$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa File: ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa (raw, json) Hash identifier: 7FPW2H6IBy7gc+kbkPGQI1G0u6c4CO3Xxnxd+76mLlk= Subject key identifier: 20:C9:44:09:DF:97:1A:01:AD:C1:CF:EA:93:B3:A4:C8:8F:2C:FA:09 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F4328584B84E772A623EC2D76F7312200 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 395437 IP address blocks: 138.43.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:72:a6:23:ec:2d:76:f7:31:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=ec787b9b-87c8-4b3b-b9cc-f8275cbc7298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:96:51:16:d6:0d:19:aa:06:84:f1:a8:60:8a: 97:69:ba:f0:2e:fb:8c:4f:ae:8b:d4:f7:a4:e6:72: 89:7a:56:87:bd:18:14:5c:7a:81:a4:d0:b3:1d:69: ae:d3:04:ff:4c:f1:31:ee:6f:cf:ff:bd:00:23:92: 79:f5:5c:f8:e4:fe:02:e9:45:d2:65:f6:94:6a:dd: 21:52:07:f1:1d:ae:1e:28:bb:30:9a:10:a2:2e:68: 2a:8f:ba:79:c5:1a:eb:a6:d8:f5:ab:62:b8:15:e4: 99:4d:34:95:46:98:24:a0:99:34:3e:57:2b:2f:81: 7e:40:09:77:77:20:e4:7f:9d:2d:68:99:e9:47:79: 1b:ee:02:23:ed:7a:eb:61:c7:ad:61:be:14:2c:7c: 9e:ff:27:10:fe:b4:02:46:40:ea:92:2b:54:7e:3a: 9a:7c:1f:b0:d4:03:1f:94:60:fc:cb:e3:5f:5c:ee: 73:7f:18:33:88:1a:66:27:b8:e2:a0:12:5b:7f:6a: cc:94:06:2b:27:f9:e2:b9:64:db:f4:50:2f:e4:b4: 53:bf:51:a7:ab:91:64:3b:c1:f8:42:56:d1:ba:be: f0:5a:45:4f:ab:72:3e:da:5f:b6:e5:e7:43:39:69: f4:be:6a:5c:39:4c:b3:b1:50:a7:7d:f2:61:06:e4: a8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C9:44:09:DF:97:1A:01:AD:C1:CF:EA:93:B3:A4:C8:8F:2C:FA:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 138.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:32:15:d2:c9:2f:57:84:96:f4:61:a5:22:ca:3b:4f:f1:65: a0:d2:38:54:12:ec:3a:83:7a:50:28:fc:82:19:70:e3:8d:ef: 09:3f:3f:b1:ca:b7:ee:74:d8:2f:bd:90:04:07:05:4a:2a:07: 6c:dd:40:37:14:52:9b:dd:a9:d3:79:dd:21:9c:0c:b7:dd:37: 22:cf:7a:a2:3f:d0:78:29:3a:b2:a5:ee:07:fb:25:54:ad:48: 25:f1:2a:ad:d7:82:73:1d:e5:46:77:1e:32:10:cb:6b:33:7b: a7:44:9e:26:86:62:36:80:dc:24:20:a6:87:75:15:00:33:4e: 59:f4:3e:83:b8:e7:eb:45:22:d6:20:be:c7:68:86:97:56:3c: aa:87:e6:dc:2c:33:6d:64:a3:b4:1f:bf:5f:bc:7f:d9:23:5b: ee:3e:6b:55:4d:b5:90:ba:d2:85:ea:ee:0e:16:eb:32:46:9c: 82:71:73:3d:9e:ef:16:c5:94:e7:b1:81:c8:ec:de:a3:15:34: c0:6a:7a:89:7a:4d:e5:77:1d:f7:c4:45:66:0e:30:06:aa:a7: 81:0c:cd:17:d2:c5:5c:38:7c:62:7f:cb:a3:e8:2d:12:9c:bc: 84:55:27:f1:b1:b8:6b:55:82:27:1c:d8:64:b6:6d:0d:cc:72: b5:b5:e5:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53KmI+wtdvcxIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZWM3ODdiOWItODdjOC00YjNiLWI5Y2MtZjgyNzVjYmM3Mjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JZRFtYNGaoGhPGoYIqXabrwLvuMT66L1Pek 5nKJelaHvRgUXHqBpNCzHWmu0wT/TPEx7m/P/70AI5J59Vz45P4C6UXSZfaUat0h UgfxHa4eKLswmhCiLmgqj7p5xRrrptj1q2K4FeSZTTSVRpgkoJk0PlcrL4F+QAl3 dyDkf50taJnpR3kb7gIj7XrrYcetYb4ULHye/ycQ/rQCRkDqkitUfjqafB+w1AMf lGD8y+NfXO5zfxgziBpmJ7jioBJbf2rMlAYrJ/niuWTb9FAv5LRTv1Gnq5FkO8H4 QlbRur7wWkVPq3I+2l+25edDOWn0vmpcOUyzsVCnffJhBuSouwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDJRAnflxoBrcHP6pOzpMiPLPoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvYmE5YzVkMDYtMTNkMS0z ZmY3LTlkMzAtOTUxYTliMTRjZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiiuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYyFdLJL1eElvRhpSLKO0/xZaDSOFQS7DqDelAo/IIZcOON7wk/P7HK t+502C+9kAQHBUoqB2zdQDcUUpvdqdN53SGcDLfdNyLPeqI/0HgpOrKl7gf7JVSt SCXxKq3XgnMd5UZ3HjIQy2sze6dEniaGYjaA3CQgpod1FQAzTln0PoO45+tFItYg vsdohpdWPKqH5twsM21ko7Qfv1+8f9kjW+4+a1VNtZC60oXq7g4W6zJGnIJxcz2e 7xbFlOexgcjs3qMVNMBqeol6TeV3HffERWYOMAaqp4EMzRfSxVw4fGJ/y6PoLRKc vIRVJ/GxuGtVgicc2GS2bQ3McrW15Yc= -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:55 2025 by rpki-client