$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa File: d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa (raw, json) Hash identifier: WxuWDb6PYtK2WFeAkBfdyzeSzvi9XAP/Gccigr01/PY= Subject key identifier: A3:DC:DE:A4:6F:67:AC:16:65:BE:C9:2E:CD:AB:72:55:32:6D:9F:57 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584A14656D0320656019F3657100 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 396905 IP address blocks: 138.43.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:6d:03:20:65:60:19:f3:65:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=b96911ed-0c39-4467-b484-07413dd82e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bd:4f:d5:33:db:88:f2:f8:58:10:f3:55:fa: d0:ec:64:d5:d2:3c:24:7c:5a:28:cf:e4:73:86:70: ed:d5:80:1a:37:04:58:f9:e3:f9:05:07:d0:74:29: d7:ec:f9:a5:01:82:cc:f3:d9:99:57:20:52:45:98: 90:2b:c3:da:c5:06:20:6d:12:3d:cd:f9:49:c9:f4: 1a:b7:80:8f:66:85:6a:b0:5d:46:a4:f5:f5:7a:cd: 28:de:6a:1b:cf:e1:8e:6a:31:e1:4a:14:1c:f3:c3: 2f:a6:51:2c:96:03:a4:ea:a9:5b:72:6a:52:a5:40: 93:09:9f:f5:7f:6e:1e:1d:f5:0e:c9:04:3f:30:54: 6b:52:96:be:2f:03:11:ac:fd:55:cc:da:d9:33:b7: 02:bd:64:58:96:2d:6a:2f:99:be:6c:ff:5e:d3:cf: 06:41:e1:f4:62:c7:bc:1d:5f:89:14:f1:bf:bf:98: e5:7b:40:90:af:66:b0:e2:c3:70:02:72:8a:1a:61: 52:98:c7:73:9d:1d:49:c8:18:08:cf:7c:1f:f4:a1: 23:00:c4:2c:bb:95:d5:4a:8f:92:01:2b:85:21:61: ae:5b:d6:7c:e2:87:49:65:87:90:b3:29:17:ce:4f: e7:eb:de:53:db:25:52:7a:21:95:1d:e7:46:06:9b: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DC:DE:A4:6F:67:AC:16:65:BE:C9:2E:CD:AB:72:55:32:6D:9F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 138.43.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ae:b0:7d:94:c9:95:bf:3d:d1:50:89:4a:51:ac:03:cb:30: 16:9b:03:27:43:a4:47:c2:1f:69:c8:f9:d1:4d:57:21:c2:7f: 92:89:78:cc:50:46:a1:98:ca:6a:c1:bd:14:52:4e:b0:63:28: 98:a9:7b:ee:2b:0c:dd:ef:e3:a9:2a:1e:1c:3b:f9:54:d8:d8: 4c:e4:13:7a:20:e6:50:ab:04:0c:72:f5:28:66:49:47:07:a8: e4:78:68:9e:95:25:3a:31:d3:ba:bb:5b:18:9a:cb:1a:eb:de: 77:0d:ff:04:e2:b0:7a:a8:c9:8f:ba:47:66:4c:aa:23:16:b1: d1:49:da:8e:cc:dc:b5:41:18:b3:87:38:07:28:45:49:30:cb: c3:56:e8:2a:79:bc:2a:7a:50:45:73:65:91:ba:30:f6:1b:7a: 4b:5b:70:36:2e:35:e5:0b:b0:b0:5f:7c:99:eb:4a:14:ba:4e: 34:f0:8d:41:ae:4a:5d:27:b4:1b:12:00:64:e9:14:b7:d9:e9: b2:d7:07:f9:8b:71:e4:6d:2c:2a:27:45:c5:91:da:78:9a:ff: 47:69:81:56:3a:31:cd:8f:ff:0b:1a:b9:13:ec:cc:b6:6b:b0: 29:26:e4:f8:e1:01:c3:10:ec:6c:e6:06:9d:ad:96:47:fb:eb: 5e:75:f8:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZW0DIGVgGfNlcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk Yjk2OTExZWQtMGMzOS00NDY3LWI0ODQtMDc0MTNkZDgyZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr1P1TPbiPL4WBDzVfrQ7GTV0jwkfFooz+Rz hnDt1YAaNwRY+eP5BQfQdCnX7PmlAYLM89mZVyBSRZiQK8PaxQYgbRI9zflJyfQa t4CPZoVqsF1GpPX1es0o3mobz+GOajHhShQc88MvplEslgOk6qlbcmpSpUCTCZ/1 f24eHfUOyQQ/MFRrUpa+LwMRrP1VzNrZM7cCvWRYli1qL5m+bP9e088GQeH0Yse8 HV+JFPG/v5jle0CQr2aw4sNwAnKKGmFSmMdznR1JyBgIz3wf9KEjAMQsu5XVSo+S ASuFIWGuW9Z84odJZYeQsykXzk/n695T2yVSeiGVHedGBpsZvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPc3qRvZ6wWZb7JLs2rclUybZ9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvZDNlODVjMGUtZDQ2NS0z YmMxLTk1YzQtY2VmZTBhYjNlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiis8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGusH2UyZW/PdFQiUpRrAPLMBabAydDpEfCH2nI+dFNVyHCf5KJeMxQ RqGYymrBvRRSTrBjKJipe+4rDN3v46kqHhw7+VTY2EzkE3og5lCrBAxy9ShmSUcH qOR4aJ6VJTox07q7Wxiayxrr3ncN/wTisHqoyY+6R2ZMqiMWsdFJ2o7M3LVBGLOH OAcoRUkwy8NW6Cp5vCp6UEVzZZG6MPYbektbcDYuNeULsLBffJnrShS6TjTwjUGu Sl0ntBsSAGTpFLfZ6bLXB/mLceRtLConRcWR2nia/0dpgVY6Mc2P/wsauRPszLZr sCkm5PjhAcMQ7GzmBp2tlkf76151+K0= -----END CERTIFICATE-----Generated at Sun Jun 15 17:23:23 2025 by rpki-client