$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa File: 82a59d09-a68a-3b74-821f-acd3c06dab3a.roa (raw, json) Hash identifier: Qbj+Sm934asuKWJM5jBgQJNM9g2Mn+omG9OCCTs26I4= Subject key identifier: F4:AD:60:88:F5:91:F7:AD:50:40:A1:93:8B:58:10:66:F0:78:07:EC Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Certificate serial: 010D0C9F4328584A4F05C72B97241E1B394E9280 Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 8075 IP address blocks: 138.128.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:c7:2b:97:24:1e:1b:39:4e:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=7f584538-9a2b-4030-af25-a3041cc6398e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:a0:7b:5a:ad:fe:5a:a5:cf:32:11:fd:2e: 23:94:e1:c9:f5:fc:4a:b0:6d:6a:b1:97:67:07:7b: f7:90:6d:72:52:11:a0:c9:d8:54:58:16:4f:63:a1: 6b:d5:e9:e6:f7:84:3c:0a:ec:19:80:30:ed:13:91: f4:71:88:d4:12:28:2e:39:e3:d5:fc:a6:69:ff:e0: 8d:4e:f7:87:9a:e1:43:c2:7e:7a:83:9e:44:b1:cd: 72:a7:88:ff:75:64:91:eb:b9:b5:3e:76:29:c5:26: 25:96:e9:71:96:3e:c8:ff:0d:cb:a4:7b:8f:16:08: e3:cf:d6:cd:e8:46:ce:3c:da:c0:8b:83:27:48:1e: 37:ca:6a:23:a7:1d:26:f2:fa:87:da:1c:3e:ee:fd: aa:56:59:39:a9:3b:a9:48:ca:0d:e4:d5:c8:8f:68: 33:16:aa:cb:f6:17:5d:65:c8:40:ee:56:41:a9:56: a6:ae:d8:ae:6e:4a:a9:65:88:f3:41:da:58:02:41: a2:83:0f:0f:2a:a2:6f:54:50:36:9c:3f:24:18:e3: 2c:b4:b7:d8:47:70:fe:de:a5:8b:46:ac:55:4a:bf: 29:b0:d1:64:95:03:4b:92:aa:97:27:be:98:2c:4c: 23:c0:2f:4a:48:97:bf:a2:2a:29:ee:af:c9:92:a1: f9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AD:60:88:F5:91:F7:AD:50:40:A1:93:8B:58:10:66:F0:78:07:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/82a59d09-a68a-3b74-821f-acd3c06dab3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl X509v3 Authority Key Identifier: keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer sbgp-ipAddrBlock: critical IPv4: 138.128.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:75:5a:d7:97:28:d8:2e:25:13:ba:20:c5:6f:d9:fd:c2:68: 42:fe:24:bd:95:52:17:9c:96:08:95:56:95:54:c4:c7:46:60: fc:4d:a1:fd:8e:5a:db:17:67:c3:40:db:bf:2f:6b:aa:fb:9e: 92:b0:dd:e6:c5:69:e4:48:76:f0:54:a9:76:72:e1:e7:7f:fb: 66:15:62:06:89:ba:32:c1:e2:ff:5b:cb:e3:df:e6:10:18:f4: ef:40:71:a4:16:e7:09:0b:c0:d4:3e:05:1a:5d:dd:34:15:47: 44:77:f7:27:20:bf:de:71:54:be:05:b9:1c:13:30:7d:50:66: 12:e1:98:ed:9a:f3:6c:a9:47:b8:88:ce:a0:74:c8:23:b4:7b: 0b:ad:65:97:dd:b2:ed:8a:fe:6b:f6:9c:8e:c6:fe:18:d1:49: 5c:d4:e5:ed:ee:91:17:9d:51:0d:7f:d8:a2:52:51:c9:36:c0: 95:cb:a9:30:b4:29:58:28:07:41:f3:14:26:02:e3:83:50:4e: ac:72:fd:9c:30:e4:da:ba:6e:fc:4d:aa:c2:01:b5:9c:d4:da: bb:d0:dc:68:5d:d2:e5:48:18:f8:6e:43:8a:01:bc:fb:7c:f6: 83:bb:6e:ea:05:31:29:7d:f3:5d:12:40:ea:79:46:a0:d0:65: 9b:b2:cb:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBccrlyQeGzlOkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjll OWRkMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk N2Y1ODQ1MzgtOWEyYi00MDMwLWFmMjUtYTMwNDFjYzYzOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliige1qt/lqlzzIR/S4jlOHJ9fxKsG1qsZdn B3v3kG1yUhGgydhUWBZPY6Fr1enm94Q8CuwZgDDtE5H0cYjUEiguOePV/KZp/+CN TveHmuFDwn56g55Esc1yp4j/dWSR67m1PnYpxSYllulxlj7I/w3LpHuPFgjjz9bN 6EbOPNrAi4MnSB43ymojpx0m8vqH2hw+7v2qVlk5qTupSMoN5NXIj2gzFqrL9hdd ZchA7lZBqVamrtiubkqpZYjzQdpYAkGigw8PKqJvVFA2nD8kGOMstLfYR3D+3qWL RqxVSr8psNFklQNLkqqXJ76YLEwjwC9KSJe/oiop7q/JkqH5RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPStYIj1kfetUEChk4tYEGbweAfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNi Y2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvODJhNTlkMDktYTY4YS0z Yjc0LTgyMWYtYWNkM2MwNmRhYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmIzYmNiNDctNWYxOC00NmQzLTli NTAtNjNkNWNiYjllOWRkLzJiM2JjYjQ3LTVmMTgtNDZkMy05YjUwLTYzZDVjYmI5 ZTlkZC5jcmwwHwYDVR0jBBgwFoAUteboBGJM8WceBokEZtHmJS27gq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1 Y2JiOWU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH51WteXKNguJRO6IMVv2f3CaEL+JL2VUheclgiVVpVUxMdGYPxNof2O WtsXZ8NA278va6r7npKw3ebFaeRIdvBUqXZy4ed/+2YVYgaJujLB4v9by+Pf5hAY 9O9AcaQW5wkLwNQ+BRpd3TQVR0R39ycgv95xVL4FuRwTMH1QZhLhmO2a82ypR7iI zqB0yCO0ewutZZfdsu2K/mv2nI7G/hjRSVzU5e3ukRedUQ1/2KJSUck2wJXLqTC0 KVgoB0HzFCYC44NQTqxy/Zww5Nq6bvxNqsIBtZzU2rvQ3Ghd0uVIGPhuQ4oBvPt8 9oO7buoFMSl9810SQOp5RqDQZZuyy5A= -----END CERTIFICATE-----Generated at Sun Jun 29 17:03:48 2025 by rpki-client