$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa File: ea556a40-a873-3ed9-aa90-580d0a9fa927.roa (raw, json) Hash identifier: XS02p1UJUec2qhS2KMpLYjLHBB8lAnTrZH/t8QLeC74= Subject key identifier: A6:1A:59:E7:BD:D4:B4:44:4F:31:16:6B:FD:C8:07:33:88:23:AC:B6 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F43285849C20A117747A06EFE88669680 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 395437 IP address blocks: 138.43.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:11:77:47:a0:6e:fe:88:66:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=a5d4f23a-fa20-4b7c-88b3-bc230c71c6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:1b:c5:07:ce:29:42:98:05:25:42:e0:57: bc:f3:98:2f:c7:37:27:43:a8:14:b4:c0:a6:7a:ff: 8b:8d:a4:b1:a9:86:b5:49:46:00:85:ce:1c:75:62: 3d:70:ae:04:c7:07:fe:c7:07:8c:58:94:f0:1d:dc: 1d:0e:e3:de:b1:9e:59:40:0c:6b:18:8c:a0:2b:ad: cf:4f:1f:77:be:5b:48:b8:cb:2b:0d:df:5b:af:8d: 11:4c:d9:7b:b2:c4:bb:9d:77:c5:78:39:95:c2:ef: 08:ff:9e:ec:40:c6:7e:06:bb:4c:bc:be:b8:a3:3d: 84:e6:c7:6f:4b:1e:42:47:a5:de:8f:6c:12:89:e5: f6:90:64:75:29:29:d7:27:2f:fc:02:d7:7a:79:69: b2:86:82:3f:41:e3:82:5d:82:9e:ca:6e:a2:87:77: 4c:10:d2:a0:ae:1a:24:6b:ba:66:fd:3e:e9:5e:f4: db:cf:05:b3:cf:76:e8:d9:8d:7c:fc:61:34:20:87: 8f:a6:04:de:d0:af:08:44:83:92:9b:88:98:21:8d: 83:4c:92:49:5f:bc:83:56:b9:87:0b:a3:98:64:70: 6a:de:7c:ed:35:fa:6e:66:04:4a:7c:34:ad:b4:21: 85:ac:96:76:85:ba:a8:b3:53:b4:82:90:02:34:da: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1A:59:E7:BD:D4:B4:44:4F:31:16:6B:FD:C8:07:33:88:23:AC:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 138.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:2b:3f:95:89:cf:59:c2:77:53:58:48:ff:ac:73:38:9c:9a: bc:c1:3e:73:44:bd:54:9d:dd:c9:97:4e:cf:fd:06:6c:81:0b: 5b:ed:60:03:82:09:fd:d6:c6:39:42:65:db:da:7d:d2:f3:4a: f0:9a:89:da:42:43:c2:ac:f9:c6:45:23:16:d5:41:27:e0:d3: cb:4e:ff:2a:60:92:f4:bd:31:ab:90:10:77:19:16:14:24:65: a3:39:d9:79:25:c2:a3:a9:fe:2a:71:26:01:62:b2:25:dd:65: 8a:14:6f:5a:0e:6d:2f:62:7f:77:1a:1a:7d:43:0c:17:4f:f5: bc:90:d4:32:ed:27:9b:9f:f0:4b:1d:2b:14:23:b1:01:13:68: ba:40:f1:0d:5b:5f:7c:6f:c9:27:2b:cc:52:c5:d2:51:46:b4: eb:64:26:d7:d3:dd:2d:6a:1e:2a:f6:9a:0e:04:70:6c:42:e2: c7:0d:9c:9e:11:bf:0c:59:40:10:98:76:89:48:f2:e0:bd:89: 1d:28:34:b5:0e:79:84:b2:1f:fc:74:25:6c:b5:ca:69:91:e6: de:13:bd:cf:70:d2:ef:8f:ee:b7:34:28:ec:9c:4c:50:bd:7e: 6f:f4:62:7d:11:27:0c:76:56:f6:a1:32:66:0d:cc:be:6a:91: 78:15:18:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChF3R6Bu/ohmloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YTVkNGYyM2EtZmEyMC00YjdjLTg4YjMtYmMyMzBjNzFjNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtigbxQfOKUKYBSVC4Fe885gvxzcnQ6gUtMCm ev+LjaSxqYa1SUYAhc4cdWI9cK4Exwf+xweMWJTwHdwdDuPesZ5ZQAxrGIygK63P Tx93vltIuMsrDd9br40RTNl7ssS7nXfFeDmVwu8I/57sQMZ+BrtMvL64oz2E5sdv Sx5CR6Xej2wSieX2kGR1KSnXJy/8Atd6eWmyhoI/QeOCXYKeym6ih3dMENKgrhok a7pm/T7pXvTbzwWzz3bo2Y18/GE0IIePpgTe0K8IRIOSm4iYIY2DTJJJX7yDVrmH C6OYZHBq3nztNfpuZgRKfDSttCGFrJZ2hbqos1O0gpACNNo/oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYaWee91LRETzEWa/3IBzOII6y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvZWE1NTZhNDAtYTg3My0z ZWQ5LWFhOTAtNTgwZDBhOWZhOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiiuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcrP5WJz1nCd1NYSP+sczicmrzBPnNEvVSd3cmXTs/9BmyBC1vtYAOC Cf3WxjlCZdvafdLzSvCaidpCQ8Ks+cZFIxbVQSfg08tO/ypgkvS9MauQEHcZFhQk ZaM52XklwqOp/ipxJgFisiXdZYoUb1oObS9if3caGn1DDBdP9byQ1DLtJ5uf8Esd KxQjsQETaLpA8Q1bX3xvyScrzFLF0lFGtOtkJtfT3S1qHir2mg4EcGxC4scNnJ4R vwxZQBCYdolI8uC9iR0oNLUOeYSyH/x0JWy1ymmR5t4Tvc9w0u+P7rc0KOycTFC9 fm/0Yn0RJwx2VvahMmYNzL5qkXgVGNs= -----END CERTIFICATE-----Generated at Thu May 8 10:04:24 2025 by rpki-client