$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa File: 38c17b7a-0754-332b-ad37-ba79d152d002.roa (raw, json) Hash identifier: 9kZkRNw9qj8kgW5D2Qyu0/9/DfqBO0G1KRqVOkpD4nQ= Subject key identifier: DA:18:B6:B4:C5:DE:11:FC:69:EC:B2:7C:CF:81:23:E0:15:49:9F:BA Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584A9FFB8B7C1244038D4364C200 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 399726 IP address blocks: 204.144.180.0/24 maxlen: 24 204.144.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:8b:7c:12:44:03:8d:43:64:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=e5483855-f91f-4c30-816e-7cc6f7c16d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:2f:4c:0d:18:73:8b:52:41:18:00:5b:1a: 81:3c:b5:a5:1c:de:f6:62:17:38:b2:74:48:e2:4a: c5:82:fe:31:51:70:2a:fa:cc:8b:c0:28:12:ed:fe: 98:cf:58:f1:6c:b2:e0:13:3e:19:e9:98:8c:7d:c0: e1:4b:7e:6e:38:a3:d3:0a:ee:db:7f:30:0e:7a:80: e8:ad:32:50:91:7b:6a:e1:0b:0c:c0:b3:7b:28:c3: bf:c8:db:41:d3:82:07:92:af:25:89:07:ff:de:6a: a4:43:90:2d:29:84:d4:9f:31:4a:0d:e6:c6:02:8b: 99:8e:44:bf:bd:64:b3:9d:30:c1:50:18:6d:7b:19: ef:26:68:7b:64:80:16:92:87:dd:43:68:ca:50:e5: 4a:65:6a:4f:cc:22:92:79:59:9d:ae:a1:e2:1c:7f: a7:c5:dc:e3:6e:ec:db:b3:a2:8d:c5:67:7f:b2:cb: cf:46:e8:86:21:5b:ed:8a:c2:73:bb:ba:7b:c3:c4: 22:4b:0b:37:76:29:12:a8:f5:7f:b0:3b:ca:34:03: fd:a7:02:71:53:85:ae:c4:88:84:29:e8:e7:9f:67: 23:83:15:6c:5b:16:4f:63:81:80:bf:be:d1:8c:e8: e4:f5:f7:30:ba:22:43:6e:9c:49:81:a2:5c:e9:89: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:18:B6:B4:C5:DE:11:FC:69:EC:B2:7C:CF:81:23:E0:15:49:9F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 204.144.180.0/24 204.144.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:79:67:3b:74:60:38:89:bb:6c:66:00:59:85:52:0e:ee:b6: 0e:ca:5c:b1:5a:ed:04:04:ee:84:c4:58:91:37:dc:f8:1c:3b: 2c:4c:a1:66:8a:8b:e8:4e:73:8e:1d:1c:a3:04:ad:94:3f:09: 27:11:a7:28:72:bb:f6:41:7b:bc:6f:18:70:82:70:b5:21:85: fe:37:08:86:26:90:75:1b:db:92:1d:f1:6b:f8:94:a4:88:15: ee:b0:0a:9c:96:c5:ab:52:55:33:0e:06:5b:d6:e4:aa:0c:4b: e2:4e:f7:b8:a3:be:1f:b8:63:32:71:8e:12:9b:15:d5:be:1f: a8:a2:b8:8a:44:92:76:37:94:14:f9:cb:5c:06:09:19:6b:ec: 55:86:80:7e:fe:bf:92:b2:eb:b8:e4:2f:8f:83:03:ef:08:98: ce:7f:c8:9f:a1:a9:cb:4f:6b:a8:95:44:20:2c:f2:3c:ee:a0: 1d:51:93:11:26:fd:45:20:d6:a1:7c:dd:8b:62:d2:e4:8d:2e: 47:54:d8:4c:9d:9f:63:f9:3f:8e:6f:89:b6:d0:28:bc:e2:13: fa:30:9f:ec:5a:cc:81:3b:27:21:ae:f3:c7:ef:cd:4a:09:b9: 29:6b:3f:ab:f5:d3:c5:9b:f9:0c:a9:27:bb:b0:52:56:0b:e3: 20:f9:c5:47 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqf+4t8EkQDjUNkwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZTU0ODM4NTUtZjkxZi00YzMwLTgxNmUtN2NjNmY3YzE2ZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfkvTA0Yc4tSQRgAWxqBPLWlHN72Yhc4snRI 4krFgv4xUXAq+syLwCgS7f6Yz1jxbLLgEz4Z6ZiMfcDhS35uOKPTCu7bfzAOeoDo rTJQkXtq4QsMwLN7KMO/yNtB04IHkq8liQf/3mqkQ5AtKYTUnzFKDebGAouZjkS/ vWSznTDBUBhtexnvJmh7ZIAWkofdQ2jKUOVKZWpPzCKSeVmdrqHiHH+nxdzjbuzb s6KNxWd/ssvPRuiGIVvtisJzu7p7w8QiSws3dikSqPV/sDvKNAP9pwJxU4WuxIiE Kejnn2cjgxVsWxZPY4GAv77RjOjk9fcwuiJDbpxJgaJc6Yn+LQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNoYtrTF3hH8aeyyfM+BI+AVSZ+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvMzhjMTdiN2EtMDc1NC0z MzJiLWFkMzctYmE3OWQxNTJkMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzJC0AwQB zJC2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHZ5Zzt0YDiJu2xmAFmFUg7utg7KXLFa7QQE7oTEWJE33Pgc OyxMoWaKi+hOc44dHKMErZQ/CScRpyhyu/ZBe7xvGHCCcLUhhf43CIYmkHUb25Id 8Wv4lKSIFe6wCpyWxatSVTMOBlvW5KoMS+JO97ijvh+4YzJxjhKbFdW+H6iiuIpE knY3lBT5y1wGCRlr7FWGgH7+v5Ky67jkL4+DA+8ImM5/yJ+hqctPa6iVRCAs8jzu oB1RkxEm/UUg1qF83Yti0uSNLkdU2Eydn2P5P45vibbQKLziE/own+xazIE7JyGu 88fvzUoJuSlrP6v108Wb+QypJ7uwUlYL4yD5xUc= -----END CERTIFICATE-----Generated at Thu Aug 21 10:29:56 2025 by rpki-client