$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa File: 7223b940-9558-3128-873c-80e6ed49a2d4.roa (raw, json) Hash identifier: 4dDl156xfHVSy/Kw7ZP78m50Jl11ZBgyHv+wJx+WZ3Y= Subject key identifier: B1:3A:09:07:B4:CE:C8:10:D1:72:B2:26:9C:E8:47:43:E4:59:34:69 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A7E7B5DAF6B474CB838CDC4E0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396253 IP address blocks: 163.120.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:5d:af:6b:47:4c:b8:38:cd:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=c5f9235d-4364-4480-88ca-d59ac90e05c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b0:27:bf:24:16:0c:6a:5d:0e:e1:cd:ed:79: 97:44:4e:3a:d7:90:b4:e2:aa:9a:66:5a:9b:df:ac: cf:8f:25:a0:62:0d:d5:c2:b1:49:22:86:77:be:5b: 70:6c:ec:95:f9:00:21:89:df:8f:9d:d4:c9:11:66: 35:82:5c:a9:cd:44:0b:70:42:3f:7d:b4:35:26:16: 86:d2:61:0e:44:35:0f:80:79:c0:b7:08:76:66:44: 7a:9c:d3:f2:bb:b6:28:a2:4d:40:3d:ea:13:12:3f: ef:89:86:1e:ee:9a:dd:1b:b0:e2:7a:25:17:a5:ef: 0e:3c:7c:18:6d:3f:5a:98:43:79:7b:5b:ba:db:6f: a6:08:14:6d:91:df:eb:68:7f:c0:1d:5d:79:e4:1a: 03:61:ef:c4:8f:56:0c:b3:d9:3e:46:13:86:93:42: 0c:b2:21:5d:ed:02:48:09:33:e2:42:0b:65:c0:0d: 0e:48:70:6a:76:10:11:a4:b1:91:3c:3e:45:ce:72: 4e:19:40:33:41:72:97:cc:37:e4:dd:83:7a:56:fe: 7c:46:49:7f:98:12:d9:d8:3e:e9:23:72:cd:a9:67: f6:69:22:32:f4:b0:04:9a:24:b7:b0:51:a0:15:13: 66:e8:80:80:a9:51:7a:b5:ba:21:3d:75:be:f2:24: 7b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3A:09:07:B4:CE:C8:10:D1:72:B2:26:9C:E8:47:43:E4:59:34:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9d:d0:08:e8:4a:99:d2:c9:0e:73:97:1a:93:c9:5e:5d:f7: fb:47:e2:d0:5f:23:50:ec:1e:84:9c:a4:a0:4e:e5:13:76:b2: 07:e0:b7:44:d6:d7:df:84:23:3f:67:b1:9e:d5:dc:ee:c6:ac: ee:c0:47:e1:f6:2e:0d:e1:d8:57:2e:2f:0e:48:eb:1a:3e:77: c9:98:14:dd:cd:d2:a2:db:69:1c:cd:19:0e:cf:52:60:2a:cd: fd:16:73:1f:f4:b0:01:16:ac:53:b6:e0:2a:8f:17:69:d6:ef: 7a:ec:d9:e6:98:67:b6:d1:5d:e9:1a:27:b2:dd:b6:17:4a:0f: b7:dc:d2:79:7a:f7:f4:b6:32:ed:74:95:a2:a7:48:6b:c9:e1: aa:26:5a:a4:c4:55:69:ba:9e:76:28:34:3f:bb:c4:89:93:b1: 78:de:f6:2f:8d:3a:c1:5c:35:c7:b7:3a:9e:45:72:58:f0:1c: f3:95:80:44:fe:b7:3a:f4:17:cb:a9:b8:01:83:09:a3:be:5b: ff:77:41:e9:4f:45:d4:a4:95:df:c5:a8:25:2a:f6:a6:92:e6: 98:a5:6c:ea:1c:0e:fc:c1:06:9d:43:06:59:0f:0b:58:bd:7a: d6:bf:c9:2a:b2:ff:a7:08:54:00:db:e7:80:e2:94:56:12:80: 15:da:f7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e12va0dMuDjNxOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YzVmOTIzNWQtNDM2NC00NDgwLTg4Y2EtZDU5YWM5MGUwNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LAnvyQWDGpdDuHN7XmXRE4615C04qqaZlqb 36zPjyWgYg3VwrFJIoZ3vltwbOyV+QAhid+PndTJEWY1glypzUQLcEI/fbQ1JhaG 0mEORDUPgHnAtwh2ZkR6nNPyu7Yook1APeoTEj/viYYe7prdG7DieiUXpe8OPHwY bT9amEN5e1u622+mCBRtkd/raH/AHV155BoDYe/Ej1YMs9k+RhOGk0IMsiFd7QJI CTPiQgtlwA0OSHBqdhARpLGRPD5FznJOGUAzQXKXzDfk3YN6Vv58Rkl/mBLZ2D7p I3LNqWf2aSIy9LAEmiS3sFGgFRNm6ICAqVF6tbohPXW+8iR7ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE6CQe0zsgQ0XKyJpzoR0PkWTRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNzIyM2I5NDAtOTU1OC0z MTI4LTg3M2MtODBlNmVkNDlhMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEid0AjoSpnSyQ5zlxqTyV5d9/tH4tBfI1DsHoScpKBO5RN2sgfgt0TW 19+EIz9nsZ7V3O7GrO7AR+H2Lg3h2FcuLw5I6xo+d8mYFN3N0qLbaRzNGQ7PUmAq zf0Wcx/0sAEWrFO24CqPF2nW73rs2eaYZ7bRXekaJ7LdthdKD7fc0nl69/S2Mu10 laKnSGvJ4aomWqTEVWm6nnYoND+7xImTsXje9i+NOsFcNce3Op5FcljwHPOVgET+ tzr0F8upuAGDCaO+W/93QelPRdSkld/FqCUq9qaS5pilbOocDvzBBp1DBlkPC1i9 eta/ySqy/6cIVADb54DilFYSgBXa99Y= -----END CERTIFICATE-----Generated at Wed Aug 6 05:15:05 2025 by rpki-client