$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa File: 7956eda3-70c9-3ed7-b458-8c5b621234c3.roa (raw, json) Hash identifier: J1H9XwVWkPTCxPy+vNofYgnoBQDYtOntbJTLAYpmSP4= Subject key identifier: CA:52:60:98:F9:62:2D:4C:DF:AE:9E:D6:E5:02:A7:7C:71:90:1C:1A Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584B4081ADCD43344ECE33B294C0 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 40628 IP address blocks: 205.153.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ad:cd:43:34:4e:ce:33:b2:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=3dfcb205-f5f9-41fb-bbf2-f964f3595a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:63:84:73:08:00:eb:e3:e3:88:82:5c:31: d1:56:8a:1c:f7:b6:cc:14:78:71:3b:cc:92:ee:56: 08:e2:5d:3a:a7:bc:99:ad:cf:1f:8a:40:b7:00:d3: a2:49:8c:76:d9:de:67:01:fb:63:d9:62:a5:d4:6b: 26:0d:b3:49:67:0b:01:2b:ca:32:ce:08:4a:cf:e5: 28:a9:b2:66:06:63:28:9d:a5:db:8b:82:f6:df:55: a7:bc:13:47:c8:80:f7:5c:d6:2b:a5:d0:5e:f1:27: a7:2f:b5:ca:d1:ac:19:9d:04:5a:d6:9b:1c:5c:8b: 00:25:28:0c:74:a5:a3:8e:fe:b3:3a:29:7e:6d:a4: 7b:72:e8:97:6c:69:3a:a6:f0:c7:ca:eb:a1:2a:a8: 35:78:66:62:37:30:b0:48:c0:68:86:e8:f7:48:fe: b8:17:e6:b6:95:61:9f:6b:58:21:8c:d3:96:bd:a8: 94:c3:93:1b:42:4f:cf:27:97:61:6a:bb:87:89:bb: dc:4f:b1:18:e8:cd:b7:43:1d:fd:69:b0:15:64:8d: 2e:45:26:f0:b6:8c:e7:51:f8:ce:01:29:4d:47:c6: d4:d8:61:6a:6c:f5:65:90:11:67:1a:5d:dd:62:73: 66:88:93:3b:1a:a7:40:b9:8a:60:e4:28:7e:0a:fd: 81:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:52:60:98:F9:62:2D:4C:DF:AE:9E:D6:E5:02:A7:7C:71:90:1C:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 205.153.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:61:4c:bd:20:ae:fc:77:00:2f:fc:93:f0:f3:21:93:67:13: 38:bf:e8:ee:4a:21:16:68:6f:38:fa:9a:4e:13:00:b7:96:8d: bd:8b:8f:10:da:24:31:a8:05:ac:22:b7:bf:e9:8b:31:f9:ac: 3e:f6:df:23:7b:5f:7b:75:7c:eb:0a:18:83:6b:95:e4:26:b1: 5d:44:8d:76:4f:37:bf:9c:f8:cb:9e:e3:5f:03:5b:af:8c:28: de:51:a1:3d:1a:e4:a1:88:59:50:5d:6e:52:bf:13:0e:7a:cc: a2:d1:12:7c:4a:7e:b7:3d:db:07:e7:d0:13:b7:ec:b1:1b:f1: b3:af:ec:32:4a:f9:ab:c2:54:ed:2e:23:1b:da:6e:0d:ad:52: a0:67:4b:03:df:79:5b:21:56:f7:09:88:23:fe:92:1d:74:30: 4b:7c:3e:6c:4c:72:9c:9a:8b:b9:1e:0c:60:46:6b:3f:fd:95: b8:6d:2b:77:c0:bd:49:86:1c:0a:b7:39:33:9f:bb:ab:c0:d8: 96:52:6b:84:7e:fa:32:4e:2a:f8:f9:d1:33:05:46:d1:8f:ab: b5:d8:82:33:53:a6:33:af:a5:53:6c:e3:4f:8d:e8:f4:e4:15: 4c:50:c2:bc:4d:73:7d:dc:a8:a2:71:5b:0f:07:a8:fc:b2:1c: 7a:20:05:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAga3NQzROzjOylMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk M2RmY2IyMDUtZjVmOS00MWZiLWJiZjItZjk2NGYzNTk1YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomtjhHMIAOvj44iCXDHRVooc97bMFHhxO8yS 7lYI4l06p7yZrc8fikC3ANOiSYx22d5nAftj2WKl1GsmDbNJZwsBK8oyzghKz+Uo qbJmBmMonaXbi4L231WnvBNHyID3XNYrpdBe8SenL7XK0awZnQRa1pscXIsAJSgM dKWjjv6zOil+baR7cuiXbGk6pvDHyuuhKqg1eGZiNzCwSMBohuj3SP64F+a2lWGf a1ghjNOWvaiUw5MbQk/PJ5dharuHibvcT7EY6M23Qx39abAVZI0uRSbwtoznUfjO ASlNR8bU2GFqbPVlkBFnGl3dYnNmiJM7GqdAuYpg5Ch+Cv2BJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpSYJj5Yi1M366e1uUCp3xxkBwaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNzk1NmVkYTMtNzBjOS0z ZWQ3LWI0NTgtOGM1YjYyMTIzNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNhTL0grvx3AC/8k/DzIZNnEzi/6O5KIRZobzj6mk4TALeWjb2LjxDa JDGoBawit7/pizH5rD723yN7X3t1fOsKGINrleQmsV1EjXZPN7+c+Mue418DW6+M KN5RoT0a5KGIWVBdblK/Ew56zKLREnxKfrc92wfn0BO37LEb8bOv7DJK+avCVO0u Ixvabg2tUqBnSwPfeVshVvcJiCP+kh10MEt8PmxMcpyai7keDGBGaz/9lbhtK3fA vUmGHAq3OTOfu6vA2JZSa4R++jJOKvj50TMFRtGPq7XYgjNTpjOvpVNs40+N6PTk FUxQwrxNc33cqKJxWw8HqPyyHHogBV4= -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:13 2025 by rpki-client