$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa File: 38c17b7a-0754-332b-ad37-ba79d152d002.roa (raw, json) Hash identifier: RcSkPHYDajMzcQ/pjeJgxWEPxY3LDo07f9/LHMfuZDA= Subject key identifier: 41:4C:EB:C2:7B:85:D5:5C:A5:58:F2:0D:8C:BF:90:5C:3E:92:72:94 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584B80B751E673D129984F365CA0 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 399726 IP address blocks: 204.144.180.0/24 maxlen: 24 204.144.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:51:e6:73:d1:29:98:4f:36:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=a137a860-f7c7-4d4f-bfdf-6162b1595306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:f0:04:01:5e:09:86:bd:3e:e5:d0:92:5d: ad:ae:52:d9:5c:cf:ab:1e:19:88:b8:c6:88:10:33: 3f:12:01:07:b0:89:34:27:6a:79:7f:be:c6:25:84: 43:d7:28:b5:5b:92:d1:e0:62:31:80:67:32:da:48: 35:a3:5b:7a:56:55:2e:8f:e2:4f:78:33:c8:b3:8c: 5c:a8:3c:cf:68:0c:06:19:0a:d5:fb:b1:67:c9:14: 98:cd:eb:b3:b4:cb:21:94:03:76:18:5e:10:65:0e: f5:a9:b5:21:fa:83:84:ce:98:8c:ab:a8:d2:8b:e9: 51:bc:13:14:1c:2d:18:98:a0:8b:6e:e9:3d:e0:f2: cc:0e:cf:fc:f4:97:b8:6e:66:5f:0c:02:b7:b1:e9: fe:51:ea:1f:fc:79:cc:10:54:a1:39:9f:c8:c9:f0: b2:2b:91:af:fc:d6:07:85:4f:ab:a9:b3:02:9e:a0: 08:ed:f1:d1:54:09:b8:e1:08:95:4f:8e:fe:d9:0a: cc:ff:de:37:ef:21:ef:ee:51:8f:2f:cb:c6:b0:2f: da:4d:b4:85:00:8c:98:1b:29:7e:48:e4:49:49:f6: da:fa:38:87:42:fb:af:bb:5f:d2:82:80:8d:0f:cd: f1:84:a2:e9:0c:5a:06:af:6f:ce:4d:5c:4c:62:7b: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4C:EB:C2:7B:85:D5:5C:A5:58:F2:0D:8C:BF:90:5C:3E:92:72:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 204.144.180.0/24 204.144.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:3d:76:21:33:75:06:9f:30:2a:64:e9:86:f6:2e:77:ea:f9: ff:7c:08:28:11:a8:48:9b:b8:93:ce:94:6b:02:e5:f5:b6:a8: 83:54:96:a0:62:45:90:1a:6b:ec:af:49:9b:e3:85:6f:bd:97: fe:7e:88:47:10:5f:d7:3b:cb:2e:8e:2f:1d:af:a5:15:3d:8a: e2:1a:53:41:8c:7d:3b:44:6d:70:5d:13:1d:03:36:a0:ca:0a: eb:b2:fa:50:e7:62:f1:5f:01:95:c4:91:19:f4:37:3e:c0:9d: 4f:75:88:83:75:a2:27:a7:d3:e9:08:a3:3b:94:e5:12:45:c5: 46:7a:d3:64:a2:86:a0:14:8d:3f:42:81:5a:e4:a8:01:0f:2e: 8a:25:57:94:c9:44:74:f9:58:99:b7:30:dd:be:f5:ba:da:4b: 38:2d:09:a5:49:f6:16:1f:9c:b5:66:6a:d5:65:dc:de:0c:e8: 9b:58:c7:c3:91:21:5a:9f:00:e6:fc:4b:62:44:c0:a1:27:48: c1:da:8c:13:90:03:4f:c8:dd:5b:59:08:b1:ab:45:52:0b:da: 15:47:97:31:a6:18:d4:93:09:d0:77:e9:52:69:e6:dc:07:f1: 79:96:a8:b4:38:5a:7f:17:4b:bd:0a:3d:39:74:02:4d:d9:ee: 7f:ec:83:36 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuAt1Hmc9EpmE82XKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YTEzN2E4NjAtZjdjNy00ZDRmLWJmZGYtNjE2MmIxNTk1MzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM7wBAFeCYa9PuXQkl2trlLZXM+rHhmIuMaI EDM/EgEHsIk0J2p5f77GJYRD1yi1W5LR4GIxgGcy2kg1o1t6VlUuj+JPeDPIs4xc qDzPaAwGGQrV+7FnyRSYzeuztMshlAN2GF4QZQ71qbUh+oOEzpiMq6jSi+lRvBMU HC0YmKCLbuk94PLMDs/89Je4bmZfDAK3sen+Ueof/HnMEFShOZ/IyfCyK5Gv/NYH hU+rqbMCnqAI7fHRVAm44QiVT47+2QrM/9437yHv7lGPL8vGsC/aTbSFAIyYGyl+ SORJSfba+jiHQvuvu1/SgoCND83xhKLpDFoGr2/OTVxMYntZvwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEFM68J7hdVcpVjyDYy/kFw+knKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvMzhjMTdiN2EtMDc1NC0z MzJiLWFkMzctYmE3OWQxNTJkMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzJC0AwQB zJC2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAE9diEzdQafMCpk6Yb2Lnfq+f98CCgRqEibuJPOlGsC5fW2 qINUlqBiRZAaa+yvSZvjhW+9l/5+iEcQX9c7yy6OLx2vpRU9iuIaU0GMfTtEbXBd Ex0DNqDKCuuy+lDnYvFfAZXEkRn0Nz7AnU91iIN1oien0+kIozuU5RJFxUZ602Si hqAUjT9CgVrkqAEPLoolV5TJRHT5WJm3MN2+9braSzgtCaVJ9hYfnLVmatVl3N4M 6JtYx8ORIVqfAOb8S2JEwKEnSMHajBOQA0/I3VtZCLGrRVIL2hVHlzGmGNSTCdB3 6VJp5twH8XmWqLQ4Wn8XS70KPTl0Ak3Z7n/sgzY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:32 2025 by rpki-client