:5a:d2:2d:6e:3f:14:a7:3f:97:4a:49:aa: 46:4c:04:99:d0:36:5d:24:eb:4b:15:96:52:6a:b8: f0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C3:41:40:B0:25:C8:B7:74:8A:ED:71:80:6C:49:77:76:85:6B:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 138.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:70:bc:3f:5a:8c:b6:63:a9:ae:70:62:98:16:44:be:9c:54: b1:2e:91:8f:95:7c:5f:37:9e:7a:c3:72:63:40:6f:29:4b:01: 0c:24:11:7b:cf:c2:e8:a3:9a:ed:6c:34:9f:9d:1e:3d:d2:9e: ed:cb:7c:0f:03:b8:81:3d:a7:33:d3:40:b6:dd:f6:02:23:7f: 04:8c:9b:46:9e:3c:dd:01:92:89:ae:8c:52:f5:0a:de:a5:86: 92:df:ae:e4:01:6f:89:8e:52:df:64:45:bb:99:0f:67:38:48: d1:18:c4:d9:b9:93:2d:90:93:f2:bc:6f:d8:2f:36:f7:0e:4b: 10:84:75:de:63:0d:b3:0c:40:3c:ac:22:60:0f:ae:23:4c:22: a1:01:c0:d9:dc:bd:23:90:81:51:73:6c:a8:93:92:df:f2:38: aa:ee:30:79:ed:4a:12:37:de:da:c7:7f:86:df:f4:08:24:38: ed:93:61:1d:41:4f:53:c0:c4:ea:59:69:7f:ee:eb:1a:8e:c7: 6b:4c:27:e5:68:65:7e:4e:36:b3:27:3c:d2:2b:5c:1c:2e:ea: 66:a6:4b:b6:a4:46:26:21:93:85:bf:4c:11:9d:7b:c5:9a:c9: 01:fa:d0:66:27:6d:4f:e4:e7:5f:b8:a1:19:37:38:e0:08:41: fb:ca:d4:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1Lh5aeECJkdoAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NmY2YzI0NWItZjRkZi00NWQ2LThlOGEtMTNiYmUwZTBiODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/9ZdHS4a/MgnhWvXm3ANPjZzviw60+TCd7w 4Ngdd8ppmiLbjCspyAld37ks1VHprt58mtMIky+4L/C4WKPPIZMnIWHzfNYXTeGD FGxF17v6sOYU1hjDACGVwi+K4Zn299zKPPnPT3QeAcFLs5Wf/IZ3XEGmsXZciNsc ykDwap4k+wt/qUPdL3yY5sq3qUoKmaaPuqKp4L3q+/fh239Sqvv5zWiLR/AE2w0P xzBvRuIq8ObHdly4iIH9YbuCdLEvyFnDhXqb9BLl6EzmJKQ03XsS2ZiwDTr8qZvW eWm3eEpz/e5a0i1uPxSnP5dKSapGTASZ0DZdJOtLFZZSarjwgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPDQUCwJci3dIrtcYBsSXd2hWu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvYmE5YzVkMDYtMTNkMS0z ZmY3LTlkMzAtOTUxYTliMTRjZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiiuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlwvD9ajLZjqa5wYpgWRL6cVLEukY+VfF83nnrDcmNAbylLAQwkEXvP wuijmu1sNJ+dHj3Snu3LfA8DuIE9pzPTQLbd9gIjfwSMm0aePN0BkomujFL1Ct6l hpLfruQBb4mOUt9kRbuZD2c4SNEYxNm5ky2Qk/K8b9gvNvcOSxCEdd5jDbMMQDys ImAPriNMIqEBwNncvSOQgVFzbKiTkt/yOKruMHntShI33trHf4bf9AgkOO2TYR1B T1PAxOpZaX/u6xqOx2tMJ+VoZX5ONrMnPNIrXBwu6mamS7akRiYhk4W/TBGde8Wa yQH60GYnbU/k51+4oRk3OOAIQfvK1A0= -----END CERTIFICATE-----Generated at Sun Jun 15 15:25:07 2025 by rpki-client