$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa File: 34356c57-8521-34f3-a43c-872918075c40.roa (raw, json) Hash identifier: q1nB+qpNB4Be3u8iugskydLGtbD2t/rybWWWmxl1x6c= Subject key identifier: DB:BC:53:70:36:8A:B6:1B:24:3E:FC:35:31:50:C6:C8:65:27:AF:06 Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Certificate serial: 010D0C9F4328584A51D067CBD7F438CC89D60280 Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 8075 IP address blocks: 138.128.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:67:cb:d7:f4:38:cc:89:d6:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=8d73567c-b03e-4a26-9c81-929f70c5a14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:f8:69:78:9d:c6:3e:d2:ba:03:47:ce:a1: 0e:0e:ac:3f:17:f9:09:8b:a5:2a:ab:52:5b:1a:88: a7:55:17:8a:98:9a:23:ee:a1:aa:b6:c0:a3:df:5f: 2e:3a:17:ab:45:42:d7:f1:f1:6f:30:a2:f6:b5:b8: 26:02:32:ff:bd:f4:4b:ed:f3:36:75:28:14:dd:1c: d2:92:3c:c8:55:60:cd:94:40:91:95:eb:98:26:97: f2:2b:06:c7:c4:09:83:76:ed:03:cb:e3:3d:71:ef: b9:92:1f:fc:51:45:36:7d:de:6f:98:90:3c:f2:46: 4c:71:b9:d2:83:86:a2:5b:bb:f8:f9:2f:fa:fd:8e: a7:b5:b1:4a:37:77:24:b7:0a:b4:88:29:ec:57:ce: 18:a8:5b:78:25:9d:81:57:d9:94:17:7a:88:92:c6: 26:03:84:1f:b6:b4:fe:04:01:10:87:af:97:1b:ad: b4:c8:d2:04:14:1d:7a:67:15:1d:7b:04:96:a3:bc: e3:04:34:a2:f2:fe:d1:88:9b:5e:39:72:56:c7:34: 68:66:90:f9:05:d3:7f:6e:a5:98:11:3a:83:fc:74: 77:ce:4b:bf:89:9a:03:01:1a:10:0f:4e:f3:37:0a: 67:57:4d:d0:0e:d4:90:58:45:92:63:c0:5d:b6:22: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BC:53:70:36:8A:B6:1B:24:3E:FC:35:31:50:C6:C8:65:27:AF:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl X509v3 Authority Key Identifier: keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer sbgp-ipAddrBlock: critical IPv4: 138.128.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:70:9f:0a:5a:70:ef:7f:d2:f9:e2:1c:d6:b4:e6:ff:f3:11: 56:f9:b7:36:1b:2c:d3:b3:67:49:e7:b4:eb:1b:86:05:8e:e4: b7:fb:cf:05:92:02:c2:cb:7c:76:a0:cb:94:71:6a:c6:c0:1b: 51:18:52:49:2d:4d:4f:3a:1f:2e:30:51:8f:c3:3c:40:89:39: 5a:c5:1b:9b:cb:af:a5:bf:f6:aa:2e:8b:f4:c5:54:14:98:c5: 2c:03:fa:0c:65:1e:97:23:b6:d4:f7:a2:1f:96:31:e1:7a:94: c3:88:67:d7:1f:ff:81:04:91:f1:39:f5:98:3a:0f:1a:2c:41: f3:cd:1c:41:37:03:1f:29:30:69:ee:db:ff:c5:34:1d:e4:b2: e8:d2:64:e3:2e:2b:cd:24:35:d7:f0:11:1f:e9:2a:0d:8c:aa: b1:54:71:7b:7c:4c:33:a5:03:90:e6:0e:6c:a4:0a:ab:05:3a: 48:31:5e:61:3e:ce:2d:07:b5:8d:e6:14:18:75:15:a4:7f:8b: 23:f7:06:cf:29:fa:bf:7c:b5:7c:55:43:22:3e:e3:93:2a:8d: 03:49:df:b0:b4:7a:41:08:61:a3:ef:66:10:49:8d:e7:3d:95: a1:77:0c:ee:d3:9a:39:e9:47:65:e3:ac:15:5a:75:21:3a:f5: a1:d7:7c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0GfL1/Q4zInWAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjll OWRkMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk OGQ3MzU2N2MtYjAzZS00YTI2LTljODEtOTI5ZjcwYzVhMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY34aXidxj7SugNHzqEODqw/F/kJi6Uqq1Jb GoinVReKmJoj7qGqtsCj318uOherRULX8fFvMKL2tbgmAjL/vfRL7fM2dSgU3RzS kjzIVWDNlECRleuYJpfyKwbHxAmDdu0Dy+M9ce+5kh/8UUU2fd5vmJA88kZMcbnS g4aiW7v4+S/6/Y6ntbFKN3cktwq0iCnsV84YqFt4JZ2BV9mUF3qIksYmA4QftrT+ BAEQh6+XG620yNIEFB16ZxUdewSWo7zjBDSi8v7RiJteOXJWxzRoZpD5BdN/bqWY ETqD/HR3zku/iZoDARoQD07zNwpnV03QDtSQWEWSY8BdtiIWKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu8U3A2irYbJD78NTFQxshlJ68GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNi Y2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvMzQzNTZjNTctODUyMS0z NGYzLWE0M2MtODcyOTE4MDc1YzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmIzYmNiNDctNWYxOC00NmQzLTli NTAtNjNkNWNiYjllOWRkLzJiM2JjYjQ3LTVmMTgtNDZkMy05YjUwLTYzZDVjYmI5 ZTlkZC5jcmwwHwYDVR0jBBgwFoAUteboBGJM8WceBokEZtHmJS27gq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1 Y2JiOWU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioD6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhwnwpacO9/0vniHNa05v/zEVb5tzYbLNOzZ0nntOsbhgWO5Lf7zwWS AsLLfHagy5RxasbAG1EYUkktTU86Hy4wUY/DPECJOVrFG5vLr6W/9qoui/TFVBSY xSwD+gxlHpcjttT3oh+WMeF6lMOIZ9cf/4EEkfE59Zg6DxosQfPNHEE3Ax8pMGnu 2//FNB3ksujSZOMuK80kNdfwER/pKg2MqrFUcXt8TDOlA5DmDmykCqsFOkgxXmE+ zi0HtY3mFBh1FaR/iyP3Bs8p+r98tXxVQyI+45MqjQNJ37C0ekEIYaPvZhBJjec9 laF3DO7TmjnpR2XjrBVadSE69aHXfEQ= -----END CERTIFICATE-----Generated at Mon Jun 30 19:59:06 2025 by rpki-client