$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa File: 7956eda3-70c9-3ed7-b458-8c5b621234c3.roa (raw, json) Hash identifier: oVATcDYfMK5A50xHExdB/8q39S1dcrpRosIl+u4ZTSI= Subject key identifier: 57:F3:B3:21:BD:74:BE:DD:FC:DC:05:BD:54:51:8E:0F:20:22:96:7D Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584F497530D4DF8633B79AECF800 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40628 IP address blocks: 205.153.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:30:d4:df:86:33:b7:9a:ec:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=93186af9-bbfe-483e-9f91-e8ddde0dd1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:86:0f:d6:61:3e:e0:9d:08:db:46:ae:76:d6: a0:a1:87:03:79:8e:0c:29:6f:21:ce:88:ba:fb:76: 43:67:e8:8e:3c:85:84:06:41:bf:ac:ed:cd:6e:42: f0:a0:bb:35:04:f8:f8:0b:49:49:14:83:a3:c9:65: 43:99:d5:51:cf:61:a2:27:e9:04:37:bf:a1:37:f9: db:6f:53:6b:a7:0d:72:8b:2f:72:3b:8d:61:d0:72: 9a:36:48:2b:a2:e5:f8:ff:4e:94:1d:18:00:5f:49: 68:dd:b5:7a:e6:fa:a7:8b:ca:dd:50:ec:a6:28:b2: 08:66:1d:7a:b1:fd:6b:5e:a0:f3:e3:3e:b3:ae:85: 20:6d:30:9d:96:85:81:7e:6a:3c:91:05:04:c2:62: 5f:ce:ce:02:f0:b1:b7:07:24:80:ac:e6:72:70:2a: 0d:3d:bf:af:a9:02:fe:62:0c:b4:cd:32:db:5e:d0: 8d:7f:8b:da:62:29:86:ee:bc:08:49:07:8e:c9:db: 93:56:f0:71:28:b5:67:63:17:23:42:73:df:9f:d2: 1b:de:5a:1d:1d:e0:7c:5c:09:d4:73:3b:32:2f:44: e0:2d:82:68:3d:7e:30:b5:e8:26:2d:a1:68:1b:a3: 4d:9e:89:40:00:96:bf:d5:db:9c:e3:86:2c:77:50: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F3:B3:21:BD:74:BE:DD:FC:DC:05:BD:54:51:8E:0F:20:22:96:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 205.153.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8b:b5:d7:9d:1f:6a:d8:e5:4c:6a:56:1a:dc:cb:49:c8:9e: a9:fb:dc:54:91:73:ab:d8:10:1d:9d:11:bc:de:28:12:e0:17: 73:5c:04:ce:dd:c1:60:27:54:b1:fa:e7:58:35:af:33:f8:11: 3c:28:8b:99:39:11:dd:16:14:72:e5:dc:4b:ef:a0:4a:b2:68: cf:ba:3e:da:d1:14:ba:9a:45:bd:60:65:8a:6e:60:70:05:ab: f4:22:29:5d:e0:79:16:b1:51:b3:cf:5a:36:ff:52:9e:ce:28: a5:21:ae:79:93:79:fb:92:ae:c8:0a:41:6a:69:bd:8e:50:83: a5:37:75:f5:84:0d:b3:dd:6c:21:13:69:8e:0a:f6:cb:c6:39: ba:9b:68:4d:4b:ac:ef:8e:e2:c4:a6:a6:35:a3:00:a1:fb:ea: 5e:c4:8a:3d:85:fc:7c:d8:a3:04:9b:59:1d:7b:ef:75:9d:62: 82:4f:92:5a:da:d7:f3:5e:a6:4b:f7:24:6a:15:e7:02:8a:41: 37:a6:c8:a5:9c:f2:f6:2e:c3:20:69:5c:d8:b4:3d:0e:d8:b4: 91:0e:a4:ca:a0:2e:13:f7:80:b3:c4:3b:65:1c:01:a4:a2:71: 53:b7:4d:e4:22:16:47:6d:f5:d5:8d:1e:2c:1d:05:31:9a:51: 64:6c:4a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdTDU34Yzt5rs+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTMxODZhZjktYmJmZS00ODNlLTlmOTEtZThkZGRlMGRkMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4YP1mE+4J0I20audtagoYcDeY4MKW8hzoi6 +3ZDZ+iOPIWEBkG/rO3NbkLwoLs1BPj4C0lJFIOjyWVDmdVRz2GiJ+kEN7+hN/nb b1Nrpw1yiy9yO41h0HKaNkgrouX4/06UHRgAX0lo3bV65vqni8rdUOymKLIIZh16 sf1rXqDz4z6zroUgbTCdloWBfmo8kQUEwmJfzs4C8LG3BySArOZycCoNPb+vqQL+ Ygy0zTLbXtCNf4vaYimG7rwISQeOyduTVvBxKLVnYxcjQnPfn9Ib3lodHeB8XAnU czsyL0TgLYJoPX4wtegmLaFoG6NNnolAAJa/1duc44Ysd1AxQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfzsyG9dL7d/NwFvVRRjg8gIpZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNzk1NmVkYTMtNzBjOS0z ZWQ3LWI0NTgtOGM1YjYyMTIzNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmLtdedH2rY5UxqVhrcy0nInqn73FSRc6vYEB2dEbzeKBLgF3NcBM7d wWAnVLH651g1rzP4ETwoi5k5Ed0WFHLl3EvvoEqyaM+6PtrRFLqaRb1gZYpuYHAF q/QiKV3geRaxUbPPWjb/Up7OKKUhrnmTefuSrsgKQWppvY5Qg6U3dfWEDbPdbCET aY4K9svGObqbaE1LrO+O4sSmpjWjAKH76l7Eij2F/HzYowSbWR1773WdYoJPklra 1/Nepkv3JGoV5wKKQTemyKWc8vYuwyBpXNi0PQ7YtJEOpMqgLhP3gLPEO2UcAaSi cVO3TeQiFkdt9dWNHiwdBTGaUWRsSkA= -----END CERTIFICATE-----Generated at Sun Oct 11 18:05:15 2026 by rpki-client