$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa File: 8b44a220-e7e1-333d-a0ac-469647d3ca30.roa (raw, json) Hash identifier: ToAVAg8gRPXStYix7KIVQ3yS0pPYEAQ9mvZTCYJLNT8= Subject key identifier: 73:70:1B:0E:57:8D:FC:13:81:F4:E6:29:7B:CC:8E:1C:AD:BD:59:D4 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F432858499DBF302D586986855AB35540 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 396253 IP address blocks: 163.120.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:30:2d:58:69:86:85:5a:b3:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=dc63bffe-9688-419b-832c-f5753da6337c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:17:ca:81:13:bf:8e:a7:9f:9b:34:58:9c: e1:3a:26:97:1c:5e:75:fe:7c:cb:10:9a:17:5a:87: 67:da:b7:a5:93:ff:3c:6a:da:d5:b7:f3:02:0b:08: 33:31:80:77:39:35:8a:72:d1:7b:78:86:2e:de:f7: 51:55:02:a1:85:67:b6:e9:08:fa:aa:8c:57:1f:8b: 7c:ec:70:bc:37:b3:ad:a6:51:b1:6a:21:e4:b9:1e: be:f2:47:7f:b4:ae:e0:01:02:0f:37:5e:e5:d8:aa: 0d:40:6a:ce:11:40:07:aa:6d:f6:7f:2e:44:20:40: 7f:de:9b:a8:2e:7d:87:11:da:b5:a3:f4:e6:83:ed: 63:d1:99:02:ae:db:67:88:1b:d8:15:96:7f:56:58: 36:c7:6c:88:60:bd:6d:26:dc:af:9e:d7:13:4a:4a: 46:f4:6b:8f:fe:46:60:c0:8e:d8:c4:8d:e7:65:cd: af:04:3e:7b:76:c9:8f:c8:9a:b5:de:3d:11:93:d6: d3:72:97:32:35:3a:2a:e9:0f:82:3c:b6:3e:54:35: 74:a0:65:92:20:bf:2f:d1:73:8b:71:81:69:20:29: 23:68:15:8e:95:24:8e:5c:a5:6b:64:be:07:76:02: 01:16:67:71:0c:5b:5a:0c:68:85:9f:89:4e:37:18: 53:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:70:1B:0E:57:8D:FC:13:81:F4:E6:29:7B:CC:8E:1C:AD:BD:59:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:02:e9:9b:24:38:18:40:3f:f1:c8:03:27:d9:42:cc:6a:a6: 1b:40:b1:55:2f:45:10:59:2c:1a:8a:9f:d7:7d:34:76:d8:5e: a0:2c:50:36:2d:1a:57:d7:1d:db:1e:14:de:12:80:db:14:04: f3:e5:ad:5e:88:83:eb:03:fc:33:2f:1b:1b:66:18:7a:e3:19: e6:d3:dc:84:61:69:a7:1b:34:d5:d0:8e:bb:38:a2:82:fb:19: 1e:d9:cb:24:76:70:39:2a:4a:ea:1d:6a:16:3f:3b:da:3b:16: d0:a3:df:4e:58:75:f6:a1:32:fc:da:7d:7b:f6:d1:81:2c:72: f8:12:93:8e:b0:d1:be:56:74:75:77:de:17:56:f7:04:0e:07: 10:e4:6e:5e:f9:f2:a2:1c:51:9f:90:5e:73:4a:76:2e:7f:df: 61:3d:08:a7:98:c8:96:59:aa:6c:b3:85:df:c3:23:86:6c:66: d4:2c:60:cd:1e:b9:f6:ab:78:c6:1a:ed:2c:d0:34:ca:df:d8: 06:39:f3:ac:1a:12:bf:7f:35:2b:c9:3b:ad:44:e5:2a:78:2e: 89:f6:d5:16:c6:7b:67:0b:7c:69:8d:bd:70:04:7e:a8:a0:e7: 19:59:73:08:30:1e:ff:37:17:bd:e5:2d:c0:5f:fd:7d:6a:cf: a1:36:ab:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzAtWGmGhVqzVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk ZGM2M2JmZmUtOTY4OC00MTliLTgzMmMtZjU3NTNkYTYzMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AkXyoETv46nn5s0WJzhOiaXHF51/nzLEJoX Wodn2relk/88atrVt/MCCwgzMYB3OTWKctF7eIYu3vdRVQKhhWe26Qj6qoxXH4t8 7HC8N7OtplGxaiHkuR6+8kd/tK7gAQIPN17l2KoNQGrOEUAHqm32fy5EIEB/3puo Ln2HEdq1o/Tmg+1j0ZkCrttniBvYFZZ/Vlg2x2yIYL1tJtyvntcTSkpG9GuP/kZg wI7YxI3nZc2vBD57dsmPyJq13j0Rk9bTcpcyNToq6Q+CPLY+VDV0oGWSIL8v0XOL cYFpICkjaBWOlSSOXKVrZL4HdgIBFmdxDFtaDGiFn4lONxhTnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNwGw5XjfwTgfTmKXvMjhytvVnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvOGI0NGEyMjAtZTdlMS0z MzNkLWEwYWMtNDY5NjQ3ZDNjYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkC6ZskOBhAP/HIAyfZQsxqphtAsVUvRRBZLBqKn9d9NHbYXqAsUDYt GlfXHdseFN4SgNsUBPPlrV6Ig+sD/DMvGxtmGHrjGebT3IRhaacbNNXQjrs4ooL7 GR7ZyyR2cDkqSuodahY/O9o7FtCj305YdfahMvzafXv20YEscvgSk46w0b5WdHV3 3hdW9wQOBxDkbl758qIcUZ+QXnNKdi5/32E9CKeYyJZZqmyzhd/DI4ZsZtQsYM0e ufareMYa7SzQNMrf2AY586waEr9/NSvJO61E5Sp4Lon21RbGe2cLfGmNvXAEfqig 5xlZcwgwHv83F73lLcBf/X1qz6E2qxo= -----END CERTIFICATE-----Generated at Mon Apr 28 15:53:10 2025 by rpki-client