$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/353de057-fc06-30ff-97f8-ce041f603565.roa File: 353de057-fc06-30ff-97f8-ce041f603565.roa (raw, json) Hash identifier: yZbGHnsKbH3PXB9eQEDxcQMaVy1JlGj2pPStEHdKBso= Subject key identifier: 72:2C:E4:2B:F6:F0:EB:35:45:93:60:C3:55:BB:30:36:FF:49:B3:3E Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285849BC74A67A7F586D9F4285A100 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/353de057-fc06-30ff-97f8-ce041f603565.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 396253 IP address blocks: 163.120.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:a6:7a:7f:58:6d:9f:42:85:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=a4ee160a-8dcb-4a94-93b3-6c3d72a72131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:df:2f:15:ce:26:f4:67:4f:8b:ad:7f:d9:50: 93:11:78:7b:5b:ff:9f:95:c1:e8:5e:47:3d:78:69: 1e:69:c7:1e:84:51:d0:43:76:9b:4f:d2:a8:21:b3: 97:77:9f:fc:62:e6:cc:11:8b:dd:05:65:32:58:19: 54:ab:4d:ed:1e:9b:37:b8:30:66:36:3c:bd:73:f8: 33:a7:7d:ac:7a:14:7a:0f:70:6f:54:fc:2e:5f:7d: b8:67:3d:8c:19:dc:0b:2d:09:1c:41:f1:41:7f:4b: dd:19:90:b1:61:c2:e2:87:d0:24:32:6b:f0:d0:cf: bb:da:ef:ea:8c:4a:82:22:3f:66:c8:a9:c0:06:13: 30:55:ea:df:ba:2d:ba:f7:cb:57:3e:77:bd:c1:2a: 55:d0:53:ae:bf:61:77:41:9f:e9:9e:ee:74:e7:3d: 69:67:3d:d1:36:df:ec:0a:63:53:48:04:4f:e5:e6: 34:74:71:dc:0b:1a:50:fb:64:cd:2f:b3:ec:85:e8: 99:4d:53:3d:24:39:94:08:55:de:fb:e3:b1:24:74: a0:f5:6b:32:dc:7c:7e:54:7f:ab:97:4d:d1:9b:b0: 75:65:fb:f5:d1:74:e6:71:69:5f:34:1c:17:07:0e: 70:58:0f:d0:6d:68:06:3b:5c:4b:54:b6:0b:c4:3a: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2C:E4:2B:F6:F0:EB:35:45:93:60:C3:55:BB:30:36:FF:49:B3:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/353de057-fc06-30ff-97f8-ce041f603565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a7:3c:f6:a5:9b:46:8b:a0:e5:7d:e8:f4:96:78:37:4d:af: 99:71:e3:3d:30:5f:c6:26:ce:0f:5d:df:8b:09:fd:3a:eb:aa: 83:65:46:af:aa:01:21:8e:25:e5:07:bf:e6:2f:4c:8d:db:3d: b3:3f:33:3d:0e:56:41:c2:2a:13:f2:36:9f:fe:76:28:6d:c5: e8:85:e1:f3:d7:73:5e:8d:71:af:7c:87:d4:11:68:89:25:8a: be:af:8c:71:de:94:f8:63:39:43:f8:d5:09:06:13:30:57:b0: fe:03:c0:d5:e8:91:bc:1c:2f:2d:97:ea:cf:4f:f9:54:91:62: 41:e3:9c:af:28:02:83:1b:04:c0:0d:6a:4c:29:83:6e:e8:f8: 9a:bf:b9:6a:b0:bb:15:9e:1e:10:6f:5b:c2:7c:24:b4:1c:4b: e3:71:89:b9:f1:7a:55:2f:ec:0f:7d:ed:03:60:a8:97:0e:1c: 10:e8:a3:19:b7:ac:df:69:51:16:0a:22:4c:49:3d:81:cc:d7: 53:d8:dc:c3:bd:06:2a:8b:d1:e5:14:d8:b6:8e:12:38:04:58: eb:27:fb:3d:5b:71:ad:9e:bb:be:3e:8a:42:01:4b:d0:2a:0c: 34:5a:d6:42:64:4f:05:c3:36:78:bc:62:6a:c9:c9:31:88:75: a1:47:e8:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dKZ6f1htn0KFoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk YTRlZTE2MGEtOGRjYi00YTk0LTkzYjMtNmMzZDcyYTcyMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm98vFc4m9GdPi61/2VCTEXh7W/+flcHoXkc9 eGkeaccehFHQQ3abT9KoIbOXd5/8YubMEYvdBWUyWBlUq03tHps3uDBmNjy9c/gz p32sehR6D3BvVPwuX324Zz2MGdwLLQkcQfFBf0vdGZCxYcLih9AkMmvw0M+72u/q jEqCIj9myKnABhMwVerfui2698tXPne9wSpV0FOuv2F3QZ/pnu505z1pZz3RNt/s CmNTSARP5eY0dHHcCxpQ+2TNL7PsheiZTVM9JDmUCFXe++OxJHSg9Wsy3Hx+VH+r l03Rm7B1Zfv10XTmcWlfNBwXBw5wWA/QbWgGO1xLVLYLxDqXmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIs5Cv28Os1RZNgw1W7MDb/SbM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMzUzZGUwNTctZmMwNi0z MGZmLTk3ZjgtY2UwNDFmNjAzNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo3hMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABinPPalm0aLoOV96PSWeDdNr5lx4z0wX8Ymzg9d34sJ/TrrqoNlRq+q ASGOJeUHv+YvTI3bPbM/Mz0OVkHCKhPyNp/+dihtxeiF4fPXc16Nca98h9QRaIkl ir6vjHHelPhjOUP41QkGEzBXsP4DwNXokbwcLy2X6s9P+VSRYkHjnK8oAoMbBMAN akwpg27o+Jq/uWqwuxWeHhBvW8J8JLQcS+NxibnxelUv7A997QNgqJcOHBDooxm3 rN9pURYKIkxJPYHM11PY3MO9BiqL0eUU2LaOEjgEWOsn+z1bca2eu74+ikIBS9Aq DDRa1kJkTwXDNni8YmrJyTGIdaFH6JY= -----END CERTIFICATE-----Generated at Sat May 10 19:00:39 2025 by rpki-client