$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/87672430-cbec-3e81-a0dc-97dcc656fa58.roa File: 87672430-cbec-3e81-a0dc-97dcc656fa58.roa (raw, json) Hash identifier: xFvTeZmWrCKb2D18eYr7xmzVtSn0aPQlM8dAOwQVUZY= Subject key identifier: A6:C1:DE:9A:3C:F7:98:1C:6A:78:D7:69:B5:C5:54:C5:AF:9A:CF:28 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584A90A0AD60BE9FD66904CC3300 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/87672430-cbec-3e81-a0dc-97dcc656fa58.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 396253 IP address blocks: 163.120.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ad:60:be:9f:d6:69:04:cc:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f9ee85bc-1d7d-4740-b9a3-cc055cee5e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6f:ca:74:78:1d:8c:49:f6:25:97:f3:b8:0a: 63:d5:7a:03:96:a0:d4:b8:cc:a9:95:9b:7d:f8:ba: 56:89:43:5b:79:c1:4e:be:87:ef:9d:da:7c:6f:0a: d6:0a:cd:04:4c:b1:e5:35:a0:20:d1:52:84:16:61: 16:ff:81:d5:ee:ff:c8:87:dc:5c:97:f1:65:14:a5: cb:df:4a:89:ec:e1:76:b1:ed:f7:9e:a1:77:9a:62: fc:19:6a:d5:08:63:c8:f4:da:00:2f:00:d4:50:f6: fe:8a:0f:de:c5:0a:42:84:fc:07:40:5a:3d:e0:97: 44:92:a7:5c:f4:fd:dd:c8:83:1e:42:1f:12:db:43: 81:ee:80:31:22:74:92:9b:fd:12:8b:d4:9b:47:d7: ba:98:fd:5b:6c:37:70:d6:c0:1e:71:68:33:1b:97: 62:9e:df:17:29:ca:06:d7:af:b3:dd:b7:8e:04:e9: 76:2b:3e:9d:a7:f1:a7:3f:37:cb:6f:7d:71:7a:be: 5e:3f:ca:d2:58:c6:0e:1b:6e:ea:71:2b:48:81:8b: a8:bb:87:82:a6:9b:2f:d9:a7:36:df:95:7f:15:9e: 15:87:2a:bf:a8:f3:ff:5c:a9:0f:bc:85:16:2b:b5: 93:1b:b6:bd:cf:c6:68:52:5c:bf:f9:73:58:fc:15: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C1:DE:9A:3C:F7:98:1C:6A:78:D7:69:B5:C5:54:C5:AF:9A:CF:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/87672430-cbec-3e81-a0dc-97dcc656fa58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:75:32:f1:bd:bd:9a:5d:ee:9a:f1:03:d9:94:65:02:7b:fe: d0:db:9a:20:75:f1:c8:52:20:dc:ab:75:69:96:68:c5:a9:b4: 4d:76:cb:83:a9:1d:0c:f2:fb:a2:ce:cc:21:03:c4:e7:43:10: 7e:0b:80:dd:60:9e:e6:45:a3:0c:9d:76:56:77:b1:7c:f3:ec: 62:48:5e:09:c9:4d:e1:d0:70:5e:92:3b:81:1f:87:16:ed:b5: 1a:40:6e:cf:43:54:f9:ca:01:52:a2:7d:72:19:8d:4e:15:54: 4d:69:19:03:8c:32:d4:5c:a1:ac:da:2d:ef:00:f4:2d:90:b9: 2f:7b:db:9f:03:30:1c:24:f9:8b:33:02:e8:71:8b:00:d6:34: ac:10:7a:bc:e8:6d:b9:4c:7c:e4:5d:5f:09:8d:75:29:b6:a5: 39:b2:f9:86:3b:98:97:c0:af:bc:00:01:d7:0b:df:b5:31:3a: b0:12:bd:2f:8b:af:08:7b:7e:e7:7c:4f:7b:fa:73:68:6e:81: 14:0f:58:41:2a:36:e7:00:51:67:ab:b4:ec:e6:99:1f:18:29: 17:5b:5f:aa:fe:96:ea:15:f3:45:79:cf:13:0b:40:48:18:6d: 41:40:7e:5f:56:46:89:13:8c:b2:7f:2d:5b:b4:dd:f7:98:bc: 47:d0:63:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoK1gvp/WaQTMMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjllZTg1YmMtMWQ3ZC00NzQwLWI5YTMtY2MwNTVjZWU1ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW/KdHgdjEn2JZfzuApj1XoDlqDUuMyplZt9 +LpWiUNbecFOvofvndp8bwrWCs0ETLHlNaAg0VKEFmEW/4HV7v/Ih9xcl/FlFKXL 30qJ7OF2se33nqF3mmL8GWrVCGPI9NoALwDUUPb+ig/exQpChPwHQFo94JdEkqdc 9P3dyIMeQh8S20OB7oAxInSSm/0Si9SbR9e6mP1bbDdw1sAecWgzG5dint8XKcoG 16+z3beOBOl2Kz6dp/GnPzfLb31xer5eP8rSWMYOG27qcStIgYuou4eCppsv2ac2 35V/FZ4Vhyq/qPP/XKkPvIUWK7WTG7a9z8ZoUly/+XNY/BXYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbB3po895gcanjXabXFVMWvms8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODc2NzI0MzAtY2JlYy0z ZTgxLWEwZGMtOTdkY2M2NTZmYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo3hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp1MvG9vZpd7prxA9mUZQJ7/tDbmiB18chSINyrdWmWaMWptE12y4Op HQzy+6LOzCEDxOdDEH4LgN1gnuZFowyddlZ3sXzz7GJIXgnJTeHQcF6SO4Efhxbt tRpAbs9DVPnKAVKifXIZjU4VVE1pGQOMMtRcoazaLe8A9C2QuS97258DMBwk+Ysz AuhxiwDWNKwQerzobblMfORdXwmNdSm2pTmy+YY7mJfAr7wAAdcL37UxOrASvS+L rwh7fud8T3v6c2hugRQPWEEqNucAUWertOzmmR8YKRdbX6r+luoV80V5zxMLQEgY bUFAfl9WRokTjLJ/LVu03feYvEfQYwE= -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:44 2025 by rpki-client