$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa File: 7956eda3-70c9-3ed7-b458-8c5b621234c3.roa (raw, json) Hash identifier: OVsgC5PHQjuPh6Z9otFYPsJtyvhNd9AB18IsGcIiRGY= Subject key identifier: 7F:B9:8C:67:9E:96:1B:19:DA:DF:47:12:36:1F:55:FF:AD:11:C6:37 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584A5FC5E709F4CA2DB8D7F1D780 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 40628 IP address blocks: 205.153.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e7:09:f4:ca:2d:b8:d7:f1:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=3990e1ce-6d68-4d6f-8c19-f07d657c075d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b7:89:c3:be:4f:f7:cf:99:f3:22:4e:5c:61: cb:be:5e:29:f6:db:b7:90:17:c8:78:30:4e:a3:2e: e7:19:bf:ce:e8:b5:6f:f0:a8:95:14:2f:12:94:0a: 76:33:6e:e5:88:25:37:d5:3b:d3:f8:ae:f3:03:6e: c8:4d:9a:8f:65:9a:2d:ca:8b:69:71:39:ce:90:8b: 51:6e:e1:66:9a:96:97:af:1a:8c:fc:9b:42:de:e8: 35:c9:7c:23:0b:3b:af:f5:20:55:16:0a:2e:e4:fb: 0f:80:f7:e3:44:91:25:29:b8:bf:34:46:a1:05:25: f3:65:93:66:6b:25:f1:1b:18:f8:6a:c9:51:c0:6e: 45:dc:29:2c:bb:01:e8:5d:71:2a:c6:4e:8f:12:f1: e6:03:31:a4:dc:84:4c:56:bb:45:36:dd:3a:67:34: ef:85:bf:fe:b4:19:18:a2:84:d0:d9:18:c2:f9:ad: 71:0e:5f:c4:62:a3:71:cd:14:3c:47:9a:61:0f:7e: 3f:f1:dc:57:d1:c3:64:e2:54:58:ac:1c:fe:8b:30: 62:c7:47:e7:b4:bb:bf:75:23:b7:c7:b3:a0:1a:71: 35:ac:54:d7:18:df:67:14:3f:05:dd:bf:5e:72:3b: 06:88:1d:92:6d:19:8d:7d:d4:26:b2:ae:74:3b:c8: b9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B9:8C:67:9E:96:1B:19:DA:DF:47:12:36:1F:55:FF:AD:11:C6:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 205.153.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a0:69:61:4a:d8:f3:29:91:bf:1e:90:82:35:86:25:56:65: 83:b3:48:e0:b5:65:8d:20:82:53:fe:c2:f1:b9:dc:0d:d7:b0: 1e:cb:43:d2:d8:9c:60:40:55:f7:7b:d4:af:97:9a:c9:ac:19: d7:93:9e:0d:e2:e6:a5:d8:5e:81:74:a1:19:c6:6b:85:30:97: 27:1b:3e:9c:7d:ed:77:0c:b9:1c:ea:69:1e:3f:56:33:8e:d6: b7:3f:44:6d:b2:25:15:53:14:ae:a5:17:3e:de:89:3f:19:c6: 83:4e:b4:73:09:78:c3:72:45:55:14:70:5d:09:26:36:a6:88: 62:04:fa:0b:9e:19:2f:98:32:0e:6b:46:bd:78:90:06:e0:5e: da:02:2a:5c:6e:a9:8c:e1:82:23:bc:c6:e5:d4:66:34:6e:3b: 09:92:99:dc:06:0f:09:20:95:2c:d0:e4:fd:99:45:39:70:e6: c2:ed:09:6a:d6:9f:73:33:7b:2c:92:71:85:ae:fb:de:51:2b: c7:8b:27:d6:33:cb:5d:dc:a0:bc:df:df:8d:bf:10:41:15:26: 0f:71:e3:ef:39:f3:66:79:26:c3:fa:33:a4:23:8f:8f:4d:f9: 7a:34:d5:37:c2:15:87:91:d5:d9:99:9c:5e:13:b7:89:3f:1d: c9:25:e3:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxecJ9MotuNfx14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk Mzk5MGUxY2UtNmQ2OC00ZDZmLThjMTktZjA3ZDY1N2MwNzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7eJw75P98+Z8yJOXGHLvl4p9tu3kBfIeDBO oy7nGb/O6LVv8KiVFC8SlAp2M27liCU31TvT+K7zA27ITZqPZZotyotpcTnOkItR buFmmpaXrxqM/JtC3ug1yXwjCzuv9SBVFgou5PsPgPfjRJElKbi/NEahBSXzZZNm ayXxGxj4aslRwG5F3CksuwHoXXEqxk6PEvHmAzGk3IRMVrtFNt06ZzTvhb/+tBkY ooTQ2RjC+a1xDl/EYqNxzRQ8R5phD34/8dxX0cNk4lRYrBz+izBix0fntLu/dSO3 x7OgGnE1rFTXGN9nFD8F3b9ecjsGiB2SbRmNfdQmsq50O8i5BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+5jGeelhsZ2t9HEjYfVf+tEcY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNzk1NmVkYTMtNzBjOS0z ZWQ3LWI0NTgtOGM1YjYyMTIzNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFagaWFK2PMpkb8ekII1hiVWZYOzSOC1ZY0gglP+wvG53A3XsB7LQ9LY nGBAVfd71K+XmsmsGdeTng3i5qXYXoF0oRnGa4UwlycbPpx97XcMuRzqaR4/VjOO 1rc/RG2yJRVTFK6lFz7eiT8ZxoNOtHMJeMNyRVUUcF0JJjamiGIE+gueGS+YMg5r Rr14kAbgXtoCKlxuqYzhgiO8xuXUZjRuOwmSmdwGDwkglSzQ5P2ZRTlw5sLtCWrW n3MzeyyScYWu+95RK8eLJ9Yzy13coLzf342/EEEVJg9x4+8582Z5JsP6M6Qjj49N +Xo01TfCFYeR1dmZnF4Tt4k/Hckl4xw= -----END CERTIFICATE-----Generated at Wed Jul 9 22:13:25 2025 by rpki-client