$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa File: ea556a40-a873-3ed9-aa90-580d0a9fa927.roa (raw, json) Hash identifier: AxfEHCuFV7estvND7AsD0K2U9ddXkbu4bdkjN2/DLws= Subject key identifier: F3:39:79:86:EB:6C:03:82:56:F8:02:BE:B9:0C:93:B6:35:16:BB:E4 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F43285848E2D10FB3C93168E94AB80240 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 395437 IP address blocks: 138.43.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:0f:b3:c9:31:68:e9:4a:b8:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=06a0b593-2877-4600-9c82-c9b84a80baff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:df:c6:07:b2:83:50:67:7b:c8:e8:2c:2f:64: 41:d6:74:f2:c9:5c:3f:51:68:aa:74:a1:60:8c:1e: 2a:32:60:7d:e5:95:23:db:27:f7:93:86:2d:8c:27: b8:f0:14:4a:ec:b7:e1:a7:88:7c:e2:32:5f:31:ba: 86:9f:b2:1b:ec:ae:c0:27:64:68:66:85:dd:cd:0b: 19:52:63:cd:54:56:16:55:9c:a9:7a:e8:4b:b2:75: c6:83:58:87:3c:77:45:8c:a8:f2:29:f2:ed:f7:fa: f8:3e:10:fb:94:e7:7b:67:51:8c:0a:70:a5:61:78: 21:b8:73:4c:4b:eb:01:f6:6d:ee:0a:60:b3:37:df: b1:95:7c:38:f6:9c:d8:dd:2b:51:9e:98:8e:ff:9d: 5e:94:07:8b:d1:16:f9:56:7e:e2:78:01:d0:88:fb: ee:df:7d:ed:61:20:f2:e0:eb:d7:7d:de:94:2b:b0: 3d:a8:bd:42:ae:d6:9a:36:8a:15:74:e4:7f:29:4f: 9f:0b:1e:3f:54:d1:b0:0b:80:94:ff:d0:03:79:5d: 79:58:1a:da:61:4b:09:fe:38:19:c2:54:99:21:76: 6f:bb:5d:5c:b8:03:fd:1b:64:96:e7:59:ef:13:b5: 5d:aa:49:47:97:3e:d6:4c:42:1f:8a:af:68:d1:de: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:39:79:86:EB:6C:03:82:56:F8:02:BE:B9:0C:93:B6:35:16:BB:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ea556a40-a873-3ed9-aa90-580d0a9fa927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: 138.43.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a1:16:42:e2:d2:01:19:5b:9f:02:bd:21:f6:6e:56:c6:8c: 80:03:69:7e:fa:9c:52:72:05:c0:92:84:d7:84:a0:22:a1:82: 65:0b:5e:f6:45:d9:ff:67:d4:2c:fa:9d:13:00:df:21:29:82: 09:49:2e:28:5d:33:11:91:04:6c:84:bc:df:dc:1d:2e:79:45: df:2d:d4:60:44:fc:45:ca:2d:7a:de:82:39:eb:85:58:ab:9c: cb:5b:04:81:bf:8a:63:da:ef:ad:f9:6b:b7:c2:68:15:20:c1: 77:06:1a:de:6d:d0:99:44:28:bb:fe:73:71:c1:97:2d:c3:b0: c3:0c:56:8f:23:6f:95:61:8f:53:4f:ca:ef:91:1f:41:41:c4: 98:6a:03:e1:77:0c:e9:3f:7c:17:db:5d:0b:cc:8b:d0:b5:66: 0c:34:f8:e9:6f:d9:68:df:e5:d0:50:ec:ee:00:39:0c:75:d3: 72:de:c7:1d:5d:a0:0c:1c:ed:6f:a8:7c:35:41:ea:c1:b3:ad: a4:c0:23:ce:e9:3e:bb:a3:ea:b2:2f:dc:d3:9f:5b:88:51:5b: d4:dd:35:c2:22:87:e1:c3:3a:5b:6e:d7:cd:e2:76:e4:be:54: 57:b2:ef:ee:e8:62:ed:d9:fb:8f:7e:80:57:b8:65:2f:54:88: e1:df:40:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Q+zyTFo6Uq4AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk MDZhMGI1OTMtMjg3Ny00NjAwLTljODItYzliODRhODBiYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t/GB7KDUGd7yOgsL2RB1nTyyVw/UWiqdKFg jB4qMmB95ZUj2yf3k4YtjCe48BRK7Lfhp4h84jJfMbqGn7Ib7K7AJ2RoZoXdzQsZ UmPNVFYWVZypeuhLsnXGg1iHPHdFjKjyKfLt9/r4PhD7lOd7Z1GMCnClYXghuHNM S+sB9m3uCmCzN9+xlXw49pzY3StRnpiO/51elAeL0Rb5Vn7ieAHQiPvu333tYSDy 4OvXfd6UK7A9qL1CrtaaNooVdOR/KU+fCx4/VNGwC4CU/9ADeV15WBraYUsJ/jgZ wlSZIXZvu11cuAP9G2SW51nvE7VdqklHlz7WTEIfiq9o0d5t4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM5eYbrbAOCVvgCvrkMk7Y1FrvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvZWE1NTZhNDAtYTg3My0z ZWQ5LWFhOTAtNTgwZDBhOWZhOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiiuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+hFkLi0gEZW58CvSH2blbGjIADaX76nFJyBcCShNeEoCKhgmULXvZF 2f9n1Cz6nRMA3yEpgglJLihdMxGRBGyEvN/cHS55Rd8t1GBE/EXKLXregjnrhVir nMtbBIG/imPa7635a7fCaBUgwXcGGt5t0JlEKLv+c3HBly3DsMMMVo8jb5Vhj1NP yu+RH0FBxJhqA+F3DOk/fBfbXQvMi9C1Zgw0+Olv2Wjf5dBQ7O4AOQx103Lexx1d oAwc7W+ofDVB6sGzraTAI87pPruj6rIv3NOfW4hRW9TdNcIih+HDOltu183iduS+ VFey7+7oYu3Z+49+gFe4ZS9UiOHfQKM= -----END CERTIFICATE-----Generated at Thu Apr 17 18:50:17 2025 by rpki-client