$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa File: ea556a40-a873-3ed9-aa90-580d0a9fa927.roa (raw, json) Hash identifier: Y5Tv86mLdMJ773SpOXN9UDeIsXOLQUc0kbx7uftp92s= Subject key identifier: 9A:0A:73:DA:4B:FA:24:79:C7:02:7D:55:7F:CA:C6:45:4A:53:A4:90 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F4328584AA160D0E7DBD8F939E5C26B90 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 395437 IP address blocks: 138.43.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d0:e7:db:d8:f9:39:e5:c2:6b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=bd505c36-d45b-444b-86b5-340f32bb044b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4b:95:ba:01:41:fb:30:9b:a9:ec:79:81:1f: 7c:dd:fa:dd:80:30:91:f2:3f:11:cb:3b:4b:54:84: 3b:11:e7:81:04:66:53:e9:e4:32:96:21:07:bb:f0: 82:5c:67:9f:fd:31:25:a1:16:77:f2:2a:7d:00:51: e1:3d:86:fb:79:12:5b:6a:11:99:8d:36:22:4b:75: 15:bd:00:be:59:82:d9:a3:71:47:d1:8f:dc:22:cf: e6:63:08:8e:e8:0c:e3:46:93:20:f7:34:b2:90:d3: 70:c0:9a:05:73:dc:ef:41:ae:c0:5e:a5:ab:ef:7c: 60:fa:4b:72:69:b9:7a:f4:8a:8b:57:5f:43:b3:b9: bb:52:b2:fd:a9:8c:0d:27:68:e3:fd:72:b5:49:e0: 0b:1a:59:a5:37:4c:3f:2d:10:d3:d7:47:52:22:78: 16:bb:55:2b:72:95:76:c9:11:00:5d:a4:b0:cb:24: 16:23:29:37:e3:fc:ba:58:b2:d9:49:5a:67:be:e2: 57:36:9d:cd:a2:df:6a:5d:99:b2:9b:f5:1a:c6:3a: 3a:0c:4e:ab:a1:bd:3a:b6:ca:97:0b:45:b1:ad:f8: 6b:d3:60:df:1f:48:7d:3a:0b:6c:9e:db:de:22:3f: 33:24:c1:02:24:39:17:73:c5:3c:bd:a4:a1:f0:f6: d2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0A:73:DA:4B:FA:24:79:C7:02:7D:55:7F:CA:C6:45:4A:53:A4:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 138.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6d:1a:0a:26:71:37:fb:b6:e8:5d:f9:9d:bb:79:ed:c2:fe: a5:fd:69:26:14:af:db:1e:9d:5f:92:a3:f7:5f:91:73:71:88: df:cc:b6:84:b1:d9:7c:81:5a:f2:70:e1:45:38:9f:f6:b0:3f: 36:95:75:ab:f2:c7:30:f6:11:03:00:09:7d:b0:0e:ea:67:c5: 69:18:0e:6c:d4:4f:36:ec:c3:99:dd:a8:fa:27:fd:33:f4:16: 2e:6a:0d:97:6c:47:24:4d:86:5e:fa:fe:0b:41:98:95:5a:8d: 1f:55:e4:07:25:92:12:dd:0c:6f:89:8c:51:66:ca:c5:30:d5: dd:68:08:b9:9c:eb:2a:05:a2:ea:59:b1:df:cd:b8:18:f6:2d: 7b:fa:85:83:d2:7f:50:f5:82:fa:f4:c1:82:4c:00:09:f8:60: 94:00:78:d3:c5:38:bf:d3:e4:32:7c:c0:73:2f:d6:e5:47:db: 73:8e:94:c6:00:be:12:49:4d:6c:91:46:7f:14:7d:96:e7:29: 4d:8b:a0:27:f6:64:4e:b1:f0:5e:08:ff:01:97:bf:8e:f9:d3: e4:d3:01:d1:2b:08:56:07:42:aa:c5:11:8a:22:90:01:aa:7c: f7:db:92:11:9b:d6:11:91:b6:3a:1f:99:96:1f:13:9b:6d:1c: 0e:5d:7f:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNDn29j5OeXCa5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YmQ1MDVjMzYtZDQ1Yi00NDRiLTg2YjUtMzQwZjMyYmIwNDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0uVugFB+zCbqex5gR983frdgDCR8j8RyztL VIQ7EeeBBGZT6eQyliEHu/CCXGef/TEloRZ38ip9AFHhPYb7eRJbahGZjTYiS3UV vQC+WYLZo3FH0Y/cIs/mYwiO6AzjRpMg9zSykNNwwJoFc9zvQa7AXqWr73xg+kty abl69IqLV19Ds7m7UrL9qYwNJ2jj/XK1SeALGlmlN0w/LRDT10dSIngWu1UrcpV2 yREAXaSwyyQWIyk34/y6WLLZSVpnvuJXNp3Not9qXZmym/Uaxjo6DE6rob06tsqX C0Wxrfhr02DfH0h9OgtsntveIj8zJMECJDkXc8U8vaSh8PbSeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoKc9pL+iR5xwJ9VX/KxkVKU6SQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvZWE1NTZhNDAtYTg3My0z ZWQ5LWFhOTAtNTgwZDBhOWZhOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiiuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFltGgomcTf7tuhd+Z27ee3C/qX9aSYUr9senV+So/dfkXNxiN/MtoSx 2XyBWvJw4UU4n/awPzaVdavyxzD2EQMACX2wDupnxWkYDmzUTzbsw5ndqPon/TP0 Fi5qDZdsRyRNhl76/gtBmJVajR9V5AclkhLdDG+JjFFmysUw1d1oCLmc6yoFoupZ sd/NuBj2LXv6hYPSf1D1gvr0wYJMAAn4YJQAeNPFOL/T5DJ8wHMv1uVH23OOlMYA vhJJTWyRRn8UfZbnKU2LoCf2ZE6x8F4I/wGXv4750+TTAdErCFYHQqrFEYoikAGq fPfbkhGb1hGRtjofmZYfE5ttHA5dfwU= -----END CERTIFICATE-----Generated at Tue Aug 5 23:06:10 2025 by rpki-client