$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa File: 118e4c67-8a95-310c-95a1-5985a2e83596.roa (raw, json) Hash identifier: 77r5PTPM61+GVXUSoQ2n2bT4sfmKrz25WXIcjzl/t40= Subject key identifier: D6:43:79:1C:E5:03:A9:BC:0B:60:CA:B8:64:C7:BD:7B:ED:AE:59:59 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584B33F19A0C4EC1758E38999A20 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 40628 IP address blocks: 204.61.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9a:0c:4e:c1:75:8e:38:99:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=b92e8324-224f-4e24-a467-b53b687364bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:9a:93:68:bb:22:09:87:08:1a:fc:85:5a: 03:e3:86:00:a4:ae:3b:1e:92:27:b7:b4:cf:fa:12: 70:5e:bc:66:30:e8:3a:00:95:7a:cb:f0:8b:39:33: 2e:86:e1:4b:55:d1:a9:f8:fb:ac:5d:a1:11:2b:51: 11:68:78:7a:bb:c4:5e:0f:cc:d5:56:53:44:f3:70: 10:05:52:fb:c8:44:dd:cf:6f:00:5a:c8:4d:5c:78: c4:05:8d:fd:bb:5e:ad:45:20:16:69:6d:e1:67:01: 83:78:c2:dd:b1:b3:18:26:15:28:9f:04:c3:e8:56: 0e:6a:1a:67:db:2c:65:b7:86:9a:8e:8a:47:77:8a: 88:c6:75:1f:e4:22:86:6e:76:95:a7:09:fb:68:dd: 29:df:e2:21:bf:0e:ac:d3:37:c7:fa:a8:0e:b4:67: 85:ea:a4:3b:76:7e:96:dc:85:40:0f:b7:3d:8b:90: 13:5c:69:29:7e:a9:12:c6:3c:de:90:8c:25:c2:ad: b7:5f:d8:c0:41:02:97:b1:bb:72:51:60:04:81:48: 3b:61:bc:e5:ce:38:d2:4e:66:4f:9d:4e:5c:67:bb: 79:e5:c8:0b:d3:6b:63:15:5f:00:2a:25:da:a6:a7: 3e:72:9b:97:1b:43:fd:4c:0d:b9:87:f5:a4:12:8c: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:43:79:1C:E5:03:A9:BC:0B:60:CA:B8:64:C7:BD:7B:ED:AE:59:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/118e4c67-8a95-310c-95a1-5985a2e83596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 204.61.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9b:6d:e8:8e:f6:37:40:44:09:f7:8a:67:29:3d:51:66:4d: fb:a9:d0:fc:d5:ff:a1:9e:35:58:29:16:dd:c1:59:bc:c8:4d: 4f:7b:34:40:f8:01:d3:b2:22:a6:41:ac:1e:80:7e:e1:47:fe: 9d:f2:5b:e7:63:d5:e9:b2:71:46:90:ee:b0:58:cc:77:11:36: c0:a8:5e:1f:be:8b:46:f8:46:ca:9a:a2:bb:b8:8a:71:f1:8c: 6a:6d:a3:91:cf:2d:d3:ae:be:d8:08:84:5e:7e:74:42:e3:df: ec:69:2d:9d:37:36:f8:0b:9d:c4:54:2d:be:8c:97:84:b7:fa: dd:41:df:9f:16:18:43:08:9a:53:95:32:eb:1f:c2:1e:35:3f: 5d:df:09:81:fb:3f:89:f3:06:fa:30:55:3f:35:e2:20:52:7c: 6e:4d:fd:51:be:c3:c1:e9:52:eb:87:bb:7c:84:08:08:41:0c: 40:5f:72:6f:39:36:0d:8e:c9:67:31:38:ea:86:68:8c:97:ca: ce:d7:a4:7b:e0:4d:61:7e:9b:93:83:32:01:86:16:b9:45:88: 63:40:26:a9:aa:c6:42:6e:ca:61:61:9a:6f:30:d3:70:e0:64: 73:45:79:8d:55:1c:03:20:0c:fe:7c:6a:59:e3:ec:12:3b:3f: d4:20:b3:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8ZoMTsF1jjiZmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YjkyZTgzMjQtMjI0Zi00ZTI0LWE0NjctYjUzYjY4NzM2NGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiKak2i7IgmHCBr8hVoD44YApK47HpInt7TP +hJwXrxmMOg6AJV6y/CLOTMuhuFLVdGp+PusXaERK1ERaHh6u8ReD8zVVlNE83AQ BVL7yETdz28AWshNXHjEBY39u16tRSAWaW3hZwGDeMLdsbMYJhUonwTD6FYOahpn 2yxlt4aajopHd4qIxnUf5CKGbnaVpwn7aN0p3+Ihvw6s0zfH+qgOtGeF6qQ7dn6W 3IVAD7c9i5ATXGkpfqkSxjzekIwlwq23X9jAQQKXsbtyUWAEgUg7YbzlzjjSTmZP nU5cZ7t55cgL02tjFV8AKiXapqc+cpuXG0P9TA25h/WkEowCnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZDeRzlA6m8C2DKuGTHvXvtrllZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvMTE4ZTRjNjctOGE5NS0z MTBjLTk1YTEtNTk4NWEyZTgzNTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzD0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKbbeiO9jdARAn3imcpPVFmTfup0PzV/6GeNVgpFt3BWbzITU97NED4 AdOyIqZBrB6AfuFH/p3yW+dj1emycUaQ7rBYzHcRNsCoXh++i0b4Rsqaoru4inHx jGpto5HPLdOuvtgIhF5+dELj3+xpLZ03NvgLncRULb6Ml4S3+t1B358WGEMImlOV Musfwh41P13fCYH7P4nzBvowVT814iBSfG5N/VG+w8HpUuuHu3yECAhBDEBfcm85 Ng2OyWcxOOqGaIyXys7XpHvgTWF+m5ODMgGGFrlFiGNAJqmqxkJuymFhmm8w03Dg ZHNFeY1VHAMgDP58alnj7BI7P9Qgs5s= -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:36 2025 by rpki-client